User`s guide

Chapter 4 Configuring Your Library

EKM Management Solutions

Scalar i6000 User’s Guide 243

Encryption and Using Q-

EKM on the Scalar i60004

Supporting Encryption 4

For more information about installing and configuring the Q-EKM server

and Q-EKM best practices, see the Quantum Encryption Key Manager User’s

Guide (6-01847-01).

The Scalar i6000 library supports encrypting LTO-4

or greater tape media

using IBM LTO-4 or greater Fibre Channel drives only. All IBM LTO-4 or

greater FC drives are encryption-capable, but to use the Q-EKM software

application, you must purchase a Q-EKM license and provide a server or

servers on which to install Q-EKM. Q-EKM does not currently support

encryption on other tape drive types or manufacturer brands, even if they

are assigned to a partition selected for encryption.

You must be running Q-EKM version 2.0 (or

higher) to support IBM LTO-5 tape drives

The encryption keys pass through the library, so that encryption is

“transparent” to the applications. If you purchase Q-EKM, Quantum's

Service department will schedule an appointment to install the application

onto your server(s). If you purchase SKM, you will receive the software

application, two servers (optional beginning with SKM 1.1), and

installation and configuration instructions. This chapter describes how to

configure your encryption key management (EKM) solution (Q-EKM or

SKM) on the library.

Configuring Encryption Settings

Encryption on the Scalar i6000 tape library is enabled by partition only.

The default setting for encryption-capable drives permits external

application-managed encryption support on all encryption-capable tape

drives and media within a partition.

Note