ip = $ip_in; $this->port = $port_in; } } $interval = get_ekm_test_interval($user); $warningThreshold = get_ekm_hb_delay_warn_count($user); if ($_SERVER[REQUEST_METHOD] == "POST") { $operationInProgress = true; $status = new ReturnStatus(); // Get server type $type = intval($_POST["type"]); // Collect manager info $managers = array(); for($i = 0; $i < 10; $i++) { $ipname = "ip_".$i; if(strlen($_POST[$ipname]) > 0) { $manager = new ServerAddress($_POST[$ipname], $type == 2 ? 6000 : intval($_POST["port_".$i])); error_log("Adding manager: ".print_r($manager, true)); array_push($managers, $manager); } } error_log("Setting manager info: TYPE = ".print_r($type, true)."\n".print_r($managers, true)); set_ekm_type($user, $type); set_ekm_multi($user, $managers, $type, ($type == 1 || $type == 5 ? $_POST["useSSL"] : true)); // Setup background path diags $diags_enabled = isset($_POST["diags"]); $new_interval = $diags_enabled ? intval($_POST["interval"]) : 0; if($interval != $new_interval) { set_ekm_test_interval($user, $new_interval); } $new_warningThreshold = $diags_enabled ? intval($_POST["warningThreshold"]) : 3; if($warningThreshold != $new_warningThreshold) { set_ekm_hb_delay_warn_count($user, $new_warningThreshold); } print $status->out(); return; } $ekmDiagIntervals = array(); for($i = 5; $i <= 60; $i += 5) { $ekmDiagIntervals[$i] = $i; } $ekmWarningThresholds = array(); for($i = 0; $i <= 24; $i++) { $ekmWarningThresholds[($i == 0 ? "Off" : $i)] = $i; } // Get the encryption info we need $ekmType = get_ekm_type($user); $qekmDefaults = get_ekm_multi($user, 1); $akmDefaults = get_ekm_multi($user, 2); $kmipDefaults = get_ekm_multi($user, 4); $tklmDefaults = get_ekm_multi($user, 5); // Determine which info to show by default $defaultEkm = $akmDefaults; if($ekmType == 4) { $defaultEkm = $kmipDefaults; } else if($ekmTYpe == 1) { $defaultEkm = $qekmDefaults; } else if($ekmTYpe == 5) { $defaultEkm = $tklmDefaults; } // Determine if LME is enabled on a partition $hasLMEPartition = false; $libs = get_logical_libraries($user, $sortCriteria); foreach($libs as $lib) { if($lib->method == 4) { $hasLMEPartition = true; break; } } $hasLoadedEkmDrive = false; $ekmServerTypeMap = array(); $drives = get_all_drives($user, $sortCriteria); foreach($drives as $drive) { // Determine if an encryption-capable drive is loaded. if($drive->encryptionSupported && $drive->barcode != "") { $hasLoadedEkmDrive = true; } // Determine which ekm types are actually supported, and use this to // build the list of server types to show. if($drive->encryptionSupported && ($drive->vendor == "HP") || ($drive->vendor == "IBM" && getDriveGeneration($drive) >= 5)) { $ekmServerTypeMap[2] = "SKM"; $ekmServerTypeMap[4] = "KMIP Key Manager"; } if($drive->encryptionSupported && $drive->vendor == "IBM") { $ekmServerTypeMap[1] = "Q-EKM"; $ekmServerTypeMap[5] = "TKLM"; } } // Determine if encryption is licensed $hasEKMLic = is_ibm_encryption_licensed($user); function up_arrow($i) { if($i > 0) { echo ""; } } function down_arrow($i) { if($i < 9) { echo ""; } } ?> Setup - Encryption Key Server Access Configuration

Setup - Encryption System Configuration

Set up the encryption key management server access for library managed encryption.

Host names may be entered if DNS is configured; otherwise enter IPv4 or IPv6 addresses only.

Note: 
These server settings are only applicable when a partition's encryption method is set to library managed encryption (see ">Setup->Encryption->Partition Configuration).
You cannot edit the encryption system configuration when a partition is set to library managed encryption.

You cannot edit the encryption system configuration when a tape cartridge is loaded in an encrytion-capable tape drive.

1) { ?>

0); ?>

= 2 && $type != 4 ? "class=\"extendedManager\"" : "" ?>>
# Key Server IP Address or Host Name Port Order

An Encryption Key Management license must be installed on the library in order to use this feature.
Please click here to add a license key.