3. In the next window, you can choose between IBM SKLM or Gemalto SefeNet KeySecure  server types, as shown in Figure 12-42. Select  Gemalto SefeNet KeySecure  and click  Next . 4. Add up to four SafeNet KeySecure servers in the next wizard window, as shown in  Figure 12-43 on page 638. For each key server, enter the name, IP address and TCP port  for KMIP protocol (default value is 5696). Note that server name is only a label, so it does  not need to be the real host name of the server. Although Gemalto SafeNet KeySecure uses an active-active clustered model, IBM  Spectrum Virtualize asks for a primary key server. The primary key server represents only  the KeySecure server that is used for key create and rekey operations. Therefore, any of  the clustered key servers can be selected as the primary. Selecting a primary key server is beneficial for load balancing. Any four key servers can be  used to retrieve the master key. Figure 12-42 Selecting Gemalto SafeNet KeySecure as key server type Chapter 12. Encryption  637