Kmip-Compliant Encryption Key Management; About Key Reuse - Quantum scalar i40 User Manual

Chapter 7: Encryption Key Management

KMIP-compliant Encryption Key Management

KMIP-compliant Encryption Key Management

About Key Reuse

178
The Key Management Interoperability Protocol (KMIP®) is a
specification developed by OASIS®. Its function is to standardize
communication between enterprise key management systems and
encryption systems. With version i4, the Scalar i40 and Scalar i80
provide a KMIP version 1.0 compliant encryption solution. With version
i6, the Scalar i40 and Scalar i80 provide a KMIP version 1.2 compliant
encryption solution.
KMIP is currently supported with SafeNet® KeySecure™ and Thales
keyAuthority® servers. Contact your Quantum representative for details.
Details about the Scalar i40 and Scalar i80 KMIP-compliant
implementation include:
• As with other encryption systems supported by the library, in order
to use KMIP-compliant encryption systems with the Scalar i40 or
Scalar i80, you must have an Encryption Key Management license
installed on the library.
• A minimum of two KMIP-compliant encryption servers are required
for failover purposes. A total of 10 KMIP-compliant encryption
servers are allowed, for increased failover capability.
• As of library firmware version i7 (170G), LTO-4 and higher tape
cartridges that are encrypted using Library Managed Encryption
(LME) with a supported KMIP-encryption management solution can
only be decrypted using library firmware version i7 or later. To check
for newer library firmware versions, check the Quantum Web site at
http://www.quantum.com/ServiceandSupport/
SoftwareandDocumentationDownloads/SI40/Index.aspx
information about compatible firmware.
When using Library Managed Encryption (LME) to encrypt data in library
partitions, you can choose to re-use encryption keys. Each time a tape
cartridge is mounted in a drive and data is written to the beginning of a
Quantum Scalar i40 and Scalar i80 User's Guide
for more