Configure Library: Drives - IBM TS3100 Setup, Operator, And Service Manual

v Without an encryption license key, select None or Application Managed Encryption.
v With an encryption license key, select Library Managed Encryption or System Managed
Encryption.
9. Select an Encryption policy, from the pull-down menu, for each logical library.
v Encrypt All: The default policy. It encrypts all cartridges with the default data keys that are
specified in the key manager. This setting applies to all drives in the 3573 logical library.
v Internal Label - Selective Encryption: This policy is based on the internal volume label
information. Currently, the only application that supports this option is Symantec NetBackup.
Encrypts cartridges only with pool identifiers 1500 - 9999 (inclusive), with keys specific to each
pool. Labels for these keys are generated by the tape drive that is based on the pool identifier; for
instance, key label IL_NBU_1505 is generated for a cartridge in pool 1505.
v Internal Label - Encrypt All: This policy is based on the internal volume label information.
Currently, the only application that supports this option is Symantec NetBackup. Encrypts all
cartridges. Cartridges with pool identifiers 2000 - 65535 (inclusive) are encrypted with keys
specific to each pool. Labels for these keys are generated by the tape drive that is based on the
pool identifier; for instance, key label IL_NBU_2505 is generated for a cartridge in pool 2505.
10. A primary and secondary key management server is set for each logical library. Each partition has its
own Encryption and key management settings. Maintaining primary and secondary key
management servers is wanted for maximum availability of encrypted backup and recovery. These
settings are required for Library Managed Encryption only. Enter the EKM Server Setting
information.
v Primary IP address (IPv4 or IPv6): Enter the IP address of the primary key management server.
v Primary TCP port: After the Primary IP address is entered, the library will automatically set the
value of the Primary TCP port.
v Secondary IP address (IPv4 or IPv6): Enter the IP address of the secondary key management
server.
v Secondary TCP port: After the Secondary IP addressis entered, the library automatically sets the
value of the Secondary TCP port.
Note: The Default Port for TCP (SSL disabled) is 3801. The Default Port for SSL is 443. These
values are the default values set by the library. They can be changed depending on the user
configuration but the user must make sure that they match the IBM SKLM properties file.
Note: The Advanced Encryption Settings are for Engineering Support only.
11. Click Submit to apply the changes.
12. Record the Feature Activation Key (or apply one of the labels) on the Appendix G, "Library
Configuration Form," on page 321 for future reference. It is important to save your extra Feature
Activation Key labels in a secure location for future reference.
13. Install the IBM SKLM application on your host. Refer to the IBM SKLM Knowledge Center online for
information on locating the appropriate IP address and port.

Configure Library: Drives

This page allows you to modify the current ID assigned to a SCSI or Fibre Channel drive. Any drive in
the library is powered off by clearing the check mark in the Power On box. The displayed information
varies depending on the library model and drive type (SCSI, SAS, or Fibre Channel). Table 34 on page
128 lists all available elements on this page. An "X" indicates that the element displays for the specified
drive type.
127
Operations