IBM System Storage TS3100, Setup, Operator, And Service Manual

Page: 159 / 375

7.
Select Enable SSL for EKM to enable Secure Sockets Layer for the Encryption
Key Manager application.
8. Select an Encryption method , from the pull down menu, for each logical
library.
v
Without an encryption license key, select None or Application Managed
Encryption .
v With an encryption license key, select Library Managed Encryption or
System Managed Encryption .
9. Select an Encryption policy , from the pull down menu, for each logical
library.
v Encrypt All
: This is the default policy. It encrypts all cartridges using the
default data keys specified in the EKM. This setting applies to all drives in
the 3573 logical library.
v Internal Label - Selective Encryption : This policy is based on the internal
volume label information. Currently, the only application that supports this
option is Symantec NetBackup. Only encrypts cartridges with pool
identifiers between 1500 and 9999 (inclusive), using keys specific to each
pool. Labels for these keys are generated by the tape drive based on the
pool identifier; for instance, key label IL_NBU_1505 would be generated for
a cartridge in pool 1505.
v Internal Label - Encrypt All : This policy is based on the internal volume
label information. Currently, the only application that supports this option
is Symantec NetBackup. Encrypts all cartridges. Cartridges with pool
identifiers between 2000 and 65535 (inclusive) are encrypted with keys
specific to each pool. Labels for these keys are generated by the tape drive
based on the pool identifier; for instance, key label IL_NBU_2505 would be
generated for a cartridge in pool 2505.
Figure 5-41. Configure Library: Encryption Feature configuration screen
Chapter 5. Operations
5-49