Using Ekm Path Diagnostics - Quantum scalar i500 User Manual

Using EKM Path
Diagnostics
Scalar i500 User's Guide
3 SKM Only — FIPS (Federal Information Processing Standard) is a
U.S. government standard relating to computer security and
encryption. To enable FIPS mode on an SKM partition, select the
check box. To disable FIPS, clear the
See FIPS-Certified Encryption Solution
information. FIPS mode is only available with SKM.
4 Click
Apply
5 Save the library configuration.
The EKM Path Diagnostics consists of a series of short tests to validate
7
whether the key servers are running, connected, and able to serve keys as
required.
Run the Manual EKM Path Diagnostics any time you change the key
server settings or library encryption settings.
you should also run the Manual EKM Path Diagnostics whenever you
replace a tape drive. It is recommended that you test each tape drive that
communicates with Q-EKM key servers.
The diagnostics consists of the following tests:
For Q-EKM only: The tape drive used for the test must be
Note:
unloaded, ready, and online in order to run any of the tests.
• — Verifies the Ethernet communication link between the library
Ping
and the key servers.
•
Drive (Q-EKM only)
(communication from library to tape drive sled and from tape drive
sled to tape drive). The tape drive must be unloaded, ready, and
online in order to run this test. If this test fails, the Path and Config
tests are not performed.
• — Verifies that EKM services are running on the key servers.
Path
Note:
For Q-EKM only:
• — Verifies that the key servers are capable of serving
Config
encryption keys.
Configuring Encryption Key Management on the Library
.
— Verifies the tape drive's path in the library
This test cannot run if the Drive test fails.
Chapter 7 Encryption Key Management
check box.
FIPS
on page 203 for more
If you are running Q-EKM
FIPS
,
187