Scalar I500 User's Guide - Quantum scalar i500 User Manual

Scalar i500 User's Guide

4 Interval If Automatic EKM Path Diagnostics is enabled, select the
—
interval at which the library performs the diagnostics.
5 Test Warning Threshold — For Q-EKM only. If Automatic EKM
Path Diagnostics is enabled, specify the number of consecutive
missed test intervals required to generate a RAS ticket.
6 SSL Connection
—
key server you are using:
• — To enable SSL for communication between the library
Q-EKM
and the EKM servers, select the SSL Connection check box. The
feature is disabled by default. If you enable SSL, you must make
sure that the port numbers listed in the
match the SSL port numbers set on the Q-EKM servers. The
default SSL port number is 443.
Keys are always encrypted before being sent from the
Note:
Q-EKM key server to a tape drive, whether SSL is
enabled or not. Enabling SSL provides additional
security.
• SKM — SSL is always enabled. The SSL port number is always
6000.
• KMIP Key Manager — SSL is always enabled.
For SKM and KMIP Key Manager, the library actually
Note:
uses Transport Layer Security (TLS), a more secure
successor to SSL, to communicate with the
encryption servers.
7 Key Server IP Address or Host Name
your key servers in the order in which you want failover to occur.
The column denotes the server failover order. Once you add the
"#"
servers, you can change the failover order by clicking the up/down
arrow buttons in the
Chapter 7 Encryption Key Management
Configuring Encryption Key Management on the Library
Enable or disable as follows, depending on which
—
column.
Order
text boxes (below)
Port
In the text boxes, assign
176