User manual QUANTUM SCALAR I500 LIBRARY SETTING UP REV 03-2010

[. . . ] (If a Failure message appears, you may have entered an incorrect license key--try again. ) 5 Click Close. Step 3: Install Q-EKM on a Server or Servers 0 You must supply a server or servers on which to install Q-EKM. Quantum Field Services will schedule an appointment to install the software and configure your servers. Note: Since the i500 library needs to communicate with the Q-EKM server in real time when reading from or writing to an encryption-enabled drive, it is strongly recommended that you use both a primary and secondary Q-EKM server. This way, if the primary server is unavailable at the time the library needs encryption information, the secondary server can handle the request. [. . . ] If tape drives have cartridges loaded, you cannot change the encryption method. 3 Select an encryption method from the drop-down menu for each partition. (For tape drives that support encryption, the default is Allow Application Managed. ) The Encryption Method applies to all encryption-capable tape drives and media in that partition. Encryption Method Enable Library Managed Allow Application Managed Description For use with Q-EKM. Enables encryption support via a connected Q-EKM server for all encryption-capable tape drives and media assigned to the partition. application to provide encryption support to all encryption-capable tape drives and media within the partition. The library will NOT communicate with the Q-EKM key server on this partition. This is the default setting if you have encryption-capable tape drives in the partition. This option should remain selected unless you are connecting the library to an external Q-EKM server. Not for use with Q-EKM. Allows an external backup Note: If you want an external application to manage encryption, you must specifically configure the application to do so. The library will not participate in performing this type of encryption. Means that no tape drives in that partition support encryption. Unsupported If Unsupported is shown, it will be greyed out and you will not be able to change the setting. 4 Setting Up Q-EKM On the Library Setting Up Quantum Encryption Key Manager on Your Scalar i500 Library Document 6-01601-04 March 2010 4 Click Apply. 5 Save the library configuration (for instructions, see the Scalar i500 User's Guide). Perform EKM Path Diagnostics as described in Using EKM Path Diagnostics on page 5. Run EKM Path Diagnostics0 Using EKM Path Diagnostics The EKM Path Diagnostics consists of a series of short tests to validate whether the key servers are running, connected, and able to serve keys as required. Run the Manual EKM path diagnostics any time you change the key server settings or library encryption settings, and when you replace a tape drive. It is recommended that you test each drive that communicates with key manager servers. The diagnostics consists of the following tests: Note: The tape drive used for the test must be unloaded and online in order to run any of the tests. 0 · · Ping -- Verifies the Ethernet communication link between the library and the key servers. Drive -- Verifies the tape drive's path in the library (communication from library to tape drive sled and from tape drive sled to tape drive). The tape drive must be unloaded, ready, and online in order to run this test. If this test fails, the Path and Config tests are not performed. · · Path -- Verifies that EKM services are running on the key servers. This test cannot run if the Drive test fails. [. . . ] See Step 5: Configure Partition Encryption on page 4 for more details. Made in the USA. Quantum Corporation provides this publication "as is" without warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability or fitness for a particular purpose. Quantum Corporation may revise this publication from time to time without notice. COPYRIGHT STATEMENT © Copyright 2010 by Quantum Corporation. [. . . ]