NEC LL030F, Руководство пользователя, Страница: 152 / 254

-125-
Chapter6 Encryption Key Management Function
6.1 General Information
This chapter introduces the main features of the encryption key management function.
6.1.1 Features of Encryption Key Management Option
･
Enables you to easily build a secure backup system without relying on OS or backup software.
･
The device administrator can ensure security by himself/herself without going through the backup
operator because each encryption key is set to a tape device from the Web browser terminal.
･
Each encryption key supports both automatic device generation using the master key and
individual settings for each tape media.
･
The encryption key import/export function enables you to take data out by using USB memory or
by sending email. The export key supports password protection and encryption of the encryption
key itself.
6.1.2 Encryption Mechanism
When you input the encryption license tape library, the encryption key management function of the
Library is enabled and you can record encrypted data to tape media.
An LTO4, LTO5, LTO6 and LTO7 drive incorporates hardware for encrypting data using the AES
(256 bits). With this hardware, you can record encrypted data to the tape media within the LTO4,
LTO5, LTO6 and LTO7 drive by setting the encryption key.
The Library can record encrypted data without making the backup software aware of it by
generating and managing the encryption key the LTO4, LTO5, LTO6 and LTO7 drive uses for each
tape medium stored in the Library and setting the corresponding encryption key to the LTO4, LTO5,
LTO6 and LTO7 drive when loading the tape media onto the LTO4, LTO5, LTO6 and LTO7 drive.
The encryption function does not work if an LTO2 / LTO3 tape media is
used.When encrypting data, be sure to use an LTO4, LTO5, LTO6 or LTO7 drive
and LTO4, LTO5, LTO6 or LTO7 tape media.
6.1.3 Types of Keys
There are two types of keys used to encrypt data: a master key and an encryption key, which differs
for each tape medium. You must set one master key for each Library, and encryption keys can be set
for each tape medium as necessary.