Chapter 7 Encryption Key Management
Configuring Encryption Key Management on the Library
Scalar i500 User’s Guide 200
• Export Current — Exports all the keys that were used to encrypt
the tape cartridges that are currently in the library performing
this export. This includes storage slots, I/E stations, and tape
drives. If a tape cartridge is no longer in the library, the key used
to encrypt the tape will not be exported. If a tape cartridge
barcode label is missing or changed, the key used to encrypt the
tape will not be exported.
•
Export Selective — Exports only the key(s) associated with a
string of characters that you type into the text box. Each key is
associated with its encrypted tape cartridge, identified by the
tape cartridge barcode. You can type in all or part of a tape
cartridge barcode, and any keys that are associated with that
string will be exported. This is helpful if you only want to export
a single key associated with a particular tape cartridge. If a tape
cartridge barcode label is changed, the key used to encrypt the
tape will not be exported.
5 Click
Apply.
All the exported keys are saved to a single encryption key file.
6 A
Save As dialog box opens allowing you to save the encryption key
file to a location on your computer. Choose a location and click Save.
Importing Data Encryption Keys
7
SKM servers provide a unique encryption key for each tape cartridge that
is encrypted. In order to read tapes encrypted by a different (i.e., source)
SKM server, you need to import the encryption keys used to encrypt
those tapes onto your SKM server (i.e., destination).
To import encryption keys:
1 Before starting this process, read and follow the sequence of steps
outlined in Sharing Encrypted Tape Cartridges
on page 196.
2 Receive the file of encryption keys from the source SKM server and
save it in a known location on your computer.
Note: This function is available to administrators and only applies
to SKM servers. Both SKM servers must be connected and
operational in order to import data encryption keys.