In Summary
The number of encryption keys that may be used for each volume depends on the
tape drive, the encryption standard, and method used to manage the encryption.
For transparent encryption of LTO 4 and LTO 5, (that is, using library-managed
encryption with the Encryption Key Manager,) the uniqueness of DKs depends on
the availability of a sufficient number of pre-generated keys to the Encryption Key
Manager.
Table 1-1. Encryption Key Summary
Encryption Management
Method
Keys used by
IBM Encryption T10 Encryption
Library-Managed Encryption 1 DK / cartridge N/A
Application-Managed
Encryption
Multiple DKs / cartridge Multiple DKs / cartridge
DK = Symmetric AES 256-bit DK
Chapter 1. Tape Encryption Overview 1-7
|
||