Quantum Q-EKM User's Guide download pdf (Page 56)

Sharing Encrypted Tapes – Import/Export Operations

Exporting the Public Certificate

Quantum Encryption Key Manager User’s Guide 43

The reasons you should NOT change file names are:

• The default file name contains an alias, which is either the library

serial number or WWN key (see Understanding How Q-EKM Uses

Aliases on page 41). The alias is required in order to import the file. If

you remove the alias from the name of a file you are sending to a

recipient, you will still have to provide the recipient with the alias so

they can enter it when importing the file. Then the recipient must

perform an extra step to manually enter the alias during import,

instead of allowing Q-EKM to pull the alias off of the file name

automatically. If you change the name after you receive a file and

before you import it, you will need to request the alias from the

sender before importing.

• Even if a public certificate file name is changed, Q-EKM converts the

file name back to the default file name when it imports the file. When

Q-EKM displays the names of the certificates in a report or export

operation, you will not see the same file name you imported, and

might wonder what became of your file. If you like to keep track of

files received and imported, this will make it more difficult.

• Encryption key file names are not displayed in reports or export

scripts, but rather the WWN key (alias) and key ranges are displayed.

For tracking purposes, if you leave the WWN key in the file name, at

least you will have something with which to compare Q-EKM’s

displayed information.

Exporting the Public Certificate

To receive encryption keys from another Q-EKM server (i.e., the “source”

Q-EKM server), you must first send your Q-EKM server’s native

public

certificate

to that server. The public key contained in the certificate will be

used to wrap (encrypt) the encryption keys to protect them during

transport to you.

1 Log on to Q-EKM Commands (see Logging On to Q-EKM

Commands on page 27).

2 At the Command Prompt, enter

i (for Import/export keys).

The Key Import/Export menu displays (see Figure 7

1 2 ... 51 52 53 54 55 56 57 58 59 60 61 ... 92 93

No comments

Quantum Q-EKM User's Guide Page 56