IBM System Storage TS3400 Tape Library Maintenance Information page 272

Table A-1. Encryption sense data (continued)
SK ASC ASCQ
3 EE D0 Encryption - Data
Read Decryption
Failure
3 EE D1 Encryption - Data
Read after Write
Decryption Failure
3 EE E0 Encryption - Key
Translation Failure
5 EE E2 Encryption - Key
Translation
Disallowed
3 EE F1 Encryption -
Encryption Fenced
(Write)
A-6
TS3400 Tape Library Maintenance Information
Description Impact
EKM
Explanation
The tape drive was unable to
decrypt data using an
application-provided key. The
probable cause is use of the
wrong encryption key. In rare
cases this may also be caused
by a failure in the tape drive
encryption hardware.
The tape drive wrote
encrypted data and was
unable to decrypt it after
reading it back. The probably
cause is a tape drive code or
hardware problem.
A permanent error occurred
during a key translation
operation. The cartridge is in
an indeterminate state.
An encryption key translation
was requested, but the
encryption proxy rejected the
request. Possible causes: a
prior translation is pending
and has not yet completed, or
the Externally-Encrypted
Data Key (EEDK) on the
cartridge is persistently
unencrypted.
The EKM has set an
encryption fence condition
preventing further writing.
This fence condition will be
cleared when the cartridge is
demounted.
Note: This only occurs with
the Library-managed
encryption method. Possible
causes: a mismatch between
the cartridge volser and the
volser ranges used for
encryption policy.
Customer Action Required
Retry the command using the
encryption key that was used
when the cartridge was
written. If the problem
persists, use the tape drive
diagnostics to determine
whether there is a problem
with the encryption
hardware.
Obtain a drive dump. Use the
tape drive diagnostics to
determine whether there is a
problem with the encryption
hardware. If the diagnostics
do not indicate a problem,
refer to your EKM
documentation.
The cartridge may need to be
accessed with the old key or
with the new key. This tape
should be copied and retired.
Verify that the tape drive is set
for the correct encryption
method (application, system,
or library managed) and that
the encryption proxy is
configured correctly.
Ensure that the cartridge
volser is in the correct volser
range, since volser ranges are
associated with encryption
policy.