Chapter 10—Encryption and Key Management Accessing the Encryption Feature
August 2017 User Guide—Spectra T50e Library
287
2. SelectorcleartheEnable Secure Initializationcheckboxtoconfigurethe
desiredinitializationmode.
Configure the Password
1. Ifyouwanttochangethecurrentencryptionuserpassword(s),enter
thenewpassword(s)inthe New Encryption Users Passwordfield(s)
usinganycombinationofthenumbers0‐9,loweranduppercase
alphabeticcharacters(a‐zand A‐Z),andtheatsymbol(@),dash(–),
underscore(_),andperiod(.)characters.
Notes: Theencryptionuserpasswordisseparatefromboththe
BlueScaleloginpasswordandtheencryptionkeypassword
youdefinewhenyouexportaBlueScaleencryptionkey(see
ExportanEncryptionKeyonpage309).
Securityisgreatlyenhancedwhentheuserwhoknowsthe
encryptionpasswordisdifferentfromtheuserwhoperforms
day‐to‐dayoperationssuchasimportingorexporting
cartridges.
IfBlueScaleProfessionaleditionMulti‐Usermodewas
selected,youmustenterthreeuniqueencryptionpasswords.
2. Retypethepassword(s)intheConfirmfield,thenclickOK.The
EncryptionConfigurationscreendisplays.
Initialization Mode Description
Standard mode Thepartitionsconfiguredtouseencryptionareaccessibletothehostsassoonas
thelibrarycompletesitsinitialization.Datacanbebackeduptopartitionsthat
supportencryptionwithoutenteringanencryptionpassword.TouseStandard
Mode,makesurethattheEnable Secure Initializationcheckboxiscleared.
Standardmodeis
thedefaultsetting.
Secure
Initialization mode
Thepartitionsconfiguredto useBlueScaleEncryptionkeymanagementarenot
accessibletothehosts untiltheencryptionpasswordisenteredthroughthe
EncryptionUserLoginscreen.Untilthattime,anyba cku porrestoreoperations
usingpartitionsthatuseencryptioncannotrun.
Toinitializetheencryptionpartit ionsandmakethemavailableforuse,eachtime
thelibraryisinitialized,auserwithsuperuserprivilegesmustfirstlogintothe
libraryandthenlogintotheencryptionfeatureusingtheencryptionpa ssword.
ToenableSecureInitializationmode,makesurethattheEnable Secure
Initializationcheckboxisselected.
SecureInitializationmodebecomesactiveafterthelibraryispower ‐cycled.
The BlueScale encryption user password is separate from the password used to log
into the library. Make sure you keep a record of this password. If you lose this
password, you are not able to configure the encryption settings.
If you are using BlueScale key management, you are not able to import/export
encryption keys that were already assigned and used with encrypted data.