Exporting Encryption Certificates - Quantum scalar i40 User Manual

Chapter 7: Encryption Key Management
Performing Scalar Key Manager Functions Available on the Library
Exporting Encryption
Certificates
204
The process is as follows:
1 The destination administrator exports the Encryption Certificate that
belongs to the destination SKM server. The Encryption Certificate is
saved as a file to a location specified by the administrator on a
computer (see

Exporting Encryption Certificates

2 The destination administrator e-mails the Encryption Certificate file
to the source administrator.
3 The source administrator saves the Encryption Certificate file to a
location on a computer, and then imports the Encryption Certificate
onto the source SKM server (see
on page 205).
4 The source administrator exports the Encryption Keys, assigning the
same Encryption Certificate noted above to wrap (encrypt) the keys.
The file containing the wrapped encryption keys is saved to a
location on a computer specified by the source administrator. See
Exporting Data Encryption Keys
5 The source administrator e-mails the file containing the wrapped
encryption keys to the destination administrator.
6 The destination administrator saves the file containing the wrapped
encryption keys to a location on a computer, and then imports the
keys onto the destination SKM server (see
Encryption Keys on page 208).
7 The destination library can now read the encrypted tapes.
For more information about the key servers and Library Managed
Encryption best practices, please refer to the
Guide
.
To receive encryption keys from another SKM server, you must first send
your native encryption certificate to that server. The public key
contained in the certificate will be used to wrap (encrypt) the encryption
keys to protect them during transport to you.
This function is available to administrators and only applies to SKM
servers. Both SKM servers must be connected and operational in order
to import encryption keys.
Importing Encryption Certificates
on page 206.
Importing Data
Scalar Key Manager User's
Quantum Scalar i40 and Scalar i80 User's Guide
on page 204).