Quantum Scalar i6000 User Manual page 326

Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
308
managed encryption at the first write operation at the
beginning of tape (BOT). If the media was previously written in
a non-encrypted format, all data subsequently written to it will
continue to be non-encrypted.
• Data stored on tape cartridges will not be encrypted with more
than one encryption key.
• Q-EKM supports encryption for data cartridges using IBM LTO-4
or later Fibre Channel tape drives. If you are using Q-EKM and
want to enable library managed encryption for a partition, all of
the tape drives in that partition must be IBM LTO-4 and/or later
Fibre Channel tape drives.
Generating Encryption Keys for Q-EKM: Encryption keys are
generated during the Q-EKM installation and configuration
process.
• SKM supports encryption for data cartridges using HP LTO-4,
and later as well as IBM LTO-5 and later Fibre Channel drives. If
you are using SKM and want to enable library managed
encryption for a partition, all of the tape drives in that partition
must be either HP LTO-4 and/or later or IBM LTO-5 and/or later
Fibre Channel tape drives.
Generating Encryption Keys for SKM: The library
automatically generates keys as soon as you configure the SKM
server. Note that you cannot change a partition to library
managed encryption until after key generation is complete.
Caution: Once encryption keys have been generated, make
sure to back up both SKM servers before using any
encryption keys. Refer to the
User's Guide.
• TKLM/SKLM supports encryption for data cartridges using IBM
LTO-4 or later Fibre Channel tape drives. If you are using TKLM/
SKLM and want to enable library managed encryption for a
partition, all of the tape drives in that partition must be IBM
LTO-4 and/or later Fibre Channel tape drives.
• Generating Encryption Keys for TKLM/SKLM: Encryption keys
are generated during the TKLM/SKLM installation and
configuration process.
Scalar Key Manager
Quantum Scalar i6000 User's Guide