Oracle ZFS Storage Appliance User Manual

Configuring OKM Keystore Encryption (BUI)
Related Topics
■
“Configuring LOCAL Keystore Encryption (BUI)” on page 560
■
“Configuring OKM Keystore Encryption (CLI)” on page 565
■
“Creating an Encrypted Project (CLI)” on page 567
Configuring OKM Keystore Encryption (BUI)
To configure encryption using the Oracle Key Manager (OKM), first set up the Key Manager
Server information, and then create keys for assigning to encrypted shares. For information
about encryption properties, see “Encryption Properties” on page 581.
Note - If the appliance is clustered, do not use the "one time passphrase" setting when creating
the OKM server agent otherwise registration on the other cluster node will fail and keys will not
be available on failover.
To create a key, you provide the name to be used for assigning the key to projects or shares.
1.
To configure the OKM keystore, go to the Shares > Encryption BUI page.
2.
Click OKM.
The OKM keystore information is displayed.
3.
To configure the server information, type the following information:
564 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016

Oracle ZFS Storage Appliance Specifications

General

Connectivity	10GbE, 40GbE, InfiniBand, Fibre Channel
Protocols	NFS, SMB, iSCSI, Fibre Channel, HTTP
Operating System	Oracle Solaris
Data Protection	snapshots, clones, remote replication
Data Reduction	Inline compression, deduplication
High Availability	Redundant hardware components (controllers, power supplies, fans). Automatic failover between controllers. Hot-swappable drives and components. Cluster configurations for increased availability and scalability.
Management Interface	Web-based GUI, CLI, REST API
Storage Type	Hybrid (SSD + HDD), All-Flash
Storage Capacity	Up to several petabytes
Encryption	AES-256 encryption at rest