Quantum Scalar i6000 Quick Start Manual page 19

Step 7: Install Required Drives and Drive Firmware
To install the required drive firmware:
1 If not already installed, install HP LTO-4 and/or LTO-5 Fibre Channel tape drives in the partition(s) you
will be using for library-managed encryption.
2 Unload all tape cartridges from these tape drives.
3 On the tape drives, install the latest version of firmware that is qualified for the library firmware installed
on your library. Refer to the Scalar i6000 Release Notes for the correct version of tape drive firmware.
Step 8: Install the Root and Client Certificates in the Library
Transport Layer Security (TLS) communication certificates are unique certificates that must be installed on
the library in order for the library to communicate securely with attached SafeNet KeySecures. TLS
certificates (the client and CA certificates) will be provided by your SafeNet server administrator.
Your server administrator should provide the following certificates:
• Root Certificate, also called the CA certificate, or Certificate Authority Certificate (KeySecure_CA.crt
from the example above)
• Client Certificate (qtmbundle.p12 from the example above)
These files must be in the proper format, as follows. If any of the following requirements is not met, neither
of the certificates will be imported.
• The Root Certificate must be 2048 bits and be in PEM format.
• The Client certificate must be 1024 bits and be in pkcs12 (.p12) format.
Note:
The .p12 format combines the public/private key pair files in .pem file format and password
protects access to such .pem certificate files.
• The Client certificate must be signed by the Root Certificate.
• Certificates must have the Organization name (O) set in their Issuer and Subject info.
• The same Root Certificate must be installed on the encryption key servers and the library.
• All the certificates must have a valid validity period according to the date and time settings on the
encryption key server.
Follow the steps below to install the certificates.
1 Place the certificate files in an accessible location on your computer.
2 From the library Tools menu, select EKM Management > Import Communication Certificates.
The Communication Certificate Import dialog box appears. If no certificates are installed, then
nothing will be listed under Current Certificates. If certificates are already installed, then any
certificates you install will overwrite the currently installed certificates.
Q S 6000 & S
UANTUM CALAR I
N K S Q
AFE ET EY ECURE UICK
S G
TART UIDE
22