concept_system_manage_key_get_started_with_external_key_management.adoc

permalink	sidebar	keywords	summary
storage/concept_system_manage_key_get_started_with_external_key_management.html	sidebar	kmip, master key, key management, encryption at rest, software encryption at rest, ekm, ak, eks, seds	External key management \(EKM\) provides secure Authentication Key \(AK\) management in conjunction with an off-cluster external key server \(EKS\). The AKs are used to lock and unlock Self Encrypting Drives (SEDs) when encryption at rest is enabled on the cluster.

Get started with external key management

External key management (EKM) provides secure Authentication Key (AK) management in conjunction with an off-cluster external key server (EKS). The AKs are used to lock and unlock Self Encrypting Drives (SEDs) when encryption at rest is enabled on the cluster. The EKS provides secure generation and storage of the AKs. The cluster utilizes the Key Management Interoperability Protocol (KMIP), an OASIS defined standard protocol, to communicate with the EKS.

• Set up external management

• Rekey software encryption at rest master key

• Recover inaccessible or invalid authentication keys

• External key management API commands

Find more information

• CreateCluster API that can be used to enable software encryption at rest

• SolidFire and Element Software Documentation

• Documentation for earlier versions of NetApp SolidFire and Element products