Features Of The Key Management Function Option - Fujitsu ETERNUS LT140 User Manual

Chapter 1 Overview

1.4 Features of the Key Management Function Option

The following tape drives and tape cartridges are required to use the Key Management Function Option:
• LTO Ultrium6 (G6) or later tape drives
• LTO Ultrium4 (G4) or later tape cartridges (G4 is for reading only)
For other required optional products, refer to "FUJITSU Storage ETERNUS LT140 Tape Library Product List". For
more details about tape cartridges, refer to "A.1 Ultrium Tape Cartridge" in "FUJITSU Storage ETERNUS LT140
Tape Library User's Guide -Installation & Operation-".
To use the key management function, purchasing the Key Management Function Option is required.
1.4 Features of the Key Management Function Option
The Key Management Function Option has the following features:
• It enables easy construction of a secure backup system that is independent of the OS and backup software,
since the tape library will automatically handle encryption. (*1)
• Because encryption keys are set for the tape library from a Web browser terminal, the library manager
alone can ensure the security of the library, with no need for a backup operator to intervene.
• One master key is set for each tape library, and encryption keys based on the master key are automatically
assigned to all data cartridges in the tape library. Thus, the library manager need not manage any of the
encryption keys of the data cartridges. (*2)
• Setting the same master key as the common master key for the ETERNUS LT140, LT220, LT230, LT250,
LT260, LT270, and LT270 S2 (*3) will facilitate the use of encrypted tape cartridge data among all these
tape libraries.
• To share data among multiple tape libraries, Fujitsu recommends operation with a common master key. In
the event of a disaster, a data cartridge stored at an external location may need to be read with a tape
library having a different master key. This different tape library can read the data on the data cartridge
only if the encryption key had been exported in advance using the encryption key export or import
function (*4).
*1: The Key Management Function Option cannot be used together with the encryption function of backup software.
*2: For information on master keys, refer to
"1.5.2 Encryption Key" (page
*3: The ETERNUS LT20, LT20 S2, LT40, LT40 S2, LT60, LT60 S2, LT200, and LT210 do not support the key management
function. The ETERNUS LT220, LT230, LT250, and LT270 have been discontinued.
*4: For information on the encryption key export or import function, refer to
Functions" (page
FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User's Guide
"1.5.1 Master Key" (page
15).
45).
13
Copyright 2019 FUJITSU LIMITED
14). For information on encryption keys, refer to
"2.1.5 Encryption Key Export and Import
P3AG-3762-02ENZ0