The EKMF Web plug-in

This allows the zkey utility to integrate with EKMF Web. Thus, EKMF Web can manage keys used by multiple Linux instances to encrypt volumes. The Linux instance must have access to a cryptographic adapter.

With EKMF Web for Linux, security is emphasized. Keys are never exposed in plain text, and are only available to authorized parties, where both the key protection and the authentication of authorized parties is secured by HSMs.

Figure 1 illustrates how key management on multiple Linux instances, as z/VM guests, KVM virtual machines, or in LPAR mode, can be handled from a single key-management system.