IBM TS2900 Setup, Operator, And Service Manual page 72

Note: System Managed Encryption and Library Managed Encryption are transparent to each other. A
|
tape encrypted with System Managed Encryption might be decrypted with Library Managed
|
| Encryption, and vice versa, provided both have access to the same EKM keystore.
5. Select the Primary EKM Server Settings (Library Managed Encryption only) - the address of the
primary encryption key manager on a server. IPv4 and IPv6 addresses are supported. Host names can
be entered instead of numerical IP addresses if the DNS server is specified.
v Address - The IP address of the primary encryption key manager.
v TCP port number - The port number of the primary encryption key manager for TCP. The default
port number is 3801.
v SSL port number - The port number of the primary encryption key manager for SSL. The default
port number is 443.
6. Select the Secondary EKM Server Settings (Library Managed Encryption only) - The address of the
secondary encryption key manager on a server. IPv4 and IPv6 addresses are supported. Host names
can be entered instead of numerical IP addresses if the DNS server is specified.
v Address - The IP address of the secondary encryption key manager.
v TCP port number - The port number of the secondary encryption key manager for TCP. The
default port number is 3801.
v SSL port number - The port number of the secondary encryption key manager for SSL. The default
port number is 443.
7. Select the Encryption policy settings (library-managed encryption only).
v Encrypt All - All tape cartridges that are loaded into the tape drive are encrypted.
| v Internal Label - Selective Encryption - This option is used only for Veritas Technologies
NetBackup.
v Internal Label - Encrypt All - This option is used only for Veritas Technologies NetBackup.
|
8. Skip over the Advanced Encryption Settings. The purpose of these advanced encryption settings is to
allow only IBM Support personnel (under the direction of the drive development team) to provide a
solution to an unforeseen problem or to support a unique configuration. These options are not
intended for use by the customer without the guidance of IBM Technical Support.
9. Click Submit to enable the settings.
46
IBM TS2900 Tape Autoloader: Setup, Operator, and Service Guide Machine Type 3572