Chapter 7 Encryption Key Management
Configuring Encryption Key Management on the Library
Scalar i500 User’s Guide 199
To export encryption keys:
1 Before starting this process, read and follow the sequence of steps
outlined in Sharing Encrypted Tape Cartridges
on page 196.
2 From the Tools menu, select EKM Management > Encryption Key >
Export.
3 Assign the encryption certificate with which you will “wrap”
(encrypt) the keys by selecting it from the Certificate Name Used For
Export drop-down list. Choose the certificate that belongs to the
server to which the keys will be imported.
4 Select which SKM encryption keys to export from the following
options:
•
Export Used — Exports all the keys that have ever been used to
encrypt tape cartridges in the library performing this export. Also
exports all keys that were imported onto the key server, via a
“key import” operation, from any library.
Note: Missing/Changed Barcode Labels — If a tape cartridge
barcode label is missing, the key used to encrypt the tape will
not be exported in an Export Current operation. If a tape
cartridge barcode label is changed, the key used to encrypt
the tape will not be exported in an Export Current or Export
Selective operation. The keystore metadata pairs the data
encryption key with the label that was present at the time of
first encryption. If the label is lost or changed, the pairing is
lost, and these export options will either export no key or
possibly the wrong key. Encryption read/write operations are
not affected by media barcode label and will continue to
work correctly.
Note: The owner of that server should have sent you the
certificate and you should have imported it (see Sharing
Encrypted Tape Cartridges on page 196 and Importing
Encryption Certificates on page 198). The drop-down list
contains all of the encryption certificates that you have
ever imported onto your SKM servers (indicated by the
word “imported” in the list), as well as the certificate
belonging to your SKM server pair (indicated by the word
“native” in the list).
To Next Page
Loading...
Need help?
General