The Onboard Key Manager is a built-in tool that serves authentication keys to nodes from the same storage system as your data. When using OKM you do not need an external key manager to generate encryp...The Onboard Key Manager is a built-in tool that serves authentication keys to nodes from the same storage system as your data. When using OKM you do not need an external key manager to generate encryption keys – the keys are generated automatically – all you need to do is run “security key-manager onboard enable” After configuring the Onboard Key Manager, save the encrypted configuration data in a safe location so that you can use it if you need to perform a manual recovery operation.