text: IBM Security Key Lifecycle Manager is an IBM solution that provides the infrastructure and 
  processes to locally create, distribute, backup, and manage the lifecycle of encryption keys 
  and certificates. Before activating and enabling encryption, you must determine the method of 
  accessing key information during times when the system requires an encryption key to be 
  present. 
  
  When Security Key Lifecycle Manager is used as a key manager for encryption, you can run 
  into a deadlock situation when the key servers are hosted on encrypted storage provided by 
  the IBM Storwize V7000. That is, if the storage that is used by these SKLM servers is 
  allocated from the encrypted pool on the same Storwize V7000. To avoid a deadlock 
  situation, ensure that the IBM Storwize V7000 node canisters can communicate with an 
  encryption server to get the unlock key after a power-on or restart scenario. 
  
  Data encryption is protected by the Advanced Encryption Standard (AES) algorithm that uses 
  a 256-bit symmetric encryption key in XTS mode, as defined in the Institute of Electrical and 
  Electronics Engineers (IEEE) 1619-2007 standard as XTS-AES-256. That data encryption 
  key is protected by a 256-bit AES key wrap when stored in non-volatile form. 