External key management serviceThis section includes the following topics:About external KMSCertificate configuration and authorizationWorkflow for external KMS configurationValidating KMS credentialsConfiguring KMS credentialsConfiguring KMSConfiguring keys in an external KMS for NetBackup consumptionCreating keys in an external KMSDetermining a key group name during storage configurationWorking with multiple KMS serversWorking with external KMS during backup and restoreKey rotation Disaster recovery when catalog backup is encrypted using an external KMS serverAlerts for expiration of KMS credentials