Quantum Scalar i6000 User Manual page 328

Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
310
Note: If you want to change a partition's encryption method,
make sure that the tape drives in that partition do not have
cartridges loaded. If there are cartridges in the tape drives,
you cannot change the encryption method.
3 Select the partition whose encryption method you want to change.
4 Change the encryption method by selecting or deselecting the
Library Managed check box. The supported methods include:
Method
Application
Managed (default)
Library Managed
Note: When you change a partition from Library Managed to
Application Managed, any encrypted data that was written
to the tapes while the partition was configured for library
managed encryption can no longer be read, until you
change the partition back to Library Managed.
5 To enable FIPS mode on all tape drives in the partition, click the FIPS
check box.
Note: There are specific requirements for FIPS. See
Encryption Solution
Description
This is the default setting if you have
encryption-capable tape drives in the
partition. This option should be used
you are connecting the library to an external
EKM server.
This option allows an external backup
application to provide encryption support to
all encryption-capable tape drives and media
within the partition.
If you want an application to manage
Note:
encryption, you must specifically configure
the application to do so.
Enables encryption support via connected
EKM servers to the partition. Choose this
option for SKM, Q-EKM, TKLM, SKLM or
SafeNet key servers.
on page 289 for details.
Quantum Scalar i6000 User's Guide
unless
FIPS-Certified