Set ESKM as Key Manager

  1. Run the filesys encryption key-manager set command to configure the system to use ESKM as key manager.

  • $filesys encryption key-manager set server <IP> port 5696 key-class <class name> server-type gklm kmip-user <username>.

image-20250627-093138.png

ESKM set as Key manager in Dell Data Domain

  1. Run the filesys encryption key-manager enable command to enable key management with ESKM , if key manager is disabled.

image-20250627-093429.png

Key Manager enabled in Dell Data Domain

  1. Run the filesys encryption key-manager show command to verify key management is enabled. 

c01ebfb8-52b2-4fb5-8604-16c32a656079.png

Key manager configuration details 

  1. Run the filesys encryption keys show detailed command to view the ESKM keys created on the system.

afc9af5d-0328-4817-8787-ca19507a1474.png

Run the filesys restart command to activate the key if it is in a deactivated state.