8464ch09_Oper.fm Draft Document for Review February 7, 2020 3:15 pm SDE explores the in-core encryption acceleration, which is available on VEC and VED (IBM  Power Systems P8 and P9) cluster models, with no significant effect on the global  performance of the cluster. SDE encryption can be enabled or disabled concurrently with  cluster operation by way of TS7700 MI.  SDT uses OpenSSL software libraries with the TLS1.2 protocol that follow AES standards.  AES-256 and AES-128 bit keys are supported. Logical volume data is encrypted within the  TS7700 before transport, so no special network requirements are needed. Note:  SDT cannot be enabled on a stand-alone cluster. FC 5281 is required to enable  Secure Data Transfer. Figure 9-82 shows an example of an SDT configuration window.  Figure 9-82 Secure Data Transfer page SDT features the following options: For more information about Secure Data Transfer, see 4.3.9, “Secure Data Transfer” on  page 175. GLYPH<SM590000> Encryption: This option allows customers to enable and disable encryption and select an  AES encryption key size by way of the MI as a concurrent activity. Selecting a key size  automatically enables encryption for this TS7700. AES-128 Encryption is enabled with  128-bit or 256-bit encryption. GLYPH<SM590000> Protocol: TS7700 supports TLS1.2. GLYPH<SM590000> SSL Certificate: The TS7700 uses a default certificate known as “lwiks” for SDT server  authentication. Optionally, users can upload their own trusted certificates from the MI SSL  Certificate window at  Access SSL Certificate . 510  IBM TS7700 Release 5.0 Guide