Configuring keygen key management

Complete the configuration steps in the correct order.

  1. Complete the prerequisites. For more information, see Prerequisites for keygen.
  2. Generate master keys. For more information, see Generating the master key.
  3. Generating usage key triplets. For more information, see Generating usage key triplets.
  4. Distribute the key triplet files to every instance. For more information, see Distributing keys.
  5. Enable and configure global data encryption settings. For more information, see Enabling and configuring global data encryption settings.
  6. Set up key entry and key management users. For more information, see Setting up key entry and key management users.
  7. Prepare a master key for activation. For more information, see Preparing a keygen master key for activation.
  8. Activate a master key. For more information, see Activating a keygen master key.
  9. Enable cardholder data encryption. For more information, see Enabling cardholder data encryption.
  10. Enforce regular key changes. For more information, see Enforcing regular key changes.

For information about resolving problems that might occur, see Troubleshooting key management.

After the system is operational, the following maintenance tasks can be completed as needed: