AES keys and the DS5000 storage server

When a DS5000 storage server starts, the device requests a key from IBM Security Guardium Key Lifecycle Manager to unlock disk drives.

In response, IBM Security Guardium Key Lifecycle Manager obtains an existing AES key from the keystore. IBM Security Guardium Key Lifecycle Manager wraps the AES key for secure transfer to the DS5000 storage server, which unwraps and uses the key to unlock disk drives.