Configure Library: Ipsec; Configure The Certificate - IBM TS3100 Setup, Operator, And Service Manual

8. When the library is back online, go to Configure Library > Network. Select User Defined Certificate
for the Certificate Type and check the Enable SSL for Web check box. Click Submit, and restart the
library again for the changes to be applied.
Figure 113. Configure the certificate
Note:
v The imported SSL Certificate/Private Key is not saved during the Save/Restore function on the
Library. If the TS3100/TS3200 Library chassis is replaced, the Generate Certificate Request process
must be started over again, if needed.
v Restrictions apply if the tape library supports IPSec. The user-defined certificate cannot be used with
IPSec. HTTPs (SSL for web) must be disabled or the system-defined certificate must be used before
IPSec certificates can be uploaded.

Configure Library: IPSec

This page shows the current IPSec configuration of the library and allows modification to the settings.
Internet Protocol Security (IPSec) is a protocol suite for securing Internet Protocol (IP) communications by
authenticating and encrypting each IP packet of a communication session. IPSec also includes protocols
for establishing mutual authentication between agents at the beginning of the session and negotiation of
cryptographic keys that are used during the session.
The following requirements are mandatory to use the USGv6 IPSec/IKE features:
v IBM TS3100/TS3200 tape library
v Firmware Level that supports IPSec
v IPv6 network environment
v Peer implementations of IPSec/IKEv2 for testing
– Linux
- IPSecTools
135
Operations