Spectra T950 - Page 204

Chapter 6 — Configuring and Managing Partitions Creating a Storage Partition
November 2016 User Guide—Spectra T950 Library
204
2. Selectthetypeofencryptionyouwouldliketoenable:
Note: SeetheSpectraTapeLibrariesEncryptionUserGuidefordetailed
instructions.
Encryption Option Description
No Encryption Turnsoffencryption.Noneofthedatainthepartitionisencrypted.
Spectra SKLM
Encryption
TurnsonSpectraSKLMencryptionkeymanagementfordrive‐based
encryption.
Note: IfPostScanisenabledforthepartition,donotselectSpectraSKLM
Encryption.
KMIP Encryption-
Reuse
(notshown)
TurnsonKMIPencryptionkeymanagementfordrive‐basedencryptionusing
LTO‐6andlatergenerationdrives.ThelibraryreusesKMIPencryptionkeys
whentapesareoverwritten.
Note: IfPostScanisenabledforthepartition,donotselectKMIPEncryption.
KMIP Encryption -
No Reuse
(notshown)
TurnsonKMIPencryptionkeymanagementfordrive‐basedencryptionusing
LTO‐6andlatergenerationdrives.ThelibrarydoesnotreuseKMIPencryption
keyswhentapesareoverwritten.
Note: IfPostScanisenabledforthepartition,donotselectKMIPEncryption.
BlueScale
Encryption:

QIP-based
TurnsonBlueScaleEncryptionkeymanagementforQIP‐basedencryptionusing
F‐QIP‐attached,SCSILTO‐2,LTO‐3,orLTO‐4drives.
AllkeymanagementtasksareperformedthroughtheBlueScaleuserinterface.
Options:
 EnableCompression—Turnoncompression.
 EnableClearFileatBOT—Reserveaportionofthemediaatthebeginning
ofthetapeforunencrypteddata.
Ifyouselectthisoption,thetapeheadersareunencryptedsothatany
compatibledrivecanreadtheheaderinformationonanencryptedtape.
BlueScale
Encryption:

Drive-based
TurnsonBlueScaleEncryptionkeymanagementfordrive‐basedencryption
usingdirect‐attachedLTO‐4andlatergenerationdrives.Allkeymanagement
tasksareperformedthroughtheBlueScaleuserinterface.
Note: IfyouhaveBlueScaleEncryptionProfessionaleditionandmultiple
encryptionkeysconfiguredonthelibrary,selecttheprimarykeyforthe
partition.Thiskeyisusedwhenencryptinganddecryptingdata.Then,Select
none,one,ormultipleadditionalkeystobeassociatedwiththepartitionfor
decryptingdata.Amaximum
ofeightdecryptionkeyscanbeassignedtoone
partition.