topic Re: NSE drives and key management server in ONTAP Hardware

NSE drives and key management server

MPERIYAK — Wed, 04 Jun 2025 21:51:43 GMT

Need help with a key management server. I did buy the FAS 8040 with NSE drives. No budget for a kms server.

Was of the opinion that I can get the encryption going without a KMS. Is this true ? I know the risk of maintaining my keys etc..But it is ok.

If I need a KMS are there any cheap alternatives apart from Gemalto/Safenet

Re: NSE drives and key management server

NigelM — Wed, 09 Mar 2016 16:49:27 GMT

Hi There

I am afraid it is not true, for NSE you need a KMS. IBM Tivoli Lifetime Key Manager (TKLMv2) should do the trick - see attached doc or as you mention, SafeNet Keysucure

Re: NSE drives and key management server

zacharyt — Wed, 06 Jul 2016 17:08:54 GMT

Update: ONTAP 9 now has OKM ( Onbox Key Management ) meaning you no longer have to purchase an external KMIP key server. OKM is included with the purchase price at no additional cost.