Quantum Scalar i6000 User Manual page 315

Quantum Scalar i6000 User's Guide
for a partition, all of the tape drives in that partition must be
IBM LTO-4, LTO-5, and/or IBM LTO-6 Fibre Channel tape drives.
Generating Encryption Keys for Q-EKM: Encryption keys are
generated during the Q-EKM installation and configuration
process.
• SKM supports encryption for data cartridges using HP LTO-4,
LTO-5, or HP LTO-6 Fibre Channel drives. If you are using SKM
and want to enable library managed encryption for a partition,
all of the tape drives in that partition must be HP LTO-4, LTO-5,
and/or HP LTO-6 Fibre Channel tape drives.
Generating Encryption Keys for SKM: The library
automatically generates keys as soon as you configure the SKM
server. Note that you cannot change a partition to library
managed encryption until after key generation is complete.
Caution: Once encryption keys have been generated, make
sure to back up both SKM servers before using any
encryption keys. Refer to the
User's Guide.
• RKM supports encryption for data cartridges using HP LTO-4,
LTO-5, or HP LTO-6 Fibre Channel drives. If you are using RKM
and want to enable library managed encryption for a partition,
all of the tape drives in that partition must be HP LTO-4, LTO-5,
and/or HP LTO-6 Fibre Channel tape drives.
Generating Encryption Keys for RKM: Encryption keys are
generated during the RKM installation and configuration
process.
• KMIP-compliant key management supports encryption for
data cartridges using HP LTO-4, LTO-5, or HP LTO-6 Fibre
Channel drives. If you are using KMIP-compliant key servers and
want to enable library managed encryption for a partition, all of
the tape drives in that partition must be HP LTO-4, LTO-5, and/or
HP LTO-6 Fibre Channel tape drives.
Generating Encryption Keys for KMIP-compliant key servers:
Encryption keys are generated one at a time, as needed, upon request.
Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
Scalar Key Manager
301