Draft Document for Review February 7, 2020 3:15 pm 8464ch09_Oper.fm Figure 9-111 shows how to add a certificate by using the Certificates page.  Figure 9-112 shows the setting of an Encryption Key Server as used for a 3956-CSA disk  cache encryption and similar setup that is used with Tape Encryption. CSA disk cache and  tape drive encryption use IBM Proprietary Protocol (IPP) to communicate with the IBM  Security Key Lifecycle Manager (SKLM) for encryption management. Figure 9-111 Installing a new customer provided certificate. Figure 9-112 Encryption Key Server Addresses with 3956-CSA disk cache and tape-encryption. This same setup (IPP SKLM) is also used with Tape Encryption. The EKS assists  encryption-enabled tape drives in generating, protecting, storing, and maintaining EKs that  are used to encrypt information that is written to and decrypt information that is read from  tape media (tape and cartridge formats).  Chapter 9. Configuring and operating the IBM TS7700  551