Know your gear
The IBM Encryption Enablement supports two methods of configuring encryption. You can use a centralized key server that simplifies creating and managing encryption keys on the system. In addition, the system also supports storing encryption keys on USB flash drives. You can also have a simultaneous configuration of both key servers and USB flash drives to ensure redundancy of access to encrypted data if either method becomes unavailable, or if the keys are permanently lost.