Lock/Unlock the KMA

Lock a KMA to block it from accessing data unit keys and servicing agent requests.

Available to: Security Officer (unlocking requires a quorum)

1. In the left navigation menu, expand System Management, expand Local Configuration, and then select Lock/Unlock KMA.
2. Click Lock KMA or Unlock KMA.
3. Unlocking the KMA requires a quorum. Within the Key Split Quorum Authentication dialog, the existing quorum must type their usernames and passphrases to authenticate the operation. See Quorum Authentication for more information.

Enable or Disable Autonomous Unlock Option

Autonomous unlock allows the KMA to automatically unlock after a reset.

Note:

Oracle recommends disabling autonomous unlock for maximum security. When disabled, the KMA remains locked and unable to service agents until a quorum unlocks it.

Available to: Security Officer (requires a quorum)

1. In the left navigation menu, expand System Management, expand Security, expand Core Security, and then select Autonomous Unlock Option.
2. Click either Enable Autonomous Unlock or Disable Autonomous Unlock.
3. Within the Key Split Quorum Authentication dialog, the quorum must type their usernames and passphrases to authenticate the operation. See Quorum Authentication for more information.