This figure shows a typical site configuration containing the Integrated Cryptography Service Facility (ICSF). There are two sites with two KMAs each connected to a tape library. The ICSF (IBM Mainframe) connects to the Key Management Network which connects to the WAN and OKM GUI.