1. Manuals
  2. Brands
  3. Fujitsu Manuals
  4. Storage
  5. ETERNUS LT140
  6. User manual

Fujitsu ETERNUS LT140 User Manual

Hide thumbs Also See for ETERNUS LT140:
Table of Contents

Advertisement

Quick Links

Download this manual
P3AG-3762-02ENZ0
FUJITSU Storage
ETERNUS LT140 Tape Library
Key Management Function Option
User's Guide

Advertisement

Table of Contents
loading

Related Manuals for Fujitsu ETERNUS LT140

Summary of Contents for Fujitsu ETERNUS LT140

  • Page 1 P3AG-3762-02ENZ0 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User's Guide...
  • Page 2 This page is intentionally left blank.
  • Page 3 Preface Fujitsu would like to thank you for purchasing our Key Management Function Option for the FUJITSU Storage ETERNUS LT140 tape library (hereinafter referred to as "LT140"). This manual describes the setup methods and the operation procedures that are required to use the Key Management Function Option as well as notes and other information.
  • Page 4 This chapter provides notes on the Key Management Function Option. Additional information on "Appendix A Logs Related to the Key Management Function" is provided as an appendix. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 5 This symbol indicates important points to note when using this product. This mark indicates additional information regarding things such as convenient functions and procedures while performing operations and settings with this product. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 6: Table Of Contents

    2.3.3 Setting Information of the Key Management Function for the Drive ............. 61 2.3.4 Encryption Setting Information of the Data Cartridge ..................62 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 7 How to Download Logs Related to the Key Management Function........76 Checking the Contents of the Logs Related to the Key Management Function ....76 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED...
  • Page 8 Figure 2.40 [Status > Security > Security Encryption Status] screen................59 Figure 2.41 [Status > Security > Partition Encryption Status] screen ................60 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 9 Figure 2.44 [Status > Cartridge Inventory > List View (detailed)] screen................ 63 Figure 2.45 [Status > Cartridge Inventory > Graphical View] screen ................65 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 10 List of Tables Table 4.1 Troubleshooting ............................72 Table 4.2 Sense keys..............................74 Table A.1 Events related to the key management function..................79 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 11: Chapter 1 Overview

    The data cartridge generations that can be read and written varies depending on the generation of the LTO Ultrium tape drive that is being used. For details, refer to "A.1.2 Tape Drive Compatibility with Tape Cartridges" in "FUJITSU Storage ETERNUS LT140 Tape Library User's Guide -Installation & Operation-".

  • Page 12: Functional Overview Of The Key Management Function Option

    During a data backup from a backup server, the tape library automatically assigns an encryption key to the specified data cartridge, encrypts the data (plain text), and saves the data. The encryption process is performed transparently during this time. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 13: Features Of The Key Management Function Option

    (*2) • Setting the same master key as the common master key for the ETERNUS LT140, LT220, LT230, LT250, LT260, LT270, and LT270 S2 (*3) will facilitate the use of encrypted tape cartridge data among all these tape libraries.

  • Page 14: Types Of Keys

    "2.1.4 Setting the Master Key" (page 35). For information on exporting the master key, refer to "2.1.4.2 Exporting the Master Key" (page 37). FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 15: Encryption Key

    However, note that if the encryption key is lost, the data can no longer be restored. To share data among tape libraries, Fujitsu recommends operation with a common master key. •...

  • Page 16: Management Of Key Information And Encryption Setting Information

    Figure 1.3 Data cartridge sharing using one master key Backup-center Primary-site Master key A Master key A FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 17: Encryption Of Data Cartridges Stored At An External Location

    Figure 1.4 External storage of data cartridges Primary-site Master key A Encryption key Secondary-site Master key A Encryption key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 18: Encryption Of Each Logical Library (Or Partition)

    (or partition). Figure 1.5 Encryption of each logical library Master key Lib #3 Lib #2 Master key Lib #1 : Encrypted : Not encrypted FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 19: Interoperation Among Lt-Series Models

    1.6 Operational Examples 1.6.4 Interoperation among LT-series Models The ETERNUS LT140, LT220, LT230, LT250, LT260, LT270, and LT270 S2 tape libraries (LT-series) share compatible master keys and encryption keys, so keys and encrypted data cartridges can be shared among these LT-series.

  • Page 20: Security Functions

    For information on the storage and contents of the security-related logs, refer to "Appendix A Logs Related to the Key Management Function" (page 76). FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 21: Chapter 2 Setup And Operation Procedures

    This chapter explains the settings that are related to the key management function. The setup and operations for each function are performed from the remote panel. For details about the setup and operations, refer to "FUJITSU Storage ETERNUS LT140 Tape Library User's Guide -Panel Operation-". CAUTION •...

