Scalar I500 User's Guide - Quantum scalar i500 User Manual

Scalar i500 User's Guide

To manually generate data encryption keys:
1 Make sure that both SKM servers are running and operational.
2 From the library's Web client, access the encryption partition
configuration screen (Setup > Encryption > Partition
Configuration)
.
3 Select an SKM partition configured for library managed encryption,
and temporarily disable library managed encryption by changing the
encryption method from Enable Library Managed to Allow
Application Managed. Remember which partition it is, because you
will be changing it back in a few minutes. Make sure to click Apply.
When you change the partition's encryption
Caution:
method to Allow Application Managed, the
data that was written to the tapes while the
partition was configured for Enable Library
Managed can no longer be read, until you
change the partition back to Enable Library
Managed. You will only be disabling for a short
time, and then changing back to Enable Library
Managed (just to trigger the key generation
process) so this should have little effect, unless
you forget to turn it back to Enable Library
Managed.
4 Wait 3 minutes to allow the changes to complete.
5 Go back to the encryption partition configuration screen and change
the partition back to Enable Library Managed. Again, make sure to
apply the changes.
6 Wait for the process to complete before resuming library operations.
7 Back up both SKM servers. You must back up both SKM servers
every time you generate new data encryption keys to protect your
data in case of catastrophic server failure. See the Scalar Key Manager
User's Guide for instructions on backing up the SKM servers.
Chapter 7 Encryption Key Management
Configuring Encryption Key Management on the Library
195