Chapter 1 Overview; Overview Of The Data Encryption Function Of Lto Ultrium Tape Drives; Features Of The Data Encryption Function Of Lto Ultrium Tape Drives - Fujitsu ETERNUS LT260 User Manual

Chapter 1
Overview
1.1 Overview of the Data Encryption Function of LTO Ultrium
Tape Drives
LTO Ultrium tape drives that are installed in the LT260 tape library have the function to write data to data
cartridges (*2) with AES (*1) (256 bit) .
With this function, data is assigned an arbitrary key when written to a data cartridge (*2), and the data can
be read only if the same key is assigned again at the data read time.
The function can thus prevent leakage of information on the tape cartridge, even if the tape cartridge is left
unattended when taken out or is missing, because its data cannot be read without the key.
Also, the tape cartridge can be disposed of without deleting the data.
*1: Advanced Encryption Standard (AES): Encryption system authorized by the National Institute of Standards and
Technology (NIST)
*2: The data encryption function is incompatible with Ultrium3 or earlier generation data cartridges.
1.2 Features of the Data Encryption Function of LTO Ultrium Tape
Drives
The data encryption function of LTO Ultrium tape drives has the following features:
• The function conforms to the high security requirements specified in FIPS 140-2 (*1).
• A key can be delivered through the host interface and the interface between a library and tape drive.
• The encryption logic is implemented by hardware, which means that encryption has less effect on read-
write performance.
*1: FIPS 140-2 defines the U.S. government's security requirements for cryptographic modules used for data.
FUJITSU Storage ETERNUS LT260 Tape Library Key Management Function Option User's Guide
11
Copyright 2016 FUJITSU LIMITED P3AG-1192-02ENZ0