Quantum Scalar i6 User Manual

www.quantum.com
Scalar Key Manager 2.5
Scalar Key Manager 2.5
Quick Start Guide
This quick start guide provides basic installation and configuration
instructions for the Scalar® Key Manager (SKM). SKM can be deployed in
one of two ways:
• a pair of physical appliances (servers) purchased from Quantum, or
• a pair of virtual machines (VMs) installed in a VMware® or KVM
environment.
Definition of terms: This guide uses the following terms to differentiate
between the two types of deployment:
• SKM appliance server — Physical key server purchased from
Quantum.
• SKM VM server — Virtual machine key server purchased from
Quantum and installed in a VMware or KVM environment.
• SKM server — Generic term applying to either an SKM appliance server
or an SKM VM server.
These instructions guide you through installing and configuring both
options. For more information, see the
Scalar Key Manager User’s Guide
located at http://www.quantum.com/ServiceandSupport/
SoftwareandDocumentationDownloads/SKM/Index.aspx. (Scroll down and
click the Documentation tab, and then locate the Product Use Guides
heading.)
Perform all of the steps, in order, before you begin encrypting tapes.
This instruction uses the following conventions:
Note: Notes emphasize important information related to the main topic.
Caution: Cautions indicate potential hazards to equipment and are
included to prevent damage to equipment.
Contents
Installing and Configuring the SKM
Appliance Servers ................................. 2
Items Required for Setup ................. 2
Installing the SKM Appliance Servers 3
Configuring the SKM Appliance
Servers .............................................. 5
Installing and Configuring the SKM
VMware Servers .................................... 9
Equipment and Software Needed for
VMware ............................................ 9
Deploying the .ova Image on
VMware .......................................11
Configuring the SKM VM Servers on
VMware .......................................... 11
Installing and Configuring the SKM KVM
Servers ................................................ 17
Equipment and Software Needed for
KVM ................................................ 17
Deploying the .raw Image on KVM 18
Configuring the SKM VM Servers on
KVM ................................................ 21
Installing TLS Certificates on the SKM
Server for Pre-SKM 2.4 (240Q) ........... 25
Installation Process ......................... 25
Requirements for Installing User-
provided TLS Certificates ................ 27
Installing TLS Certificates on the SKM
Server for SKM 2.4 (240Q) or Later .... 28
Begin the Installation ..................... 28
Executing the Script Using the -d
Option ............................................ 28
Executing the Script Without Using the
-d Option ........................................ 31
Generating Quantum Bundles for
Certificates ..................................... 36
Configuring Your Library For SKM ..... 38
Configuring the Scalar i40/i80 and
Scalar i500 Tape Libraries ............... 38
Configuring the Scalar i2000/i6000
Tape Library .................................... 40
Configuring the Scalar i3/i6 Tape
Library ............................................ 41
Backing Up the Servers ....................... 43
Configuring Multiple Libraries ........... 42

Quantum Scalar i6 Specifications

General

Category	Tape Library
Number of Drives	6
Management	SNMP
Tape Technology	LTO Ultrium
Drive Types Supported	LTO-9, LTO-8, LTO-7, LTO-6
Type	Tape Library
Capacity	Up to 75 TB (native)
Power Supply	Redundant power supplies standard
Humidity	20% to 80% non-condensing
Interface	SAS

Summary

Installing and Configuring SKM Appliance Servers

Items Required for Setup

Lists essential hardware and software components needed for setting up SKM appliance servers.

SKM Appliance Server Configuration Wizard

Password Management and Security

Emphasizes the critical importance of remembering the SKM admin password and its implications.

Installing and Configuring SKM VMware Servers

VMware Server Requirements

Deploying the .ova Image on VMware

VMware Server Initial Configuration

Installing and Configuring SKM KVM Servers

KVM Server Requirements

Deploying the .raw Image on KVM

KVM VM Server Initial Configuration

KVM VM Server License and Password Setup

Installing TLS Certificates

TLS Certificates for Pre-SKM 2.4 (240Q)

TLS Certificates for SKM 2.4 (240Q) or Later

Procedure for self-generating TLS certificates using SKM server version 2.4 (240Q) or greater.

Generating Certificates Using Default Options

Generating Certificates Without Default Options

Configuring Your Library For SKM

Configuring Scalar i40/i80 and i500 Tape Libraries

Step-by-step guide for configuring SKM on Scalar i40/i80 and i500 tape libraries.

Configuring Scalar i2000/i6000 Tape Library

Detailed instructions for configuring SKM on Scalar i2000/i6000 tape libraries.

Configuring Scalar i3/i6 Tape Library

Specific steps for configuring SKM on Scalar i3 and i6 tape libraries.

Backing Up the Servers

Critical Importance of Server Backups

Emphasizes the necessity of backing up SKM servers before using encryption keys.

Performing SKM Server Backup

Details the process of connecting via SSH and executing commands to back up SKM servers.