Centralize, simplify and automate encryption key management

Encrypting data with confidence,
across the enterprise and beyond


IBM® Security Key Lifecycle Manager—formerly Tivoli Key Lifecycle Manager—centralizes, simplifies and automates the encryption key management process to help minimize risk and reduce operational costs of encryption key management. It offers secure and robust key storage, key serving and key lifecycle management for IBM and non-IBM storage solutions using the OASIS Key Management Interoperability Protocol (KMIP).

IBM Security Key Lifecycle Manager helps customers meet regulations and standards such as the Payment Card Industry Data Security Standard (PCI DSS), Sarbanes-Oxley and the Health Insurance Portability and Accountability Act (HIPAA) by providing centralized control and management of encryption keys.

IBM Security Key Lifecycle Manager:

Provides more efficient, simplified, consolidated and transparent key management

Offers simple secure integration between IBM storage systems and IBM Security Key Lifecycle Manager

Reduces key management costs

Certified Communications

Reduces operating costs, speeds implementation and enables interoperability with wizard-based assistance


IBM Security Key Lifecycle Manager V2.6 enhancements include:

 

OS-independent Replication, Backup, and Restore

   

Expanded replication support

   

NSA Suite B compliance

   

Expanded SSL/KMIP Server certificate support

   

Compliance with KIMP 1.2 and Storage Networking Industry Association Secure Storage Industry Forum (SNIA-SSIF) certification

   

AES 256-bit Master Key

 

Basic Operating System Requirements for IBM Security Key Lifecycle Manager V2.6:

 

System components

Minimum values*

System memory (RAM)

4 GB

Processor speed

Linux and Windows systems
3.0 GHz single processor
AIX and Sun Solaris systems
1.5 GHz (2-way)

Disk space free for IBM Security Key Lifecycle Manager and prerequisite products such as DB2

16 GB

Disk space free in /tmp or C:\temp

4 GB

Disk space free in /home directory for DB2

7 GB

Disk space free in /var directory for DB2

1 GB on Linux and UNIX operating systems

 

Operating System Support Refresh provides support for the following Operating Systems for SKLM V2.6

 

Platform

Operating System

AIX

AIX 6.1 POWER

AIX

AIX 7.1 POWER

Linux

SUSE Linux Enterprise Server (SLES) 11 x86-64

Linux

SUSE Linux Enterprise Server (SLES) 10 x86-64

Linux

SUSE Linux Enterprise Server (SLES) 11 System z

Linux

Red Hat Enterprise Linux (RHEL) Server 7 x86-64

Linux

Red Hat Enterprise Linux (RHEL) Server 7 System z

Linux

Red Hat Enterprise Linux (RHEL) Server 6 x86-64

Linux

Red Hat Enterprise Linux (RHEL) Server 6 System z

Windows

Windows Server 2012 Standard Edition x86-64

Windows

Windows Server 2012 R2 Standard Edition x86-64

IBM Security Key Lifecycle Manager and IBM Security Key Lifecycle Manager for z/OS® support a range of storage products and models on both distributed and mainframe platforms.

Product – Tape Storage

Product – Tape Storage Machine Type Model
TS1120 Tape Drive 3592 E05
TS1130 Tape Drive 3592 E06/EU6
TS1140 Tape Drive 3592 E07
TS1150 Tape Drive 3592 E08
TS2900 Tape Autoloader 3572 S4H, S4E, S4R, S3H, S3E, S3R
3592 C20 Frame 3592 C20
TS1120 Tape Controller 3592 C06, J70
TS3100 Tape Library
TS3200 Tape Library
3573 L2U, L4U, LTO4, LTO5, LTO6
LTO-4-specific models: S42, S44, E42, E44, F4S, S4S, F4H, S4H
TS3310 Tape Library 3576 L5B, E9U
TS3400 Tape Library 3577 L5U
TS3500 Tape Library 3584

L32, L22, L23, L52, L53, LT07

3494 Tape Library 3494 L10, L12, L14, L22
3953 Library Manager 3953 F05
TS2240 Tape Drive 3580 H4S/S4E
TS2250 Tape Drive 3580 H5S/S5E
TS2260 Tape Drive 3580 H6S/S6E
TS2340 Tape Drive 3580 S43/S4X
TS2350 Tape Drive 3580 S53/S5X
TS1040 Ultrium Tape Drive 3588 F4A
TS1050 Ultrium Tape Drive 3588 F5A
TS1060 Ultrium Tape Drive 3588 F6A
TS1070 Ultrium Tape Drive 3588 LTO7
TS4500 Tape Library 3584 S25, S55, D25, D55, L25, L55
TS7740 Virtualization Engine*    
TS7700 Virtualization Engine*    

NOTE: The TS7700 back end tape drives are served keys from SKLM. The virtual tape drives (disks) within the TS7700 can also be encrypted. The virtual tape drive encryption does not use SKLM

Product –Disk Storage

Product –Disk Storage Machine Type Model
DS8000 Storage Controller 2107 921, 922, 9A2, 931, 932,9B2
DS8000 Storage Controller 2421 931, 932, 9B2, 941
DS8000 Storage Controller 2422 931, 932, 9B2, 941
DS8000 Storage Controller 2423 931, 932, 9B2, 941
DS8000 Storage Controller 2424 931, 932, 9B2, 941
DS8800 Storage Controller 2421 951, 95E
DS8800 Storage Controller 2422 951, 95E
DS8800 Storage Controller 2423 951, 95E
DS8800 Storage Controller 2424 951, 95E
DS8870 Storage Controller 242x 961, 96E
DS8880 Storage Controller 242x 961, 96E
DS5020 Storage Controller 1814 20A
DS5100 Storage Controller 1818 51A
DS5300 Storage Controller 1818 53A
DS3500 Storage Controller 1746 C2A, C4A, C4T, A2S, A2D, A4S, AD, T4D
DS3700 Storage Controller 1818 80C
IBM System Storage SAN32B-E4 2498-E32  

Other Storage Products

Other Storage Products Machine Type Model
IBM Spectrum Accelerate Storage System (formerly XIV)    
IBM Spectrum Scale General Parallel File System (formerly GPFS)    
     
Quantum i500 and i2000 Tape Libraries    
Quantum i6000    
     
Spectra T50   LTO5

Spectra T50e

  LTO5

Spectra T120

  LTO6

Spectra T200

 

LTO5, LTO6

Spectra T380

 

LTO5, LTO6, TS1140/TS1150

Spectra T680

 

LTO5, LTO6

Spectra T950

 

LTO5, LTO6, TS1140/TS1150

Spectra TFinity

 

LTO5, LTO6, TS1140/TS1150

     
Dell ML6000 Tape Library    
Dell TL1000 Tape Library    
Dell TL2000 Tape Library    
Dell TL4000 Tape Library    
     
Emulex OneCommand Guardian (part number 2Port-02-100) with OneSecure HBAs using a prefix that starts with LPSe12002    
     
NetApp Network Appliance FAS2040 FAS 2040
Network Appliance FAS2240 FAS 22xx
Network Appliance FAS2552, FAS2554, & FAS2520 FAS 25xx
Network Appliance FAS2554A FAS 25xx
Network Appliance FAS3200 FAS 32xx
Network Appliance FAS6200 FAS 62xx
Network Appliance FAS8000 FAS 8xxx
     
Lenovo System x Servers with Self-Encrypting Drives    

Not in Sverige?

Lätt att få svar på dina frågor.

Vill du ha hjälp?

Lätt att få svar på dina frågor.