Creating master encryption key

Edit online

The IBM Storage Protect server uses a master encryption key to encrypt and decrypt data that is stored in cloud-container storage pools.

About this task

The master encryption key is automatically generated when you start the server. The master encryption key is encrypted and is stored in the dsmkeydb.kdb key database. The key database is protected by a password. The password for accessing the key database is stored in the dsmkeydb.sth stash file.

Procedure

To create a password for accessing the key database that stores the master encryption key, complete the following steps:

  1. Issue the QUERY STATUS command to check if the key database is password enabled or not.
  2. Issue the SET SERVERPASSWORD command to create a password for the key database.