Quantum Scalar i6000, User Manual

Page: 338 / 738

Chapter 8: Encryption Key Management
Using SKM
320 Quantum Scalar i6000 User’s Guide
Note: This function is available to users with Administrator-level
privileges and only applies to SKM servers. Both SKM servers
must be connected and operational in order to export
encryption key certificates.
1 Before starting this process, read and follow the sequence of steps
outlined in Sharing Encrypted Tape Cartridges on page 316.
2 Receive the file of encryption keys from the source SKM server and
save it in a known location on your computer.
3 From the Tools menu, select EKM Management > Encryption Key
> Import .
4 Click Browse to locate the saved file of encryption keys.
5 Highlight the file and click Open .
6 Click OK to import the keys onto your SKM server.
After a successful import, a message is displayed recommending
you backup your encryption keys to protect against a catastrophic
EKM server failure. Consult your EKM server documentation for
details on how to perform an EKM backup.
The dialog box closes and you are returned to the main console.
Exporting Encryption Keys
Each SKM server provides a unique encryption key for each tape
cartridge that is encrypted. In order for another (i.e., destination) SKM
server to read tapes encrypted by your SKM server, you need to export
the encryption keys used to encrypt those tapes and send them to the
destination server.
You may also use this function to create a backup of your SKM server
encryption keys in case of a catastrophic SKM server failure.
Note: This function is available to users with Administrator-level
privileges and only applies to SKM servers. Both SKM servers
must be connected and operational in order to export
encryption key certificates.
1 Before starting this process, read and follow the sequence of steps
outlined in Sharing Encrypted Tape Cartridges on page 316.