Displaying encryption key manager (EKM) status

Use the DISPLAY IOS,EKM command to display the current hostnames and connection numbers of encryption key management.

Use the DISPLAY IOS,EKM,VERIFY={PRIMARY|SECONDARY|ALL} to verify the connection of encryption key manager. Note that the initial IOS099I message that is issued immediately in response to this command does not show the actual validity of the encryption key manager's connections. An IOS631I message indicating that the encryption key manager was successfully connected, or an IOS627E message indicating that there was a failure is to be issued as well and might appear several minutes after the IOS099I message is displayed.

 
D IOS,EKM[,VERIFY={PRIMARY|SECONDARY|ALL}]         
         [,L={a|name|name-a}             ]

IOS,EKM: Displays the host names of the primary and secondary encryption key managers, the maximum number of connections and the maximum number of permanent connections that can be used for encryption key management.
VERIFY=PRIMARY: Initiates an asynchronous test exchange with the primary encryption key manager to verify its usability.
VERIFY=SECONDARY: Initiates an asynchronous test exchange with the secondary encryption key manager to verify its usability.
VERIFY=ALL: Initiates an asynchronous test exchange with both the primary and secondary encryption key managers to verify their usability.
L=a, name, or name-a: Specifies the display area (a), console name (name), or both (name-a) where the display is to appear.
If you omit this operand, the display is presented in the first available display area or the message area of the console through which you enter the command.

Example 1:

To display the current encryption key manager settings, enter:

D IOS,EKM

The system displays the following message:

 
SY1  IOS099I 17.04.49 EKM HOSTS 833 
PRIMARY HOSTNAME=text1
SECONDARY HOSTNAME=text2
MAX CONNECTIONS = dd1 PERMANENT CONNECTIONS = dd2

Example 2:

To test the connectivity of the primary encryption key manager, enter:

D IOS,EKM,VERIFY=PRIMARY

The system first displays the following message:

 SY1 IOS099I 17.04.49 EKM HOSTS 833
 PRIMARY HOSTNAME=text1 
 SECONDARY HOSTNAME=text2 
 MAX CONNECTIONS = dd1 PERMANENT CONNECTIONS = dd2

The system then displays one of the following two messages:

If the encryption key manager connection is successfully verified, the system displays the following message:
```
 
IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED
```
If the encryption key manager connection is not successfully verified and has failed, the system displays the following message:
```
 
IOS627E PRIMARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE CONNECTED DUE TO reason
```