CAUTION:
The key server token protects the encryption keys with a password. If you lose the key server token
password, you will not be able to restore data from your encrypted data cartridges using that key
server token. Neither you nor a service engineer can recover a lost key server token password.
Keep a copy of the key server token password in a safe place.
Changing the key server token name when using the MSL Encryption Kit
Procedure
1. Navigate to the Configuration > Encryption > USB—MSL Encryption Kit screen.
2. Expand the Password Management section.
3. Enter the new key server token name. The name can have up to 126 characters.
TIP:
Using a descriptive name, including the dates when the keys on the key server token were used,
could be helpful if your log of data cartridges written with keys on the key server token is lost.
4. Click Submit.
Generating a new write key when using the MSL Encryption Kit
Procedure
1. Navigate to the Configuration > Encryption > USB—MSL Encryption Kit screen.
2. Expand the Key Management section.
3. Click Apply.
Configuring automatic key generation when using the MSL Encryption Kit
When automatic key generation is enabled, the library will automatically request the key server token to
generate a new key periodically, according to the policy you configure. Be aware that when new keys are
created automatically they are not backed up until you do so manually. To avoid only having one copy of
the new key, set the automatic key generation policy for a time when you can back up the new key before
data cartridges are written using the new key.
Procedure
1. Navigate to the Configuration > Encryption > USB—MSL Encryption Kit screen.
2. Expand the Key Management section.
3. Set the policy for the new key generation frequency, and the date and time this will occur.
4. Click Submit to apply your selections.
78 Changing the key server token name when using the MSL Encryption Kit
To Next Page
Loading...
