FAS and V-Series Storage Systems Discussions
Need help with a key management server. I did buy the FAS 8040 with NSE drives. No budget for a kms server.
Was of the opinion that I can get the encryption going without a KMS. Is this true ? I know the risk of maintaining my keys etc..But it is ok.
If I need a KMS are there any cheap alternatives apart from Gemalto/Safenet
See The Solution
I am afraid it is not true, for NSE you need a KMS. IBM Tivoli Lifetime Key Manager (TKLMv2) should do the trick - see attached doc or as you mention, SafeNet Keysucure
Update: ONTAP 9 now has OKM ( Onbox Key Management ) meaning you no longer have to purchase an external KMIP key server. OKM is included with the purchase price at no additional cost.
View solution in original post