Chapter 10—Encryption and Key Management BlueScale Key Management
August 2017 User Guide—Spectra T50e Library
314
4. IfyouexportedthekeyasM‐of‐Nshares,repeatStep1throughStep3
foreachadditionalUSBdevice.
5. Iftheexportedkeyfileisnotpresentorifthefileis0bytesinsize,
repeattheexportprocessasdescribedinExportanEncryptionKeyon
page309usingadifferentUSBdevice.
When Sent as an Email Attachment
1. Opentheemailattachmentandverifythatitcontainsatleastonefile
calledname.bskifyouexportedthekeyasasinglefileorname.bssif
youexportedthekeyasashare,wherenameisthemonikeryou
assignedtothekeywhenitwascreated.
Makesurethatthefileismorethan0bytesinsize.Ifthefilemeetsthese
requirements,theencryptionkeywassuccessfullyexportedandis
usable.
2. Savetheemailattachmenttoasafelocationfromwhichyoucancopyit
toaUSBdevice,ifneeded.
3. IfyouexportedthekeyasM‐of‐Nshares,haveeachsharerecipient
performStep1andStep2foreachemailedshare.
4. Iftheemailattachmentdoesnotcontaintheexportedkeyfileorifthe
fileis0bytesinsize,repeattheexportprocessasdescribedinExportan
EncryptionKeyonpage309.
Protect the Encryption Key
Inconformancewithyoursecurityplan,trackthelocationofeachUSB
devicecontainingtheexportedkeyorthenameofeachpersonwho
receivedtheemailmessagewiththeexportedkeyfileattached.Alsokeep
trackofthepasswordyouusedwhenyouexportedthekey.
Make sure you keep a record of the password created when exporting the key. You
must have this password and the encrypted file containing the exported key in
order to import the encryption key back into the library. Without the key password,
you are not able to import the encryption key.
Backup files of the library configuration include any encryption keys that were
stored in the library at the time the file was created.