  • Page 22: Setting The Key Management Function License

    Since the license sheet that has the license key may be required for maintenance work, be sure to keep it in a safe place. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED...

  • Page 23: Logging In With The Security Administrator Account

    Figure 2.2 Account setting screen Procedure Click "security" from the account list displayed on the lower part of the screen. Select [Modify User Password] from [Actions]. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 24: Figure 2.3 Changing Passwords

    For password settings, passwords must satisfy the requirements. If the password setting does not succeed, check the setting requirements from [Configuration > User Accounts > User Accounts Settings]. For details about the setting items, refer to "3.4.16 Configuring Password Setting Requirements" in "FUJITSU Storage ETERNUS LT140 Tape Library User's Guide -Panel Operation-".

  • Page 25: Figure 2.4 Logging In To The Remote Panel

    "2.1.2.1 Changing the Initial Password of the Security Administrator Account" (page 23). Figure 2.4 Logging in to the remote panel End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 26: Figure 2.5 Initial Value Of Ssl (Disabled)

    When SSL is enabled, https must be used to connect to the remote panel. SSL is disabled by default. Procedure Move to the [Configuration > Web Management] screen. Figure 2.5 Initial value of SSL (disabled) FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 27: Figure 2.6 Ssl Setting (Enabled)

    Figure 2.6 SSL setting (enabled) When the SSL confirmation screen for the change appears, click [OK]. Figure 2.7 Confirming the SSL setting change FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 28: Figure 2.8 Logging Out Of The Remote Panel

    After SSL is enabled, the method for connecting to the remote panel changes. For the connection method, refer to "2.1.2.4 Connecting to the Remote Panel after Enabling SSL" (page 29). FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 29: Figure 2.9 Logging In To The Security Administrator Account

    For [Password], enter the security administrator account password and click [Login]. Figure 2.9 Logging in to the security administrator account End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 30: Setting The Key Management Function

    To set the key management function, you must log in to the remote panel using the security administrator account. For details about how to log in, refer to "2.1.2 Logging In with the Security Administrator Account" (page 23). FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 31: Figure 2.10 Setting The Key Management Function

    Select [LT Encryption (Licensed)] from the [Set Default Encryption Mode for new Partitions] pull-down menu. Figure 2.11 Default setting of the key management function FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 32: Figure 2.12 Setting The Key Management Function Per Partition

    Figure 2.12 Setting the key management function per partition If the default settings are applied to all partitions in Step 3 without any changes, this step is not required. Click [Submit]. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 33 When the Expert Partition Wizard is used to edit the partition, the setting for the key management function can be enabled or disabled. For details, refer to "3.4.13.2 Using the Expert Partition Wiz- ard" in "FUJITSU Storage ETERNUS LT140 Tape Library User's Guide -Panel Operation-". •...

  • Page 34: Figure 2.13 Example Setting Of The Key Management Function For Each Partition

    "2.1.3.1 Basic Setup of the Key Management Function" (page 31) perform basic setup. • When the key management function is disabled, data encryption depends on the backup software setting. End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 35: Setting The Master Key

    Select the partition where the master key is to be set. If no logical libraries (or partitions) are configured, only "Partition_1" is displayed in the drop down list. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 36: Figure 2.14 Setting The Master Key

    Chapter 2 Setup and Operation Procedures 2.1 Basic Setup Click [Submit]. Figure 2.14 Setting the master key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 37: Figure 2.15 Confirmation Screen For The Master Key Setting

    If a master key is not set and the imported master key does not exist, a master key is automatically created when the data is first written to the data cartridge in each partition. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED...

  • Page 38: Figure 2.16 Setting A Password For The Master Key

    The password is required to import the master key. Keep the password in a safe place. Figure 2.16 Setting a password for the master key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED...

