620 Implementing the IBM Storwize V7000 with IBM Spectrum Virtualize V8.2.1
Key servers can have the following characteristics:
/SM590000Physical access to the system is not required to perform a rekey operation.
/SM590000Support for businesses that have security requirements that preclude use of USB ports.
/SM590000Possibility to use hardware security modules (HSMs) for encryption key generation.
/SM590000Ability to replicate keys between servers and perform automatic backups.
/SM590000Implementations follow an open standard (Key Management Interoperability Protocol - 
KMIP) that aids in interoperability.
/SM590000Ability to audit operations related to key management.
/SM590000Ability to separately manage encryption keys and physical access to storage systems.
USB flash drives have the following characteristics:
/SM590000Physical access to the system might be required to process a rekey operation.
/SM590000No moving parts with almost no read or write operations to the USB flash drive.
/SM590000Inexpensive to maintain and use.
/SM590000Convenient and easy to have multiple identical USB flash drives available as backups.
12.4.1  Starting the Enable Encryption wizard
After the license activation step is successfully completed on IBM Storwize V7000 control 
enclosures, you can now enable encryption. You can enable encryption after completion of 
the initial system setup by using the GUI or CLI. 
There are two ways in the GUI to start the Enable Encryption wizard. It can be started by 
clicking Run Task next to Enable Encryption on the Suggested Tasks window, as shown in 
Figure 12-21.
Figure 12-21   Enable Encryption from the Suggested Tasks window
Important: Maintaining confidentiality of the encrypted data hinges on security of the 
encryption keys. Pay special attention to ensure secure creation, management, and 
storage of the encryption keys.