Note: Application Managed Encryption (AME) does not require a key. Library Managed Encryption (LME) and System Managed Encryption (SME) requires a license key,

which is available by purchasing Feature Code 5901.

The encryption enabled drive contains the necessary hardware and ﬁrmware to encrypt and decrypt host tape application data. Encryption policy and encryption keys are

provided by the host application or host server. A drive digital certiﬁcate is installed at manufacturing time. Each drive receives a unique serial number and certiﬁcate. The

T10 application validates each drive instance by checking the drive's digital certiﬁcate.

The LTO Ultrium encryption environment is complex and requires knowledge beyond that of product trained Service Support Representatives (SSRs). The Encryption

function on tape drives, whether it's a desktop, a stand-alone drive, or within libraries, is conﬁgured and managed by the customer. In some instances, SSRs are required

to enable encryption at a hardware level when service access or service password-controlled access is required. Customer setup support is by Field Technical Sales

Support (FTSS), customer documentation, and software support for encryption software problems. Customer 'how to' support is also provided by way of support line

contract.

For conﬁguration details, see

Alerts and logging

The TS2900 Tape Autoloader sends alerts about the library and attached tape drive, and offers audit-logging to track user actions.

TapeAlert Support: The library is compatible with TapeAlert technology, which provides error and diagnostic information about the drives and the library to the

host application. The library provides this error and diagnostic information as TapeAlert flags that are reported to the application. See

Email (SMTP - Simple Mail Transfer Protocol) Notiﬁcations: The library can conﬁgure email notiﬁcation of library events. The library must have network access to

an SMTP server. See

Locating management

SNMP Support: The Simple Network Management Protocol (SNMP) allows the library to send alerts over a LAN network to a monitoring station.

Occasionally, the library might encounter a situation that you want to know about, such as an open magazine or a fault that causes the library to stop.

The library provides a standard TCP/IP protocol that is called SNMP to send alerts about conditions over a TCP/IP LAN network to an SNMP monitoring station.

These alerts are called SNMP traps. With the information that is supplied in each SNMP trap, the monitoring station (together with customer-supplied software) can

alert operations personnel of possible problems or operator interventions that occur.

The new conﬁguration capability of SNMP Query provides a common Management Information Base (MIB) across all the IBM tape libraries. This capability allows a

product administrator to audit the settings of all their IBM tape libraries to ensure that they comply with their own policies.

SNMP Traps are alerts or status messages that can be collected, monitored, and used to proactively manage attached libraries with SNMP protocol with the SNMP

monitoring stations. In summary, each trap provides the following information.

Product Identiﬁcation such as product name, description, manufacturer, model number, ﬁrmware level, and the URL that the trap is designated for.

Product Status such as the severity of the trap, status (current and previous) and the time the trap occurred.

Library State (physical device status) such as identiﬁcation and status of devices that is monitored. It would include enclosure, power supply, controller,

magazine status, drive count, cartridge slot count, and I/O station count. Also included would be certain library statistics, and where appropriate, the fault

FSC (fault symptom code) including the severity and description of that fault.

Drive Status such as the identiﬁcation of each drive in the library, ﬁrmware level, serial number, and other address and status information.

Trap Deﬁnitions such as library status change, open magazine, I/O accessed, hard fault information, requests to clean the drive, excessive retries, and

returning to normal operations.

SNMP MIBs The library's MIB contains units of information that speciﬁcally describe an aspect of the system, such as the system name, hardware number, or

communications conﬁguration. When with SNMP to monitor your TS2900 Tape Autoloader, ensure that the TS2900 MIB ﬁle is loaded on your SNMP

monitoring station. SNMP traps are sent to the SNMP monitoring stations that are deﬁned for your library (see

SNMP MIB ﬁle for this library from https://www.ibm.com/support/ﬁxcentral.

Random and sequential logical library modes

A logical library can be conﬁgured in one of the two modes: Random and Sequential.

8 TS2900 Tape Autoloader

Conﬁguring

encryption.

functions.

TapeAlert

flags.

Conﬁguring SNMP