User's Manual

Setting Up Quantum Encryption Key Manager on Your Scalar i500 Library
Document 6-01601-04
March 2010
Using EKM Path Diagnostics 5
4 Click Apply.
5 Save the library configuration (for instructions, see the Scalar i500 User’s Guide).
Run EKM Path Diagnostics0
Perform EKM Path Diagnostics as described in Using EKM Path Diagnostics on page 5.
Using EKM Path Diagnostics 0
The EKM Path Diagnostics consists of a series of short tests to validate whether the key
servers are running, connected, and able to serve keys as required.
Run the Manual EKM path diagnostics any time you change the key server settings or
library encryption settings, and when you replace a tape drive. It is recommended that
you test each drive that communicates with key manager servers.
The diagnostics consists of the following tests:
•
Ping — Verifies the Ethernet communication link between the library and the key
servers.
•
Drive — Verifies the tape drive’s path in the library (communication from library to
tape drive sled and from tape drive sled to tape drive). The tape drive must be
unloaded, ready, and online in order to run this test. If this test fails, the Path and
Config tests are not performed.
•
Path — Verifies that EKM services are running on the key servers. This test cannot run
if the Drive test fails.
•
Config — Verifies that the key servers are capable of serving encryption keys. This test
cannot run if the Drive test fails.
If any of the tests fail, try the following resolutions and run the test again to make sure it
passes:
•
Ping Test Failure — Verify that the Q-EKM server host is running and accessible from
the network to which the library is connected.
•
Drive Test Failure — Look for any tape drive RAS tickets and follow the resolution
instructions in the ticket.
•
Path Test Failure — Verify that the Q-EKM server is actually running and that the
port/SSL settings match the library configuration settings.
•
Config Test Failure — Verify that the Q-EKM server is set up to accept the tape drive
you are testing.
Differences Between
Manual and Automatic EKM
Path Diagnostics
0
There are two ways to perform EKM Path Diagnostics:
• Manual EKM Path Diagnostics
• Automatic EKM Path Diagnostics
Note: The tape drive used for the test must be unloaded and online in order to run
any of the tests.