User's Manual
Setting Up Quantum Encryption Key Manager on Your Scalar i500 Library
Document 6-01601-04
March 2010
Backing Up Keystore Data 7
•If Completed appears in the Progress Window, the diagnostics were performed
(this does not mean that the diagnostics passed, just that the diagnostics were
performed). Click
Close to close the Progress Window.
•If
Failure appears in the Progress Window, the diagnostics were not able to be
performed. Follow the instructions listed in the Progress Window to resolve any
issues that occurred during the operation.
Automatic EKM Path
Diagnostics
0
You can enable the library to automatically perform EKM Path Diagnostics at selected
intervals. During each interval, the library tests every configured key server. The library
generates a RAS ticket if there are problems. By default, this feature is disabled and the
test interval is 10 minutes. It is recommended that you leave Automatic EKM Path
Diagnostics disabled, unless network interruptions are a common cause of encryption
failures at your site.
For a list of tests performed, seeUsing
EKM Path Diagnostics on page 5.
To enable Automatic EKM Path Diagnostics:
1 From the Web client, select
Setup > Encryption > System Configuration.
2 Select the
Automatic EKM Path Diagnostics check box.
3 Select a test interval from the drop-down list.
4 Specify the number of consecutive, missed test intervals required before the library
generates a RAS ticket informing you that the test could not be performed within the
specified intervals.
Backing Up Keystore Data 0
Due to the critical nature of the keys in your keystore, it is vital that you back up your
keystore data on a non-encrypted device so that you can recover it as needed and be able
to read the tapes that were encrypted using those encryption keys associated with that
tape drive or library.
Caution: Running Automatic EKM Path Diagnostics may cause an increase
in RAS tickets if tests are skipped due to tape drives being
unavailable for a configurable number of consecutive test
intervals. To reduce the occurrences of RAS tickets, you can
specify the number of consecutive test intervals required to
generate a RAS ticket to a higher number, or you can set the library
to never generate a RAS ticket for missed test intervals.