NEC T30A, Руководство пользователя

Страница: 152 / 252

-125-
Chapter6 Encryption Key Management Function
6.1 General Information
This chapter introduces the main features of the encryption key management function.
6.1.1 Features of Encryption Key Management Option
･
Enables you to easily build a secure backup system without relying on OS or backup software.
･
The device administrator can ensure security by himself/herself without going through the backup
operator because each encryption key is set to a tape device from the Web browser terminal.
･
Each encryption key supports both automatic device generation using the master key and
individual settings for each tape media.
･
The encryption key import/export function enables you to take data out by using USB memory or
by sending email. The export key supports password protection and encryption of the encryption
key itself.
6.1.2 Encryption Mechanism
When you input the encryption license tape library, the encryption key management function of the
Library is enabled and you can record encrypted data to tape media.
An LTO7 drive incorporates hardware for encrypting data using the AES (256 bits). With this
hardware, you can record encrypted data to the tape media within the LTO7 drive by setting the
encryption key.
The Library can record encrypted data without making the backup software aware of it by
generating and managing the encryption key the LTO7 drive uses for each tape medium stored in the
Library and setting the corresponding encryption key to the LTO7 drive when loading the tape media
onto the LTO7 drive.
6.1.3 Types of Keys
There are two types of keys used to encrypt data: a master key and an encryption key, which differs
for each tape medium. You must set one master key for each Library, and encryption keys can be set
for each tape medium as necessary.