2016-03-08 08:09 AM
Need help with a key management server. I did buy the FAS 8040 with NSE drives. No budget for a kms server.
Was of the opinion that I can get the encryption going without a KMS. Is this true ? I know the risk of maintaining my keys etc..But it is ok.
If I need a KMS are there any cheap alternatives apart from Gemalto/Safenet
2016-03-09 08:46 AM - edited 2016-03-09 08:49 AM
I am afraid it is not true, for NSE you need a KMS. IBM Tivoli Lifetime Key Manager (TKLMv2) should do the trick - see attached doc or as you mention, SafeNet Keysucure
2016-07-06 10:08 AM
Update: ONTAP 9 now has OKM ( Onbox Key Management ) meaning you no longer have to purchase an external KMIP key server. OKM is included with the purchase price at no additional cost.