Key serving management

The IBM® Security Guardium® Key Lifecycle Manager solution assists IBM encryption-enabled devices in generating, protecting, storing, and maintaining encryption keys. You can use keys to encrypt and decrypt information that is written to and read from devices.

IBM Security Guardium Key Lifecycle Manager acts as a background process that is waiting for key generation or key retrieval requests sent to it through a TCP/IP communication path between itself and the tape library, tape controller, tape subsystem, device driver, or tape drive. When a drive writes encrypted data, it first requests an encryption key from IBM Security Guardium Key Lifecycle Manager.