Quantum Scalar i6000 User Manual page 308

Chapter 8: Encryption Key Management
FIPS-Certified Encryption Solution
290
between the tape drive and the library controller is authenticated and
encrypted.
Details about configuring FIPS mode include:
• Library firmware must be at version 630Q or later.
• HP LTO-5 and later tape drive firmware must be at the latest version
qualified with the Scalar i6000 library (see the
Notes
for qualified firmware levels).
• An Encryption Key Management license must be installed on the
library sufficient to cover the tape drive(s) on which you want to
enable FIPS mode.
• A Storage Networking license must be installed on the library.
Note: Use of FIPS on a drive does not count against the Storage
Networking license drive count. FIPS is not considered a
"Storage Networking feature;" however, the SNW license is
still required on the library.
• FIPS mode is configured by partition. FIPS partitions must contain
only HP LTO-5 or later FC tape drives.
• The partition encryption method must be set to Enable Library
Managed in order to set FIPS mode.
• FIPS mode is disabled by default.
• The library must be connected to Scalar Key Manager (SKM). SKM
software must be at version 2.0 or later in order to be FIPS certified.
FIPS currently only works with SKM.
• Ethernet connectivity is required for the tape drives on which you
want to enable FIPS mode. This means that every HP LTO-5 or later
FC drive in the partition must be connected to an Ethernet
Expansion blade installed in the library.
Caution: If the Ethernet Expansion blade fails and the attached
tape drives have FIPS mode enabled, all encryption
operations (encrypting, decrypting, key requests) on
the attached tape drives will fail. If this happens,
contact Quantum Support for a replacement Ethernet
Expansion blade as soon as possible.
Scalar i6000 Release
Quantum Scalar i6000 User's Guide