Quantum Scalar i40 User's Guide download pdf (Page 231)

Chapter 7: Encryption Key Management

Performing Scalar Key Manager Functions Available on the Library

Quantum Scalar i40 and Scalar i80 User’s Guide 203

Figure 39 Changing

Encryption Method back to

LME enabled

8 Wait for the process to complete before resuming library

operations.

9 Back up both SKM server keystores. See the

Scalar Key Manager

User’s Guide

for instructions on backing up the keystores.

Caution: You must back up the keystores every time you

generate new data encryption keys to protect against

catastrophic server failure.

Sharing Encrypted Tape

Cartridges

If you are using SKM, you can share encrypted tapes with other

companies and individuals who also use SKM for managing encryption

keys.

Each SKM server provides a unique encryption key for each tape

cartridge that is encrypted. To read an encrypted tape in a library that is

attached to an SKM server that is different than the server that originally

provided the encryption key, the encryption key from the originating

(i.e., source) SKM server needs to be shared with the receiving (i.e.,

destination) SKM server. The key (or list of keys, if there is more than one

tape), is exported from the source SKM server to a file, which is sent to

the destination recipient. Each key contained in the file is encrypted

using the public key of the destination SKM server. The destination SKM

server provides its public key to the source SKM server as part of an

Encryption Certificate, which the source SKM server uses to wrap

(encrypt) the encryption keys for transport. Upon arrival, the file

containing the wrapped encryption keys can only be unwrapped by the

corresponding private key, which resides on the destination SKM server

and is never shared.

1 2 ... 226 227 228 229 230 231 232 233 234 235 236 ... 339 340

No comments

Quantum Scalar i40 User's Guide Page 231