Types Of Keys; Master Key - Fujitsu ETERNUS LT260 User Manual

Chapter 1 Overview

1.5 Types of Keys

1.5 Types of Keys
The Key Management Function Option uses two types of keys for encryption: the master key that must have
been set for each LT260 tape library, and the encryption key assigned to each tape cartridge in the tape
library.
This section describes these keys.
1.5.1

Master Key

A master key is set for each tape library.
The tape library must have a master key set in order for the Key Management Function Option to work.
The functions of a master key are listed below.
• The encryption key for a data cartridge is automatically generated from a master key. (*1)
• The same master key can be set for multiple tape libraries. This function enables these multiple tape
libraries to share data cartridges containing encrypted data.
• The tape library manager can make the settings to set a master key.
• In a logical library (or partition) configuration, a master key can also be assigned for reach logical library
(or partition).
*1: Since automatically generated master keys are managed only by the tape library, their values are invisible to users.
The two methods of creating a master key are as follows: automatic generation using the tape library and
manual creation using arbitrary characters.
For automatic generation with a tape library, each tape library automatically generates a master key based
on data unique to the tape library. For this reason, other tape libraries cannot generate the same master key.
Once a master key is created, the master key can no longer be decrypted even by a maintenance engineer.
Although the master key is stored redundantly in the database of the tape library, it may be lost in the rare
event that the tape library fails. The encrypted data can no longer be read in such a case. Therefore, after
setting the master key, be sure to export it (to a binary file) and keep it in a safe place.
For information on setting a master key, refer to
For information on exporting the master key, refer to
FUJITSU Storage ETERNUS LT260 Tape Library Key Management Function Option User's Guide
"2.1.3 Setting the Master Key" (page
"2.1.3.2 Exporting the Master Key" (page
14
Copyright 2016 FUJITSU LIMITED
33).
35).
P3AG-1192-02ENZ0