Table of Contents
Advertisement
NOTE:
A key is not generated when the library time is advanced past a time when a new key would have been
generated. If you advance the library time, check the automatic key generation policy to see whether a
new key is needed, and if so, manually generate it.
One new key is generated if the library is off at a time when a new key would have been automatically
generated. To prevent a new key from being generated in this case, disable automatic key generation
before powering off the autoloader or library.
Backing up the key server token data to a file when using the MSL Encryption Kit
As a best practice, back up the key server token data to a file each time an encryption key is added.
Procedure
1. Navigate to the Configuration > Encryption > USB—MSL Encryption Kit screen.
2. Expand the Key Management section.
3. Enter a password for the backup file.
The password must be at least eight characters and no longer than 16 characters. The password must
contain at least one lower case letter, one upper case letter, and at least two digits.
4. If you are creating a backup file to seed a new key server token, enter the number of keys to include in
the backup.
The library will back up the highest-numbered keys, which are normally the most recent.
5. Click Save.
Restoring key server token data from a backup file when using the MSL Encryption Kit
Procedure
1. Navigate to the Configuration > Encryption > USB—MSL Encryption Kit screen.
2. Expand the Key Management section.
3. Enter the key server token restore password.
This password is the password that was created when the key server token backup file was created. It
is not usually the key server token password.
4. Browse to the location of the key server token backup file on the local computer.
5. Click Restore.
Configuring an automatic key generation policy when using the MSL Encryption Kit
Procedure
1. Navigate to the Configuration > Encryption > USB—MSL Encryption Kit screen.
2. Expand the Key Management section.
3. Set the day of the week, time of day and frequency. A new key can only be generated when no media
is in any tape drive in the library, so when possible select a time when all drives in the library are
unloaded.
Backing up the key server token data to a file when using the MSL Encryption
Kit
79
Advertisement
Table of Contents
