content_image/995091.jpg content_image/995092.jpg
Figure 9-111 shows how to add a certificate by using the Certificates page. 

<img src='content_image/995091.jpg'>

Figure 9-112 shows the setting of an Encryption Key Server as used for a 3956-CSA disk cache encryption and similar setup that is used with Tape Encryption. CSA disk cache and tape drive encryption use IBM Proprietary Protocol (IPP) to communicate with the IBM Security Key Lifecycle Manager (SKLM) for encryption management. 

<img src='content_image/995092.jpg'>

This same setup (IPP SKLM) is also used with Tape Encryption. The EKS assists encryption-enabled tape drives in generating, protecting, storing, and maintaining EKs that are used to encrypt information that is written to and decrypt information that is read from tape media (tape and cartridge formats). 

