Chapter 13. Encryption 767
3. The wizard moves to the Key Servers tab, as shown in Figure 13-31. Enter the name and
IP address of the key servers. Note that the first key server specified must be the primary
SKLM key server.
4. The key server name serves just as a label, only the provided IP address will be used to
actually contact the server. If the key server’s TCP port number differs from the default
value for the KMIP protocol (for example, 5696), then enter the port number. An example of
a complete primary SKLM configuration is shown in Figure 13-31.
Figure 13-31 Configuration of the primary SKLM server
Note: The supported versions of IBM Security Key Lifecycle Manager (up to V2.7,
which was the latest code version available at the time of writing) differentiate between
the primary and secondary key server role. The Primary SKLM server as defined on
Key Servers screen of Enable Encryption wizard must be the server defined as the
primary by SKLM administrators.