text: **Enabling encryption using SKLM**
  Before you create a key server object in the storage system, the key server must be 
  configured. Ensure that you complete the following tasks on the SKLM server before you 
  enable encryption on the storage system: 
  
  (cid:2) Configure the SKLM server to use Transport Layer Security version 1.2. The default 
  
  setting is TLSv1, but IBM Spectrum Virtualize supports only version 1.2. So, set the value 
  of security protocols to*SSL_TLSv2*(which is a set of protocols that includes TLSv1.2) in 
  the SKLM server configuration properties. 
  
  (cid:2) Ensure that the database service is started automatically on startup. 
  
  (cid:2) Ensure that there is at least one Secure Sockets Layer (SSL) certificate for browser 
  access. 
  
  (cid:2) Create a SPECTRUM_VIRT device group for IBM Spectrum Virtualize systems. 
  
  For more information about completing these tasks, see the SKLM documentation at IBM 
  Knowledge Center. 
  
  Access to the key server storing the correct master access key is required to enable 
  encryption for the cluster after a system restart, such as a system-wide reboot or power loss. 
  Access to the key server is not required during a warm reboot, such as a node exiting service 
  mode or a single node reboot. The data center power-on procedure must ensure key server 
  availability before the storage system using encryption is booted. 