Hpe Storeever 1/8 G2 Tape Autoloader And Msl Tape Libraries Encryption Kit - HP StoreEver MSL3040 User's And Service Manual

Tape libraries

Table of Contents

The tape drives can read encrypted data from and write encrypted data to some earlier generation media.

The following table shows backward compatibility for encrypted data.

Table 1: Read and write compatibility for encrypted data

Media

LTO-4 media (encrypted

data)

LTO-5 media (encrypted

data)

LTO-6 media (encrypted

data)

LTO-7 media (encrypted

data)

LTO-8 media (encrypted

data)

Your company policy will determine when to use encryption. For example, encryption might be mandatory

for company confidential and financial data, but not for personal data. Company policy will also define

how encryption keys are generated and managed. Backup applications that support encryption will

generate a key for you.

HPE StoreEver 1/8 G2 Tape Autoloader and MSL Tape Libraries Encryption

Kit

The encryption kit provides secure generation and storage of encryption keys. The encryption kit can be

used with any StoreEver 1/8 G2 Tape Autoloader or MSL2024, MSL3040, MSL4048, and MSL6480 Tape

Library with at least one LTO-4 or later generation tape drive.

The encryption kit supports your manual security policies and procedures by providing secure storage for

encryption keys. Access to the key server tokens and their backup files is protected with user-specified

passwords. You will need to create processes to protect the tokens and secure the passwords.

Before enabling the encryption kit, verify that the library is running the most current firmware to ensure

compatibility between the token and library.

To use the encryption kit, insert a key server token in the USB port on the back of the library and then

enable the encryption kit and configure the token from the RMI.

IMPORTANT:

When encryption is enabled with the encryption kit, the library will not use encryption keys from

other sources, such as a key management system or application software. Disable encryption in

applications writing to the library when encryption is enabled with the encryption kit. Applications

that attempt to control encryption while encryption is enabled with the encryption kit will not be able

to do so, which can cause backups or other write operations to fail.

For information about configuring and using the encryption kit, see the encryption kit user guide, which is

available from the Hewlett Packard Enterprise Information Library at http://www.hpe.com/info/storage/

docs.

LTO-6 drive

Read only with

encryption key

Read/Write with

encryption key

Read/Write with

encryption key

Incompatible