  • Page 39: Figure 2.17 Exporting The Master Key

    Step 4 and onward. Partitions cannot be selected if the master key is not set. Figure 2.17 Exporting the master key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 40: Figure 2.18 Saving The Master Key To Export

    Move to the [Configuration > Encryption > LT Encryption] screen. Select [Master Keys] > [Import Key] on the center pane. Select the master key file to be imported. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 41: Figure 2.19 Importing The Master Key

    Enter the password that was set when the master key was exported. For details, refer to "2.1.4.2 Exporting the Master Key" (page 37). Click [Submit]. Figure 2.19 Importing the master key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 42: Figure 2.20 Confirmation Screen For Importing The Master Key

    If the "Master key was successfully imported" message disappears, the master key has been imported. Figure 2.21 Status of importing the master key End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 43: Figure 2.22 Deleting The Master Key

    Only a single master key can be deleted at a time. When deleting the master keys of multiple partitions, repeat the procedure from Step 3 and onward. Figure 2.22 Deleting the master key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 44: Figure 2.23 Confirmation Screen For Deleting The Master Key

    Deleted master keys cannot be restored even by a maintenance engineer or the manufacturing plant. Carefully consider whether to delete the master key. Figure 2.23 Confirmation screen for deleting the master key End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 45: Encryption Key Export And Import Functions

    Exporting the Encryption Key Procedure Move to the [Configuration > Encryption > LT Encryption] screen. Select [Encryption Keys] > [Export Key] on the center pane. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 46: Figure 2.24 Encryption Key Password Settings

    The password is required to import the encryption key. Keep the password in a safe place. Figure 2.24 Encryption key password settings FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 47: Figure 2.25 Selecting The Partition To Export The Target Data Cartridges

    If no logical libraries (or partitions) are configured, only "Partition_1" is displayed in the drop down list. Figure 2.25 Selecting the partition to export the target data cartridges FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 48: Figure 2.26 Selecting The Data Cartridges That Are To Be Exported

    Multiple data cartridges can be moved at the same time. Figure 2.26 Selecting the data cartridges that are to be exported FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED...

  • Page 49: Figure 2.27 Removing The Export Target Data Cartridges

    To remove the data cartridges from the export target field, select the relevant data cartridge. The color of the selected data cartridge changes. Click [] to remove the selected data cartridge. Figure 2.27 Removing the export target data cartridges FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 50: Figure 2.28 Exporting The Encryption Key

    Chapter 2 Setup and Operation Procedures 2.1 Basic Setup Click [Export] to export the encryption keys from the selected data cartridges. Figure 2.28 Exporting the encryption key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 51: Figure 2.29 Saving The Encryption Key To Export

    The default file name for the exported encryption key is determined by the "ID_x_EncryptionKey_yyyymmdd_xxxxxxxxxx.key" format. The file size is 128 bytes. Figure 2.29 Saving the encryption key to export End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 52: Figure 2.30 Importing The Encryption Key

    Enter the password that was set when the encryption key was exported. For details about the password, refer to "2.1.5.1 Exporting the Encryption Key" (page 45). Click [Submit]. Figure 2.30 Importing the encryption key FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 53: Figure 2.31 Confirmation Screen For Importing The Encryption Key

    If the "Encryption key/s were successfully imported" message disappears, the encryption key has been imported. Figure 2.32 Progress status screen for importing the encryption key End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 54: Figure 2.33 Selecting The Partition Where The Deletion Target Encryption Key Exists

    If no logical libraries (or partitions) are configured, only "Partition_1" is displayed in the drop down list. Figure 2.33 Selecting the partition where the deletion target encryption key exists FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 55: Figure 2.34 Selecting Data Cartridges With Deletion Target Encryption Keys

    In this screen, only the data cartridges with an imported encryption key are displayed. Figure 2.34 Selecting data cartridges with deletion target encryption keys FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED...

  • Page 56: Figure 2.35 Excluding Data Cartridges With Deletion Target Encryption Keys

    Figure 2.35 Excluding data cartridges with deletion target encryption keys Click [Delete]. Figure 2.36 Selecting imported encryption keys that are to be deleted FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 57: Figure 2.37 Deleting The Imported Encryption Keys

    Information of the data cartridge disappears. The deletion of the imported encryption keys is complete. Figure 2.38 Deletion confirmation of the imported encryption key End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 58: Backing Up The Setting Information

    For the procedure to back up the setting information, refer to "Saving the library configuration to a file" of "3.4.2 Saving, Restoring and Resetting the Library Configuration" in "FUJITSU Storage ETERNUS LT140 Tape Library User's Guide -Panel Operation-".

