General Notes About Encryption On The Library - Quantum scalar i40 User Manual

Chapter 7: Encryption Key Management

General Notes About Encryption on the Library

General Notes About Encryption on the Library
176
These systems work in conjunction with the library to generate, protect,
store, and manage encryption keys. The keys are used by tape drives to
encrypt information being written to, and decrypt information being
read from, tape media. The library communicates with the encryption
key management server(s). The encryption keys pass through the library,
so that encryption is "transparent" to the applications. Using the library
in this way is known as "Library Managed Encryption" or LME.
If you purchase SKM, you will receive the software application, two
servers (optional beginning with SKM 1.1), and installation and
configuration instructions. Installation for KMIP-compliant systems
differ according to the manufacturer, and may include up to 10 key
servers.
Note: These two solutions are not interoperable. The Scalar i40 and
Scalar i80 libraries do not support more than one encryption
key management system on a single library.
This chapter covers:
• General Notes About Encryption on the Library
• About the EKM License
• KMIP-compliant Encryption Key Management
• Configuring Scalar Key Manager (SKM) on the Library
• EKM Path Diagnostics
• Viewing Tape Drive Encryption Settings
• Installing TLS Certificates on the Library
• Performing Scalar Key Manager Functions Available on the Library
• Performing KMIP Key Manager Functions on the Library
Keep the following points in mind when using encryption on the library:
• Data written to encryption-supported and encryption-capable
media in EKM-supported tape drives will be encrypted unless data
Quantum Scalar i40 and Scalar i80 User's Guide