Does the use of RSA Retained private keys limit availability?
Yes. The use of retained private keys creates an application single point of failure. Since RSA Retained private keys cannot be copied, backed up or scaled from a performance perspective, these keys should only be used if mandated by the customers’ security policy. For those customers that require a private key that is intended to be shared across logical partitions, they should use RSA keys encrypted under a host master key instead of a retained key. The use of the RSA keys encrypted under a host master key will prevent the loss of the key associated with the RSA Retained private key specific to the PCIXCC coprocessor.
