Encryption Key; Figure 1.2 Automatic Generation Of Encryption Keys - Fujitsu ETERNUS LT140 User Manual

Chapter 1 Overview
1.5 Types of Keys
1.5.2

Encryption Key

An encryption key is assigned to each data cartridge.
Different data cartridges never have the same encryption key because the tape library automatically
generates an encryption key based on the master key and data unique to each data cartridge.
If different tape libraries have the same master key and same data unique to the data cartridge, the libraries
will generate the same encryption key for the cartridge.
Only one encryption key is assigned to each data cartridge.
During normal operations, because the tape library performs the encryption key operations, the user is not
involved.
The encryption key export or import function can be used to export or import only an encryption key (a
password and encrypted binary file) for data sharing between tape libraries with different master keys.
However, note that if the encryption key is lost, the data can no longer be restored.
To share data among tape libraries, Fujitsu recommends operation with a common master key.
• An encryption key is generated and assigned when a data write process is performed to the data
cartridge.
• For information on the encryption key export or import function, refer to
Import Functions" (page

Figure 1.2 Automatic generation of encryption keys

Operator
FUJITSU Storage ETERNUS LT140 Tape Library Key Management Function Option User's Guide
45).
Key management database
Master key
Setting
Copyright 2019 FUJITSU LIMITED
Tape cartridge
Encryption
Encryption 0
key 0
Encryption
Encryption 1
key 1
Encryption
Encryption 2
key 2
Not
encrypted
15
"2.1.5 Encryption Key Export and
Information specific to
the tape cartridge
P3AG-3762-02ENZ0