## Selecting RKM

Prerequisites

• Selecting the Key Manager can only be done when a SME cluster is created, and it cannot be changed unless PostgreSQL is reinstalled. The default is the Cisco Key Manager, so if you want to change the Key Manager to RSA, you must do so when the cluster is created.

Detailed Steps

To change the Key Manager setting to RSA, follow these steps:

1. Select Key Manager Settings and click RSA. The RSA settings fields are displayed.

2. Enter the RKM server IP address.

3. Enter the RKM ports.

4. Enter a password in the Client Keystore Password field. The password is supplied by the user security team that generated the certificate for SME. Retype the password to confirm.

5. Click Submit Settings. A warning is displayed requesting you to confirm the settings. Click OK to use these settings. Click Cancel if you do not want to use the settings.

Once the settings are saved, you cannot change the Key Manager.

The confirmation window displays the RKM server IP address and the RKM port number.