Quantum Scalar i6000, User Manual

Page: 324 / 738

Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
306 Quantum Scalar i6000 User’s Guide
for communication between the KMIP key manager server and
the library is port 9003 .
f Repeat Step d and Step e for up to eight additional KMIP key
manager servers, in the order in which you would like failover to
occur. The port number listed in each Port field must match the
port number used on that KMIP key manager server.
g Key Class - This field is not applicable.
h EKM Path Diagnostics - To test the configuration, click Test.
The Path Diagnostic Results dialog box appears. For more
information on EKM Path Diagnostics, see Using EKM Path
Diagnostics on page 311.
i Reorder Servers - After you have configured at least two KMIP
servers, you have the option of clicking the Reorder Servers
button to change the order in which servers are used. If failover
occurs, the servers will be used in the new order specified.
4 Click Close .
5 Click OK . An Operation in Progress dialog box appears, indicating
the settings are being modified. Upon successful completion, the
system returns to the main console.
Note: If using SKM, key generation begins in the background. Key
generation can take one hour or more. Once SKM
encryption keys have been generated, make sure to back
up both SKM servers before using any encryption keys.
Refer to the
Scalar Key Manager User’s Guide.
6 Ensure all ports corresponding to the EKM servers are open on your
firewall to allow the library to connect to the servers. For SKM, ports
80, 6000, and 6001 must be open.
Step 5 — Configuring
Partitions for Library-
managed Encryption
Encryption on the Scalar i6000 library is enabled by partition only. You
cannot select individual drives for encryption; you must select an entire
partition for encryption. Only partitions that are encryption-capable are
displayed on the configuration screen.
Use the Partition Configuration dialog box to change the encryption
method used by a partition. You can modify only one partition at a time.