Prerequisites for Library Managed Encryption:

vSAS and Fibre Channel LTO Ultrium 4 Tape Drive (Full Height or Half Height) Note: Fibre Channel is full height drive only.

vUltrium 4 Tape Cartridge

vLibrary firmware level 5.80 or higher

vDrive firmware level 77BE or higher

vDell Encryption Key Manager application

Setting a Drive’s Method of Encryption

1.Click Encryption (Configure Library Encryption) in the left navigation pane.

a77ug199

Figure 4-24. Feature Activation Key screen

2.On the Encryption screen, enter the Feature Activation Key to make available the library managed encryption options.

3.Click Activate to save the key and expand the screen for additional encryption settings.

a77ug192

Figure 4-25. Configure Library: Encryption Activation screen

4.Select Enable SSL for EKM to enable Secure Sockets Layer for the Dell Encryption Key Manager application.

5.Select an Encryption method for each logical library.

vWithout an encryption license key, select None or Application Managed Encryption.

vWith an encryption license key, select Library Managed Encryption.

6.Select an Encryption policy for each logical library.

vEncrypt All: This is the default policy. It encrypts all cartridges using the default data keys specified in the EKM. This setting applies to all drives in a TL2000/TL4000 logical library.

vInternal Label - Selective Encryption: Check your tape backup software application documentation to see if this feature is supported.

vInternal Label - Encrypt All: Check your tape backup software application documentation to see if this feature is supported.

7.A primary and secondary EKM server can be set for each logical library. Each partition has its own Encryption and EKM settings. Maintaining primary and secondary EKM servers is desired for maximum availability of encrypted

4-22Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide

Page 72
Image 72
Dell TL2000 manual Setting a Drive’s Method of Encryption, Feature Activation Key screen