  • Page 59: Checking The Setting Information

    In [Security Encryption Status], if "Enabled" is displayed for [LT Encryption], the key management function is enabled. Figure 2.40 [Status > Security > Security Encryption Status] screen End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 60: Setting Information Of The Key Management Function For The Partition

    Figure 2.41 [Status > Security > Partition Encryption Status] screen End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 61: Setting Information Of The Key Management Function For The Drive

    Figure 2.42 [Status > Security > Drive Encryption Status] screen End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 62: Encryption Setting Information Of The Data Cartridge

    Log in to the remote panel. Move to the [Status > Cartridge Inventory > List View] screen. Figure 2.43 [Status > Cartridge Inventory > List View] screen FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 63: Figure 2.44 [Status > Cartridge Inventory > List View (Detailed)] Screen

    An imported encryption key is used. An encryption key is not assigned. Figure 2.44 [Status > Cartridge Inventory > List View (detailed)] screen FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 64 LT Encryption Key Auto An automatically generated encryption key is used. Import An imported encryption key is used. An encryption key is not assigned. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 65: Figure 2.45 [Status > Cartridge Inventory > Graphical View] Screen

    Figure 2.45 [Status > Cartridge Inventory > Graphical View] screen For Ultrium3 or earlier data cartridges, all the items above are displayed as "N/A". End of procedure FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 66: Chapter 3 Setup Methods For Different Operations

    For information on how to set the master key, refer to "2.1.4 Setting the Master Key" (page 35). Management console Tape library 01 Tape library 02 Tape library 03 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 67 "FUJITSU Storage ETERNUS LT250/LT270/LT270 S2 Tape Library Key Management Function Option User's Guide". Management console Tape library 01 Tape library 02 Tape library 03 FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 68: Storing Data Cartridges At External Locations

    Export the set master key to the management console. For information on how to export the master key, refer to "2.1.4.2 Exporting the Master Key" (page 37). FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 69 However, if the encryption key is deleted or lost by mistake, the data can no longer be read. Therefore, Fujitsu recommends that the same master key be set for the tape libraries sharing data. For information on the encryption key export or import function, refer to "2.1.5...
  • Page 70 For information on how to eject a data cartridge, refer to "3.5 Loading and Ejecting Cartridges" in "FUJITSU Storage ETERNUS LT140 Tape Library User’s Guide -Installation & Operation-". Primary-site Master key A FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 71 For information on how to import an encryption key, refer to "2.1.5.2 Importing the Encryption Key" (page 52). For information on how to insert a data cartridge, refer to "3.5 Loading and Ejecting Cartridges" in "FUJITSU Storage ETERNUS LT140 Tape Library User’s Guide -Installation & Operation-". Primary-site Secondary-site...

  • Page 72: Chapter 4 Considerations

    Refer Encryption] screen could not be displayed. "2.1.3.1 Basic Setup of the Key Management Function" (page 31) FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 73 Panel Operation-" loaded in any drive." • "3.7.2 Using Inventory Lists" in "FUJITSU Storage ETERNUS LT140 Tape Library User’s Guide -Panel Operation-" FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 74: Sense Keys Related To The Key Management Function

    A drive, tape library, or media may be faulty. Reuse of Data Cartridges To reuse an encrypted data cartridge, use backup software to erase the data. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...

  • Page 75: Connectivity With Backup Software

    4.4 Connectivity with Backup Software Connectivity with Backup Software On a system using the key management function, Fujitsu recommends using verified backup software. If unverified backup software is used, encryption may not work normally. For more information, contact your sales representative.

  • Page 76: Appendix A Logs Related To The Key Management Function

    For information on how to download logs, refer to "3.5.6 Downloading Log and Trace Files" in "FUJITSU Storage ETERNUS LT140 Tape Library User’s Guide -Panel Operation-".
  • Page 77 8C 00 00 00 00 00 00 00 04 08 00 00 00 0A 00 SENSE_DATA: 03 11 12 FIELD_POINTER: CD 0, SKSV 0, FP 11458 (2CC2) FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 78 -------------- DETAILS -------------- ERRORCODE_2: Drive configuration failed (DRIVE_CONFIG_FAILED) SEVERITY_2: WARNING SYS_COMPONENT_2: DRIVE PHY_NUM_2: 3 (21) ------------------------- ERRORCODE: Drive is not supporting encryption (DRIVE_NO_ENCRYPTION) FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 79 LT Encryption encryption keys deleted The encryption keys were deleted. 9059 LT encryption Key retrieved by tape drive The tape drive received the encryption key. FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User’s Guide Copyright 2019 FUJITSU LIMITED P3AG-3762-02ENZ0...
  • Page 80 However, Fujitsu shall assume no responsibility for any operational problems as the result of errors, omissions, or the use of information in this manual. • Fujitsu assumes no liability for damages to third party copyrights or other rights arising from the use of any information in this manual.

Table of Contents