NSE drives and key management server

[MPERIYAK]

Need help with a key management server. I did buy the FAS 8040 with NSE drives. No budget for a kms server.

Was of the opinion that I can get the encryption going without a KMS. Is this true ? I know the risk of maintaining my keys etc..But it is ok.

If I need a KMS are there any cheap alternatives apart from Gemalto/Safenet

[NigelM]

Hi There

I am afraid it is not true, for NSE you need a KMS.  IBM Tivoli Lifetime Key Manager (TKLMv2) should do the trick - see attached doc or as you mention, SafeNet Keysucure

N

[zacharyt · Accepted solution]

Update:  ONTAP 9 now has OKM ( Onbox Key Management ) meaning you no longer have to purchase an external KMIP key server.  OKM is included with the purchase price at no additional cost.