Dell PowerVault TL1000 - Library Managed Encryption Settings

To modify the encryption settings:
1. Expand Configure Library, if necessary, and click Encryption in the left navigation pane of the Web
User Interface.
2. In the Encryption method: drop-down menu, choose Library Managed Encryption (if the library is
purchased with the Library Managed Encryption feature) to enable encryption in your library.
Application Managed Encryption is also a choice. No further configuration steps are necessary for
Application Managed Encryption.
3. Select the Encryption policy settings (library-managed encryption only).
v Encrypt All - All tape cartridges that are loaded into the tape drive are encrypted.
v Internal Label - Selective Encryption - This option is used only for Symantec's Veritas NetBackup.
v Internal Label - Encrypt All - This option is used only for Symantec's Veritas NetBackup.
4. Select the Security settings (library-managed encryption only).
v Enable SSL for EKM - Select to enable secure communications between the tape library and the
EKM server.
5. Select the Primary EKM Server Settings (library-managed encryption only) - The address of the
primary encryption key manager on a server. IPv4 and IPv6 addresses are supported. Host names can
be entered instead of numerical IP addresses if the DNS server is specified.
v Address - The IP address of the primary encryption key manager.
v TCP port number - The port number of the primary encryption key manager for TCP. The default
port number is 3801.
v SSL port number - The port number of the primary encryption key manager for SSL. The default
port number is 443.
6. Select the Secondary EKM Server Settings (library-managed encryption only) - The address of the
secondary encryption key manager on a server. IPv4 and IPv6 addresses are supported. Host names
can be entered instead of numerical IP addresses if the DNS server is specified.
v Address - The IP address of the secondary encryption key manager.
v TCP port number - The port number of the secondary encryption key manager for TCP. The
default port number is 3801.
v SSL port number - The port number of the secondary encryption key manager for SSL. The default
port number is 443.
a29z0212
Figure 37. Library Managed Encryption settings
Installation and configuration 39