Chapter 10—Encryption and Key Management Spectra SKLM Key Management
August 2017 User Guide—Spectra T50e Library
291
Configuring a Partition to Use a Spectra SKLM Server
Overview AfterconfiguringaSpectraSKLMserver,youcanenable
SpectraSKLMforoneormorepartitions.
Notes: TheEncryptionscreeninthepartitionwizardletsyouenable
theencryptionfeaturesforthepartition.Itonlydisplaysif
youareloggedinasanencryptionuserandalready
configuredaSpectraSKLMserveroraBlueScaleencryption
key.(SeeConfiguretheSpectraSKLMServeronpage289or
ConfiguringBlueScaleKeyManagementonpage303for
moreinformation.)
SpectraSKLMkeymanagementisnotcompatiblewith
BlueScaleEncryptionkeymanagement,becausetheycannot
shareencryptionkeys.DataencryptedusingSpectraSKLM
keymanagementcannotbedecryptedusingBlueScale
Encryptionkeymanagement,andviceversa.
SpectraSKLMkeymanagementisonlycompatiblewith
LTO‐5andlatergenerationtapedrives.
UsethefollowingstepstoassignaSpectraSKLMservertothepartition
andencryptalldatasenttothepartition:
1. Accesstheencryptionfeature(seeLogIntotheEncryptionFeatureon
page284).
Note: Ifyouarenotalreadyloggedinasanencryptionuser,youmust
entertheencryptionpasswordbeforeyoucreateoredita
partitionusingtheBlueScalepartitionwizard.Ifyouarenot
loggedin,theEncryptionscreendoesnotdisplay.
2. ClickMenu, thenselectConfiguration > Partitions.TheSharedLibrary
Servicesscreendisplays.
3. ClickNewtocreateapartition,orclickEdittomodifythesettingsforan
existingpartition(see
CreatingaStoragePartitiononpage169).
4. NavigatethroughthepartitionwizardbyclickingNext untilyoureach
theEncryptionscreen.
To use Spectra SKLM Encryption key management, LTO-5 drives must be updated to
firmware version C7RC, or later. All LTO-6 or later generation drive firmware
supported for use with the library can be used with Spectra SKLM encryption.
Figure 195 The Encryption screen.