Configure Library: Encryption Activation Screen - Dell PowerVault TL2000 User Manual

3. Click Activate to save the key and expand the screen for additional encryption
Figure 4-24. Configure Library: Encryption Activation screen
4. Select Enable SSL for EKM to enable Secure Sockets Layer for the Dell
5. Select an Encryption method for each logical library.
6. Select an Encryption policy for each logical library.
7. A primary and secondary EKM server can be set for each logical library. Each
settings.
Encryption Key Manager application.
v Without an encryption license key, select None or Application Managed
Encryption.
v With an encryption license key, select Library Managed Encryption.
v Encrypt All: This is the default policy. It encrypts all cartridges using the
default data keys specified in the EKM. This setting applies to all drives in a
TL2000/TL4000 logical library.
v Internal Label - Selective Encryption: Check your tape backup software
application documentation to see if this feature is supported.
v Internal Label - Encrypt All: Check your tape backup software application
documentation to see if this feature is supported.
partition has its own Encryption and EKM settings. Maintaining primary and
secondary EKM servers is desired for maximum availability of encrypted
backup and recovery. These settings are required for Library Managed
Encryption only. Enter the EKM Server Setting information.
Note: The IP address of the Encryption Key Manager (EKM) host must be
consistent with the library Network settings. This means if the library is
set to IPV4 only network support, the EKM host must be an IPV4
address. If the Dell PowerVault library is required to function in a mixed
network environment the library must be set to IPv4 + IPv6.
v Primary IP address (IPv4 or IPv6): Enter the IP address of the primary EKM
server.
v Primary TCP port: After entering the Primary IP address, the library will
automatically set the value of the Primary TCP port.
v Secondary IP address (IPv4 or IPv6): Enter the IP address of the secondary
EKM server.
v Secondary TCP port: After entering the Secondary IP address, the library
will automatically set the value of the Secondary TCP port.
Note: The Default Port for TCP (SSL disabled) is 3801. The Default Port for
SSL is 443. These values are the default values set by the library. They
can be changed depending on the user configuration but the user has
to make sure they match the EKM properties file.
Chapter 4. Installation and Configuration
4-23