LTO-5 driveLTO-4 drive
IncompatibleRead onlyLTO-2 media
Read onlyRead/Write (no encryption)LTO-3 media
Read/WriteRead/WriteLTO-4 media — unencrypted
Read/Write with encryption keyRead/Write with encryption keyLTO-4 media — encrypted
Read/WriteIncompatibleLTO-5 media — unencrypted
Read/Write with encryption keyIncompatibleLTO-5 media — encrypted
Your company policy will determine when you need to use encryption. For example, it may be
mandatory for company confidential and financial data, but not for personal data. Company policy
will also define how encryption keys should be generated and managed. Backup applications that
support encryption will generate a key for you or allow you to enter a key manually.
Using the Encryption Kit
The Encryption Kit includes two USB key server tokens. One key server token is available for use as
a backup for the other. Alternatively, you can save the encryption keys to a file and store that file in
a safe location.
To use the Encryption Kit, a key server token is inserted in the USB port on the back of the Library,
and encryption is enabled and configured from the RMI.
The Encryption Kit supports your manual security policies and procedures by providing secure storage
for encryption keys. Access to the key server tokens and their backup files is protected with
user-specified passwords. You will need to create processes to protect the tokens and secure the
passwords.
IMPORTANT:
When encryption is enabled with the Encryption Kit, the Library will not use encryption keys from
other sources, such as a key management system or application software. Disable encryption in
applications writing to the Library when encryption is enabled with the Encryption Kit. Applications
that attempt to control encryption while encryption is enabled with the Encryption Kit will not be able
to do so, which can cause backups or other write operations to fail.
See the Encryption Kit user guide for additional information on using the Encryption Kit.
Using application-managed encryption
Hardware encryption is turned off by default and is switched on by settings in your backup application,
where you also generate and supply the encryption key. Your backup application must support
hardware encryption for this feature to work. See http://www.hp.com/go/ebs for an up-to-date list
of other suitable backup software.
HP StorageWorks MSL2024, MSL4048, MSL8048, and MSL8096 Tape Libraries User and service
guide 27
To Next Page
Loading...
Need help?
General
