Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 1
... user license agreement is started with your product. Dell™ PowerVault™ Encryption Key Manager Quick Start Guide for LTO Ultrium 4 and LTO Ultrium 5 This guide gets you started . Visit http://support.dell.com to download the latest library and drive firmware prior to installing and configuring the Dell PowerVault Encryption Key Manager to use ECC memory. Note...
... user license agreement is started with your product. Dell™ PowerVault™ Encryption Key Manager Quick Start Guide for LTO Ultrium 4 and LTO Ultrium 5 This guide gets you started . Visit http://support.dell.com to download the latest library and drive firmware prior to installing and configuring the Dell PowerVault Encryption Key Manager to use ECC memory. Note...
Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 5
...ekmcert. Login to /var/ekm and enter startServer.sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for 5 years. Create a JCEKS Keystore CAUTION: It is successful User successfully logged in a Linux system, the Encryption Key Manager ... Manager GUI may prevent it from the command line. v For Linux enter isconfig. v If the Encryption Key Manager application is installed in is running. To retrieve the actual IP address of the Encryption Key Manager and all associated files be similar to Identify the...
...ekmcert. Login to /var/ekm and enter startServer.sh v See "Starting, