Encryption; Library Sharing - IBM TS4300 3555 User Manual

• Basic Function - To initiate use of cartridges, the user issues a Move Cartridge command to the drive
through the Management GUI. After the load, the host application can begin data I/O activity. When the
host application unloads the drive, the library moves the next cartridge into the drive. This behavior is
implicit, unless otherwise defined by selection of another option.
• Loop Option - If a move sequence ends because no more cartridges are available in the current logical
library, the sequence starts again by loading the first cartridge of the logical library. This option can be
chosen with or without the Autoload function.
• Autoload Option - If enabled, the library loads the first cartridge of the logical library to the Sequential
Mode tape drive during library startup after inventory scan is finished. This option changes the implicit
behavior of the Basic function. This option can be chosen with or without the Loop option.
If storage slots are configured to I/O slots after assignment to a Sequential Mode logical library, they are
still considered valid available slots and are used for movements. This option stays until you run the
expert wizard again, and then these I/O slots no longer appear in the list of available slots. Finishing the
expert wizard then sets the new slot assignment and these I/O slots can no longer be used for
movements.
To enable sequential mode, click the Enable Sequential Mode check box in the Basic Logical Library
Wizard or Expert Logical Library Wizard.

Encryption

All supported tape drives in this library support encryption.
The encryption enabled drive contains the necessary hardware and firmware to encrypt and decrypt host
tape application data. Encryption policy and encryption keys are provided by the host application or host
server. A drive digital certificate is installed at manufacturing time. Each drive receives a unique serial
number and certificate. The T10 application might validate each drive instance by checking the drive's
digital certificate.
The library provides these options.
1. Encryption disabled
2. Application Managed Encryption (AME)
3. Library Managed Encryption (LME). LME is a built-in feature that is enabled by using a purchased
license. The LME feature can be ordered from the factory, or you can order it as a field upgrade. To
order a feature, contact your IBM Sales Representative or Business Partner. See Optional Features.
For configuration details, see "Configuring Library Managed Encryption" on page 73.
The default is Application Managed Encryption.
Note: All encryption settings must be configured or reverified in the drive after any library or drive reset. A
new drive might be added or an existing drive might be swapped with another drive.

Library sharing

The library can be configured into one or more logical libraries that can be shared by multiple
applications.
It is advantageous to be able to share a single physical library between heterogeneous or homogeneous
applications. However, some applications (and some servers) do not allow for sharing a library between
systems.
The library Management GUI provides two methods for logical library configuration.
1. A quick configuration for a simple one logical library configuration
2. An advanced configuration action for a multiple logical library configuration
The second method gives the ability to create configurations that enable the library to process commands
from multiple heterogeneous applications (such as an IBM System p application and a Windows
application) and multiple homogeneous applications (for example, the same application run by several
System p servers). See "Advanced library configuration" on page 58.
Chapter 1. Overview 17