5. Using Professional Edition in Spectra T950 and T120 Libraries
57
Protecting Keys
Protect encryption keys by:
• Making copies of every key through Key Export
• Storing the keys in a secure location
• Tracking the location of the keys and the passwords required to import them.
Protect your keys by making sure that copies of the keys reside elsewhere. Two methods are
available for key export: copying the encrypted key to one or more USB devices and emailing
an encrypted version of the key as an attachment to one or more users who have been
configured as library mail users.
Methods of Securing Keys
You can add another layer of key protection by using the three encryption passwords option,
so that two of three different passwords must be entered to access export and import key
functions. Review
Configuring Encryption Features
on page 48 for information about
configuring the library to support multiple passwords.
M-of-N Shares in Exporting Keys to USB Devices and Mail Users
To export the key, you can copy the encrypted key to USB devices or send encrypted copies
through email. Note that the only way to import a key is to use a USB device.
You may choose to add another safeguard to key export and import by choosing to split the
key into multiple portions when you export it. This is referred to as M-of-N shares; this option
lets you define a total number of portions (N) to split the key into and the subset of that
number (M) required to access the encrypted key file protected using this method.