# Key Management Center and DCNM-SAN Server

Determine which of the following key management strategies and policies are appropriate for you:

• Use Cisco KMC or KMC with RSA Key Manager for the data center.

• Use PostgreSQL database or Oracle Express as the database.

We recommend that you use PostgreSQL as the database.

• Use shared key mode or unique key per tape.

• Configure key-on-tape mode.

• Use tape recycling.

Note For more information about key policies, refer to the Storage Media Encryption Key Managem ent White Paper and “Configuring Key Management Operations”

• Use basic or standard or advanced key security mode.

To learn more about master key security modes, refer to “Configuring SME Cluster Management Using the GUI”

If you are using smart cards in the standard or advanced security mode, ensure that you do the following:

• Install the GemPlus smart card reader drivers on the host used for SME provisioning. These card reader drivers are included in the Cisco MDS 9000 Management Software and Documentation CD-ROM.

• Order the required number of smart cards and readers.

• Identify a host in the customer environment for setting up the DCNM-SAN and KMC.

Refer to “Storage Media Encryption” to learn about the requirements.