Setting Drive Encryption - IBM 3592 Maintenance Information

Table 156: Default density selections. BOT is an abbreviation for 'beginning of tape.' (continued)
Default density selection
60F with FF selection
1
The drive writes on a data cartridge in the existing format of the cartridge.
3. After you change this factory setting that is accessible through the options on this menu, continue to
select Cancel to return to the CE Options menu.
4. Reset the drive by pressing Change Mode . Select Operator Mode > Services > Reset Drive.
5. Go to "End of call" on page 185 or return to the procedure that sent you here.

Setting drive encryption

Although your 3592 drive is encryption capable, the customer must order a feature code to give you the
authority to enable drive encryption. The feature code which allows you to enable encryption also
contains the installation instructions. See Table 138 on page 168.
Notes:
• Encryption does not provide write-protection, but provides read-protection only. Encrypted data in a
tape cartridge is not protected from being overwritten.
• Refer to the External Key Manager, Introduction, Planning, and User's Guide for information. See
"Related information" on page xviii.
• Inform the customer that the Encryption Key Manager configuration must be updated if you are
installing an encryption-capable drive for the first time or you are enabling encryption on a previously-
installed encryption-capable drive. This issue is not a concern if you are replacing an encryption-
capable drive FRU.
• To maintain FIPS PUB 140-2 certification for a tape drive, load only FIPS-certified microcode into that
tape drive. The latest drive microcode that is available might not be FIPS certified.
1. From the service panel, press Change Mode , and select CE Offline Mode > Config/Install > Drv
Options > Drv Encryption > Method Config.
Notes:
• You can use the Reset to Default selection while encryption is set to return the drive to the default
encryption setting.
• Do not use the other menu items, such as Custom or Advanced Settings, unless directed by your
next level of support.
• You can find a complete list of menu items, beginning with "DRV Encryption menu" on page 121.
2. The customer can advise you which method they wish to use to manage encryption. Select that
method (such as System, Application, or Library).
3. At the CE Save Data? menu, select Yes to save your settings.
To disable encryption, from the Method Config menu select Disable.
4. Return to the procedure that sent you here.
250 IBM 3592 TS1140, TS1150, TS1155, and TS1160 Tape Drives: Maintenance Information
Drive behavior
Format that is used
Format that is used when writing, and
when writing at BOT not at BOT
E07, E08, 55F, or 60F
Model type reported to
host in response to
1
Inquiry command
E07, E08, 55F, or 60F 60F