Enforcer password and config

Does the nforcer password should be the same with SEPM?

Or should it be the same as the pre-shared key or encryption password?

and for the config part:

If the format is:

spm ip ________ group ________ http 8014 key ________

after the key command, I can use either the encryption password or the pre-shared key right (if I can't remember the encryption password)?