User's Guide

Chapter 7 Encryption Key Management
Configuring Encryption Key Management on the Library
Scalar i500 User’s Guide 170
Step 2: Preparing Partitions for Library Managed Encryption 7
For each partition on which you want to enable library managed
encryption, do the following:
1 Make sure the partition contains encryption-supported and
encryption-capable tape drives and media. Note the following:
• Q-EKM partitions must contain only IBM LTO-4, IBM LTO-5,
and/or IBM LTO-6 tape drives.
• SKM partitions must contain only HP LTO-4, HP LTO-5,and/or
HP LTO-6 tape drives. SKM media must have valid barcode
labels affixed. SKM does not support the use of unlabeled media.
• KMIP partitions must contain only HP LTO-4 and/or HP LTO-5
tape drives.
1 On the tape drives, install the latest version of firmware that is
qualified for the library firmware installed on your library. Refer to
the library release notes for the correct version of tape drive
firmware. (It is recommended that you upgrade library firmware to
the latest release.)
2 Unload tape cartridges from all tape drives in the partitions on which
you are configuring EKM.
Step 3: Configuring Encryption Settings and Key Server Addresses
7
Configure encryption settings and key server information as follows:
1 From the Web client, select Setup > Encryption > System
Configuration.
The Setup - Encryption System Configuration screen displays (see
Figure 25
).
Note: You must be running Q-EKM version 2.0 (or higher)
to support IBM LTO-5 or LTO-6 tape drives.