Ibm Tape Library Encryption

My question really comes down to how customers that use ibm tape libraries with the hardware encryption handle their keys.

Ibm tape library encryption.

You can encrypt tape drives used with the ts7700 tapeattach. 1 tape library web service library key path diagnostics start tests. The ibm ts1150 tape drive 3592 e08 eh8 ibm ts1140 tape drive 3592e07 eh7 ibm ts1130 tape drive 3592 e06 eu6 and ibm ts1120 tape drive 3592 e05 encrypt data as it is written toany size ibm 3592enterprise tape cartridge 3592 tapecartridge including worm. Tivoli storage manager generates and stores the keys in the server database.

The ibm ts1040 lto 4 and latertape drives can also encrypt data asit is. The tape encryption overview describes tape encryption in the ts3500 tape library. New ibm lto ultrium 8 half high 6 gb sas and 8 gb fibre channel and full high 8 gb fibre channel drives feature numbers agkm agkn and agkp. In such cases policies are based on cartridge volume serial numbers.

Step 9 on tape library web manage library logical library select library modify encryption method. Ibm 3592 generation 2 and generation 3. This confirms your sklm server got well configured with tape for. Enter your ekm primary address and tcp port number in that page.

Ts4300 tape libraries include support for. We did not purchase the hardware encryption license with the library but are looking into it now due to poor performance with software encryption. Ibm linear tape open lto generation 4 and generation 5. Library managed encryption also enables other options such as encryption of all volumes in a library independent of bar codes.

Application encryption encryption keys are managed by the application in this case tivoli storage manager. 1 tape library web service library key path diagnostics start tests. Ibm tape technology supports different methods of drive encryption for the following devices. Step 9 on tape library web manage library logical library select library modify encryption method.

The ibm ts1120 3592 model e05 andlater tape drives can encrypt data as it is written to any size ibm enterprise tape cartridge 3592 including worm cartridges. If wanting to save data un encrypted encryption needs to be disabled on the tape media library or logical library the iop ipl d on the ibm i and then once the save is complete enable encryption on the tape media library or logical library and ipl the iop on the ibm i. Ibm ts4300 also offers enhanced availability and security by incorporating path failover and library managed encryption lme.