Table of Contents
Advertisement
The Partition FIPS Support Mode Status screen lists all library partitions. The FIPS Support Mode
box is selected if FIPS Support Mode is enabled for a partition.
4. If a partition is not ready for FIPS Support Mode, its line will have a gray background and a note
explaining the issues. If you want to enable FIPS Support Mode for a partition that is not ready, click
Cancel to exit the wizard, and then correct the issues.
•
Verify that all tape drives in the partition are LTO-6 or later generation.
•
Verify that all LTO-6 tape drives in the partition are running firmware that supports Secure Mode.
•
Verify that all LTO-7 and later generation tape drives in the partition are running Secure Mode
firmware.
•
Verify that library-managed encryption is configured and enabled for the partition.
5. Select the FIPS Support Mode box for all partitions that should have FIPS Support Mode enabled and
unselect the FIPS Support Mode box for any partitions that should NOT have FIPS Support Mode
enabled. (If a partition already has FIPS Support Mode enabled and you want it to continue to have
FIPS Support Mode enabled, leave the box selected.)
NOTE:
If an LTO-7 or later generation drive has firmware that does NOT support Secure Mode and the
partition is configured with FIPS Support Mode enabled, the drive ports will be OFFLINE.
If an LTO-7 or later generation drive has firmware that supports Secure Mode and the partition is
configured with FIPS Support Mode disabled, the drive ports will be left configured and all keys will be
sent to the drive wrapped. The library will issue warning events.
For a current list of products that are FIPS 140-2 Validated, see the NIST FIPS 140-2 Crypto Module
Validation List. If FIPS 140-2 Validation is required, verify the validation status before purchasing the
product.
6. Click Next.
7. The Finish screen lists each partition that will have a configuration change and whether FIPS Support
Mode will be enabled or disabled. To complete FIPS Support Mode configuration, click Finish.
8. The wizard updates the screen as it configures each partition. When the wizard is finished, click Exit.
FIPS Support Mode prerequisites
The Federal Information Processing Standards (FIPS) are standards that are developed and released by
the United States federal government for use in computer systems by nonmilitary government agencies
and contractors. FIPS 140-2 covers standards for secure data encryption.
With FIPS Support Mode, the tape drives in a library partition operate in a mode that is compliant with
FIPS 140-2 requirements. Full compliance requires that the drives are running FIPS 140-2 compliant
firmware. When the LTO FIPS Support Mode wizard configures a partition for FIPS Support Mode, the
library enables Secure Mode for all the drives in that partition. FIPS Support Mode only works with library-
managed encryption (such as KMIP or the MSL Encryption Kit); it does not work with application-
managed encryption.
82
FIPS Support Mode prerequisites
Advertisement
Table of Contents
