About The Ekm License; Step 2: Install The Ekm License Key On The Library - Dell PowerVault ML6010 Troubleshooting Manual

Encryption Key Management
Back to Contents Page
Encryption Key Management : Dell™ PowerVault™
ML6000 Tape Library User's Guide

About the EKM License

Configuring the Dell Encryption Key Manager (EKM) on the Library
EKM Path Diagnostics
Viewing Tape Drive Encryption Settings
Library Managed Encryption is a licensable feature. You must have a library managed encryption license installed on your
library in order to use the encryption key management features described in this chapter. For more information on licensing,
see Obtaining and Installing a License
The Dell PowerVault ML6000 supports the Dell Encryption Key Manager (EKM). The Dell EKM is a Java software program that
generates, protects, stores, and manages encryption keys. These keys are used by IBM LTO-4 and IBM LTO-5 Fibre Channel
and SAS tape drives to encrypt information being written to, and decrypt information being read from, tape media. EKM is
installed on a server or servers. The library is configured to communicate with these server(s). The encryption keys pass
through the library, so that encryption is "transparent" to the applications.
When you purchase library managed encryption, you receive the Dell EKM software application along with installation and
configuration instructions. This chapter describes how to configure your encryption key management (EKM) solution on the
library. This chapter also describes all of the EKM functions available on the library.
Refer to your Dell PowerVault ML6000 Encryption Key Manager User's Guide for information on how to manage the Dell EKM
outside of the library.
About the EKM License
If you purchase an EKM license after you purchased your library, you must install the license key on your library to enable the
EKM functionality.
The EKM license is sold on a per-drive basis. The license corresponds to the number of tape drives that you can enable for
library managed encryption. If your library contains more encryption-enabled tape drives than are covered by the license, you
will need to purchase an additional license to cover them. Your new license key replaces your current license key and contains
the entire license for the total number of tape drives.
Configuring the Dell Encryption Key Manager (EKM) on the
Library
Step 1: Upgrade Firmware
Upgrade your library and tape drive firmware to the latest released versions. The latest firmware and installation instructions
are available on http://support.dell.com.

Step 2: Install the EKM License Key on the Library

If your EKM license key is not already installed on the library, install it now (see
Step 3: Install EKM on a Server or Servers
You must supply a server or servers on which to install Dell EKM. When you purchase Dell EKM, you receive a CD which
contains the software to install on the server, along with installation instructions and a user's guide. You must set up your
EKM server(s) and install your license key before you can set up EKM on your library.
Note:
Since the Dell PowerVault ML6000 library needs to communicate with the EKM server in real time when reading
from or writing to an encryption-enabled drive, it is strongly recommended that you use both a primary and secondary
file:///T|/htdocs/stor-sys/ML6000/en/html/ch04_ekm.htm[9/17/2012 1:49:43 PM]
Key.
Obtaining and Installing a License Key).