User`s guide

Chapter 4 Configuring Your Library
EKM Management Solutions
Scalar i6000 User’s Guide 239
An Operation in progress dialog box appears, indicating the settings
are being modified. Upon successful completion, the system returns
to the main console.
Step 3: Configuring Partitions for Encryption 4
You can use the Partition Configuration screen to change the encryption
method used by a partition.
Encryption on the Scalar Enterprise library is enabled by partition only.
You cannot select individual drives for encryption; you must select an
entire partition to be encrypted. Only partitions that are encryption-
capable are displayed.
If you encrypt a partition, all encryption-capable tape drives are enabled
for encryption, and all data written to supported media is encrypted. Non
encryption-capable tape drives will not be enabled for encryption, and
non supported media will not be encrypted.
You can modify only one partition at a time.
Encryption Methods, Details, and Restrictions 4
The following encryption methods are available on the library:
Enable Library Managed — Enables library managed encryption support
via a connected key manager server— either Scalar Key Manager (SKM)
or Quantum Encryption Key Manager (Q-EKM) — for all tape drives and
encryption-capable media assigned to the partition.
• SKM supports encryption on LTO-4 data cartridges using HP LTO-4
or newer Fibre Channel drives. If you are using SKM and want to
enable Library Managed Encryption for a partition, all of the tape
drives in that partition must be HP LTO-4 or newer or LTO-5 Fibre
Channel tape drives.
Generating Encryption Keys for SKM: The library automatically
generates keys as soon as you set up the servers. Note that you
cannot change a partition to Library Managed Encryption until after
key generation is complete.
• Q-EKM supports encryption on LTO-4 data cartridges using IBM
LTO-4 or newer Fibre Channel tape drives. If you are using Q-EKM
and want to enable Library Managed Encryption for a partition, all of
the tape drives in that partition must be either IBM LTO-4 or newer
or LTO-5 Fibre Channel tape drives.