Quantum Scalar i6000, User Manual

Page: 337 / 738

Chapter 8: Encryption Key Management
Using SKM
Quantum Scalar i6000 User’s Guide 319
that can be imported into another SKM server. The public key contained
in the certificate will be used to wrap (encrypt) the encryption keys to
protect them during transport to you.
NOTE: This function is available to users with Administrator-level
privileges and only applies to SKM servers. Both SKM servers must be
connected and operational in order to export encryption key certificates.
To export an encryption key certificate:
1 Before starting this process, read and follow the sequence of steps
outlined in Sharing Encrypted Tape Cartridges on page 316.
2 From the Tools menu, select EKM Management > Encryption
Certificate > Export. The SKM Certificate Export dialog box
appears.
3 Click Browse to locate the saved encryption key certificate file.
4 Highlight the file and click Open .
5 Click OK to export the file. The dialog box closes and you are
returned to the main console.
Importing Encryption Keys
Each SKM server provides a unique encryption key for each tape
cartridge that is encrypted. In order to read tapes encrypted by a
different (i.e., source) SKM server, you need to import the encryption
keys used to encrypt those tapes onto your SKM server.
You may also use this function to import a backup of your own SKM
server encryption keys in case of a catastrophic SKM server failure.