User`s guide

Chapter 4 Configuring Your Library
EKM Management Solutions
Scalar i6000 User’s Guide 240
• If you are using both SKM and Q-EKM, you must separate the tape
drives among the partitions so that each partition only contains tape
drives supported by either SKM or Q-EKM. The library will assign
the correct servers (SKM or Q-EKM) depending on the drive type in
the partition.
• Only LTO-4 or higher tape cartridges will be encrypted in Library
Managed Encryption partitions (the partition may can contain LTO-2
and LTO-3 media, but they will not be encrypted).
• In order for data to be encrypted via library managed encryption, the
media must be blank or have been written to using library managed
encryption at the first write operation at the beginning of tape (BOT).
If the media was previously written in a non-encrypted format, all
data subsequently written to it will continue to be non-encrypted.
• You must have an LME license installed on the library (see Step 1:
Enabling the EKM License Key on page 236) before you can select
this option.
• Your SKM or Q-EKM servers must be installed, configured on the
library, and be operational before you can select this option.
Allow Application Managed — Allows your host application to provide
encryption support on all encryption-capable tape drives and media
within the partition. This is the default setting if the partition contains
encryption-capable tape drives. If you select this option, the library will
NOT communicate with the key server on this partition. If you want an
application to manage encryption, you must specifically configure the
application to do so. The library will not participate in performing
encryption. See your host documentation for further details.
To change the encryption method 4
1 Log on as an administrator.
2 If you are not already working from the physical library, select it.
From the View menu, click the name of the physical library.
3 Click Setup > Encryption > Partition Configuration.