The Library - Dell PowerVault TL2000 User Manual

is installed at manufacturing time. Each drive receives a unique serial number and
certificate. The T10 application may validate each drive instance by checking the
drive's digital certificate.
CAUTION:
The library must be offline from any user and all media must be removed from
the drives before license keys are installed or any configuration modifications
are made. Please refer to "Power ON/OFF" on page 2-4 and "Removing
Cartridges from Magazine Slots" on page 9-1 for instructions to take the library
offline and to eject media from the drives.
To prevent possible data loss due to an EKM server failure, Dell recommends
the use of a primary and secondary EKM server. This configuration provides
redundancy in the event the primary EKM server is down or unavailable. Please
refer to Chapter 2 (Multiple Key Managers for Redundancy) of the Dell
Encryption Key Manager User's Guide and to "Configure Library: Encryption"
on page 5-41 for information on configuring a primary and secondary EKM for
your library.
If the backup job fails due to an EKM server failure, the job will recover if
connectivity is restored to the EKM server prior to expiration of the timeout set
in the tape backup software application.
Enabling library-managed encryption on a PowerVault TL2000 or TL4000 is a 6
step process.
1. Upgrade the library and drive firmware to the latest versions. The firmware
can be found at http://support.dell.com.
2. Enable library-managed encryption on the library via the license key if not
already licensed. Please refer to Figure 2-25 for activation instructions. .
If you purchased library-managed encryption at the time you purchased your
library, a hard copy of the license key is provided with your library as a
backup. If there are any issues with the license key for library-managed
encryption purchased with the library, please visit http://www.dell.com/
tapeautomation to obtain your license key. You will need the library serial
number and worldwide node name to obtain the license key. Please refer to the
following tables in this document for instructions on locating this information:
v Table 1.2 for library serial number
v Table 4.5 for library worldwide node name
If this does not resolve your issue, please contact Dell technical support.
3. Configure library-managed encryption on your library. Please refer to Figure
2-26 for instructions.
4. Install the Dell Encryption Key Manager (EKM) application on the server
designated for EKM. Please refer to Chapter 3.0 of the Dell Encryption Key
Manager User's Guide for instructions. This document can be found at
http://support.dell.com.
5. Configure the EKM application. Please refer to Chapter 4.0 of the Dell
Encryption Key Manager User's Guide for instructions.
6. Start the EKM application. Please refer to Chapter 5.0 of the Dell Encryption Key
Manager User's Guide for instructions.
Note: All encryption settings should be configured or re-verified in the drive after
any library or drive reset. This is because a new drive may have been added
or an existing drive may have been swapped with another drive.
Chapter 1. Product Description
1-7