Home > Storage > PowerMax and VMAX > Data Protection > Dell PowerMax Data at Rest Encryption > Authentication keys
Authentication keys (AKs) are keys that are generated and managed using the D@RE key management infrastructure within the system or by an external key manager. AKs are generated as part of system initialization on D@RE-enabled systems and are used to unlock the drives for reads and writes.
The following functionality ensures the protection of AKs:
If a CS is removed, file access is not allowed without valid SSC credentials.
The following information applies to the recovery of AKs:
AKs include a unique keytag identity alias along with the key metadata that is appended to key data during the key wrap process. The keytag identity alias is used to check the integrity of the AK during unlock operation.