IBM TS2900 Setup, Operator, And Service Manual page 118

v Library Managed Encryption - For transparent encryption by the TS2900 Tape Autoloader tape
drive.
Note: System Managed Encryption and Library Managed Encryption are transparent to each other. A
|
tape encrypted with System Managed Encryption might be decrypted with Library Managed
|
Encryption, and vice versa, provided both have access to the same EKM keystore.
|
5. Select the Primary EKM Server Settings (Library Managed Encryption only) - the address of the
primary encryption key manager on a server. IPv4 and IPv6 addresses are supported. Host names can
be entered instead of numerical IP addresses if the DNS server is specified.
v Address - The IP address of the primary encryption key manager.
v TCP port number - The port number of the primary encryption key manager for TCP. The default
port number is 3801.
v SSL port number - The port number of the primary encryption key manager for SSL. The default
port number is 443.
6. Select the Secondary EKM Server Settings (Library Managed Encryption only) - The address of the
secondary encryption key manager on a server. IPv4 and IPv6 addresses are supported. Host names
can be entered instead of numerical IP addresses if the DNS server is specified.
v Address - The IP address of the secondary encryption key manager.
v TCP port number - The port number of the secondary encryption key manager for TCP. The
default port number is 3801.
v SSL port number - The port number of the secondary encryption key manager for SSL. The default
port number is 443.
7. Select the Encryption policy settings (library-managed encryption only).
v Encrypt All - All tape cartridges that are loaded into the tape drive are encrypted.
| v Internal Label - Selective Encryption - This option is used only for Veritas Technologies
NetBackup.
v Internal Label - Encrypt All - This option is used only for Veritas Technologies NetBackup.
|
8. Skip over the Advanced Encryption Settings. The purpose of these advanced encryption settings is to
allow only IBM Support personnel (under the direction of the drive development team) to provide a
solution to an unforeseen problem or to support a unique configuration. These options are not
intended for use by the customer without the guidance of IBM Technical Support.
9. Click Submit to enable the settings.
To determine whether a cartridge is encrypted, use Configure Library > Library Map and select the
cartridge. The screen displays whether the cartridge is encrypted, not encrypted, or unknown.
Click Submit to transfer the settings to the library. A dialog message is displayed when the settings are
updated successfully.
92
IBM TS2900 Tape Autoloader: Setup, Operator, and Service Guide Machine Type 3572