Previous Topic: Manage Compromised Keys

Next Topic: Remove Keys Automatically from Your Key Repository

TBEKMUTL Utility

Use the TBEKMUTL utility to process an extract file of information about symmetric keys from the tape management system. This extract file identifies specific instances of symmetric keys that are no longer in use so that the keys can be marked for deletion. This processing of keys for automatic removal is optional.

This utility never deletes a key. It places the key marked for deletion on a queue where it is retained for a grace period of 90 days. After 90 days in the queue, the appropriate BES subsystem deletes the key. Before the retention period expires, if a key on this queue is referenced by a tape job or if the BES Key Index appears in a subsequent run of this utility, the key is taken off the queue and reclaimed for decrypting the encrypted data.