Overview
Protect data with a solution for diverse key lifecycle needs
IBM® Guardium® Key Lifecycle Manager delivers streamlined encryption key management and enhances security by providing centralized key management for IBM and non-IBM storage solutions, including cloud storage solutions and applications, ensuring seamless integration.
IBM Guardium Key Lifecycle Manager is an encryption key management tool that centralizes, simplifies and automates the key management process. It offers robust and security-rich key storage, key serving and key lifecycle management for self-encrypting applications and solutions by using interoperability protocols, including KMIP, IPP and REST, and interfaces such as PKCS#11. Guardium Key Lifecycle Manager helps clients meet regulations such as PCI DSS, Sarbanes-Oxley and HIPAA by providing access control, key rotation and other automated key lifecycle management processes.
In the spotlight
Features
Centralized control for the entire key lifecycle
Guardium Key Lifecycle Manager’s Certificate Vision dashboard provides deep insight into the health and status of your digital certificates. Users can quickly assess the expiration of managed certificates from a central location and drill down by category for greater detail. By contextualizing digital certificates, users can better understand their status, risk, expiration dates and other factors that influence network security.
The solution provides cryptographically proven, end-to-end security for key serving. It offers automated replication for high-availability deployments, supports Federal Information Processing Standard (FIPS) 140-3 Level 1, and offers users the option to use FIPS 140-3 Level 3 validated hardware to enhance key security.
Guardium Key Lifecycle Manager’s Certificate Vision dashboard provides deep insight into the health and status of your digital certificates. Users can quickly assess the expiration of managed certificates from a central location and drill down by category for greater detail. By contextualizing digital certificates, users can better understand their status, risk, expiration dates and other factors that influence network security.
The solution reduces operating costs, speeds up implementation and enables interoperability with wizard-based assistance. It enables administrators to quickly configure integration with KMIP, IPP or REST-compatible devices, HSM as well as Oracle TDE databases, and provides an administration welcome page that delivers critical notices. It offers a web-based GUI that helps ease key configuration and management tasks, including automating key provisioning, rotating keys and destroying keys.
Use cases
Put centralized key management into practice
Resources
Explore resources for secure key management
Pricing
How we price Guardium Key Lifecycle Manager
Guardium Key Lifecycle Manager requires a combination of both software and usage entitlements.
Eligible software license types:
- GKLM Basic Edition
- GKLM Container Edition for Distributed Platforms
- GKLM Container Edition for zCX
Eligible usage license types:
- Resource Value Units based on raw or usable decimal terabytes or petabytes of storage
- Device-type licenses for certain endpoints (Transparent Data Encryption Databases, VMware and others)