Manage Encryption

Refer to the following topics for information about managing encryption and configuring KMIP for ThinkAgile CP Cloud Controller

• Understanding Encryption
  To provide security against a situation where disks or a storage enclosure is physically stolen or disposed of inappropriately, ThinkAgile CP storage provides full disk encryption-at-rest capability.
• Understanding KMIP Compatibility
  ThinkAgile CP is compatible with two vendors to support KMIP. Gemalto SafeNet Key Secure and Vormetric DSM key server are third-party, centralized key management platforms for clients who are required to use a KMIP infrastructure and FIPS 140-2 certification. Both vendors provide the solutions in hardware and virtual software appliance.
• Configure KMIP
  To configure KMIP, set up and configure a supported KMIP server and then configure the KMIP client.
• Configure Vormetric DSM
  The following steps describe how to configure Vormetric DSM to handle KMIP client requests from ThinkAgile CP storage controllers.
• Configure SafeNet KeySecure
  The following steps describe how to configure SafeNet KeySecure to handle KMIP client requests from ThinkAgile CP storage controllers.
• Configure the KMIP client
  Complete these steps to configure the KMIP client.