Chapter 3 Configuring Your Library
Configuring Quantum Encryption Key Manager (Q-EKM)
Scalar i500 User’s Guide
84
Configuring Quantum Encryption Key Manager (Q-EKM)
Quantum Encryption Key Manager (Q-EKM) is a centralized key
manager application that manages the encryption keys used as part of the
LTO-4 drive-based data encryption process. Library-managed encryption
is an optional, licensed feature that must be enabled from the Scalar i500
library in order to begin encrypting data using the LTO-4 tape drive
encryption capabilities.
For more information about Q-EKM and its license, see
Quantum
Encryption Key Manager (Q-EKM)
on page 31.
Step 1: Upgrade
Firmware
3
Upgrade your library and tape drive firmware to the latest released
versions.
Step 2: Install the License
Key on the Library
3
If your license key is not already installed on the library, install it now
(see
Applying a License Key
on page 83).
Step 3: Install Q-EKM on
a Server or Servers
3
You must supply a server or servers on which to install Q-EKM.
Quantum Field Services will schedule an appointment to install the
software and configure your servers.
Note:
Since the Scalar i500 library needs to communicate with the Q-
EKM server in real time when reading from or writing to an
encryption-enabled drive, it is strongly recommended that you
use both a primary and secondary Q-EKM server. This way, if
the primary server is unavailable at the time the library needs
encryption information, the secondary server can handle the
request. The Scalar i500 library allows you to configure up to
two Q-EKM servers for redundancy/failover purposes.