content_image/1008284.jpg
10.The Enable Encryption wizard guides you through the encryption setup process for key server. Click Next , as shown in Figure 8-46. 

<img src='content_image/1008284.jpg'>

11.Specify the primary key server name and IP address. Keep the default port 5696, which is used to communicate between IBM FlashSystem 900 and SKLM key server. 

Up to three other key servers can be added later. To ensure that keys are distributed to all other (secondary) key servers, you must configure replication on IBM Security Key Lifecycle Manager or manually transfer configuration by using backup or restore from the primary key server to all secondary key server. Click Next , as shown in Figure 8-47 on page 296). 

Note:  The supported versions of IBM Security Key Lifecycle Manager (up to V2.7, which was the latest code version available at the time of this writing) differentiate between the primary and secondary key server role. 

The Primary SKLM server as defined as the first Key Servers in the Enable Encryption wizard must be the server that is defined as the primary by SKLM administrators. 

