Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
310 Quantum Scalar i6000 User’s Guide
Note: If you want to change a partition’s encryption method,
make sure that the tape drives in that partition do not have
cartridges loaded. If there are cartridges in the tape drives,
you cannot change the encryption method.
3 Select the partition whose encryption method you want to change.
4 Change the encryption method by selecting or deselecting the
Library Managed check box. The supported methods include:
Note: When you change a partition from Library Managed to
Application Managed, any encrypted data that was written
to the tapes while the partition was configured for library
managed encryption can no longer be read, until you
change the partition back to Library Managed.
5 To enable FIPS mode on all tape drives in the partition, click the FIPS
check box.
Note: There are specific requirements for FIPS. See FIPS-Certified
Encryption Solution on page 289 for details.
Method Description
Application
Managed (default)
This is the default setting if you have
encryption-capable tape drives in the
partition. This option should be used
unless
you are connecting the library to an external
EKM server.
This option allows an external backup
application to provide encryption support to
all encryption-capable tape drives and media
within the partition.
Note: If you want an application to manage
encryption, you must specifically configure
the application to do so.
Library Managed Enables encryption support via connected
EKM servers to the partition. Choose this
option for SKM, Q-EKM, TKLM, SKLM or
SafeNet key servers.
To Next Page
Loading...
