628 Implementing the IBM Storwize V7000 with IBM Spectrum Virtualize V8.2.1
Enabling encryption using SKLM
Before you create a key server object in the storage system, the key server must be 
configured. Ensure that you complete the following tasks on the SKLM server before you 
enable encryption on the storage system:
/SM590000Configure the SKLM server to use Transport Layer Security version 1.2. The default 
setting is TLSv1, but IBM Spectrum Virtualize supports only version 1.2. So, set the value 
of security protocols to SSL_TLSv2 (which is a set of protocols that includes TLSv1.2) in 
the SKLM server configuration properties.
/SM590000Ensure that the database service is started automatically on startup.
/SM590000Ensure that there is at least one Secure Sockets Layer (SSL) certificate for browser 
access.
/SM590000Create a SPECTRUM_VIRT device group for IBM Spectrum Virtualize systems.
For more information about completing these tasks, see the SKLM documentation at IBM 
Knowledge Center.
Access to the key server storing the correct master access key is required to enable 
encryption for the cluster after a system restart, such as a system-wide reboot or power loss. 
Access to the key server is not required during a warm reboot, such as a node exiting service 
mode or a single node reboot. The data center power-on procedure must ensure key server 
availability before the storage system using encryption is booted.
To enable encryption by using an SKLM key server, complete the following steps:
1. Ensure that service IPs are configured on all your nodes.
2. In the Enable Encryption wizard Welcome tab, select Key servers and click Next, as 
shown in Figure 12-30. 
Figure 12-30   Selecting Key server as the only provider in the Enable Encryption wizard