IBM System Storage TS2900, Setup, Operator, And Service Manual

Page: 102 / 257

4-24
TS2900 Tape Autoloader Setup, Operator, and Service Guide
encryption by the tape drive itself (IBM Ultrium 4 Half-High Tape Drive Model
3572-S4H only) if you have purchased the Encryption Activation Key feature,
relieving the host of the burden of managing encryption applications and systems.
Note: Application Managed Encryption (AME) does not require a key. Library
Managed Encryption (LME) and System Managed Encryption (SME) require a
license key which is available by purchasing Feature Code 5901.
Figure 4-43. Encryption settings enabled screen
Configure encryption using the following settings:
•
Feature Activation Key — Optional feature of the library to activate the encryption
functions in your library (Model S4H only).
• Security — Sets secure communications using secure sockets layer (SSL).
– Enable SSL for EKM — Select to enable secure communications between the
tape library and the EKM server.
• Primary and Secondary EKM Server Settings ( library-managed encryption )
– IP address — The IP address of the primary encryption key manager. IPv4, IPv6,
and dual stack IPv4/IPv6 are supported.
– TCP port number — The TCP port number of the encryption key manager.
– SSL port number — The port number of the encryption key manager.
• Encryption method
– Application Managed — For encryption in operating environments that run an
application capable of generating and managing encryption policies and keys. If
you select application-managed encryption, no further configuration steps are
necessary.
– System Managed — For encryption in operating environments where no
application is capable of key management runs, and encryption is set up
implicitly through each instance of the IBM device driver.
– Library Managed — For transparent encryption by the TS2900 Tape Autoloader
tape drive.
a29z0171