Quantum Scalar i6000 User Manual page 340

Chapter 8: Encryption Key Management
Using SKM
322
select your "native" certificate. You might also need to export
your "native" certificate for disaster recovery in the event that
one of your SKM servers failed and you needed to re-import all
of your keys onto a new SKM server.
5 Select which SKM encryption keys to export from the following
options:
• Export Used — Exports all the keys that have ever been used to
encrypt tape cartridges on the library.
• Export Current — Exports only keys for tape cartridges
currently present in the library.
• Export Selective — Exports the keys that are associated with a
string of characters that you type into the text box. Each key is
associated with its encrypted tape cartridge, identified by the
tape cartridge barcode. You can type in all or part of a tape
cartridge barcode, and any keys that are associated with that
string will be exported. This is helpful if you only want to export
a single key associated with a particular tape cartridge.
6 Click OK.
Each key is wrapped (encrypted) using the destination public key
contained on the selected destination encryption certificate. All the
selected keys are saved to a single file.
Retrieving SKM Server Logs
The SKM Server Logs contain information on activity that has occurred
on the SKM servers. You can save the logs to a location on a computer,
or e-mail the logs to a recipient. The logs downloaded from the servers
are stored in the form of tar files.
To access the file, you will have to untar the file first.
To retrieve these logs, you must have Library Managed Encryption
licensed on the library and be running a SKM server or servers.
Note: This function is available to users with administrator-level
privileges only.
Quantum Scalar i6000 User's Guide