Getting Started Guide

Enter the PIN
When the key server token is inserted, the autoloader
or library will recognize it as a new token and display
a dialog on the RMI requesting that you enter a PIN.
The new PIN must be between 8 and 16 characters
long and contain at least one capital letter, at least
one lower case letter, and at least two digits. Follow
the directions in the dialog to enter your PIN.
If too many incorrect PIN entries are attempted, the
token must be removed and reinserted to attempt
additional PIN entries.
Store a copy of the PIN in a secure location.
CAUTION: The key server token protects the
encryption keys with a personal identification
number (PIN). If you lose the PIN, you will not
be able to restore data from your encrypted
tapes. Neither you nor HP can recover a lost
PIN. Keep a copy of the PIN in a safe place.
Configure the encryption mode and features
MSL6480
From the MSL6480 Configuration > Encryption > USB
— MSL Encryption Kit screen Pin Management area
you can change the PIN or token name.
Autoloader and other libraries
From the Configuration: Security page you can enter
the name of the token, enable or disable encryption
for the autoloader or library, and enable the
autoloader or library to automatically generate new
keys. If your library has multiple partitions, you can
enable or disable encryption for each partition that
contains an LTO-4 or later generation tape drive. Only
one encryption key is used at a time to write tape
cartridges and the same encryption key is used by all
tape drives in the library.
Enter the name of the token in the Token Name field.
By default, you must generate new keys manually.
Optionally, you can enable Automatic key generation
to have the autoloader or library to automatically
generate a new key periodically. Set the generation
time and period in accordance with your security
policy. Once a token contains 100 keys you will need
to obtain another token. Keys can never be deleted
from the token.
Enable encryption for the autoloader or library, or for
one or more partitionss that contain an LTO-4 or later
generation tape drive.
Click Submit.
NOTE: The library uses the same write
encryption key (the Current key) for all logical
libraries or partitions with encryption enabled.
If the autoloader or library is writing an
encrypted tape when you change the security
configuration, the new configuration will take
effect for the next tape loaded into an LTO-4 or
later generation tape drive.
Page 4