Transfer Keys Between Clusters

Key transfer allows keys and associated data units to be securely exchanged from one cluster to another.

Typically, you can use key transfer to exchange tapes between companies or within a company with multiple clusters. The key transfer process involves:

• Configure Key Transfer Partners — Each cluster configures the other cluster as a transfer partner. This requires each party to establish a public/private key pair and then provide the public key to the other party.
• Export a Transfer Partner Key/Import Transfer Partner Keys — The user exports keys from one cluster and imports them into the other. This step can be done many times. The transfer file is signed using the sending party's private key and encrypted using the receiving party's public key. This allows only the receiving party to decrypt the transfer file using their own private key. The receiving party can verify the file was in fact produced by the expected sender by using the sender's public key.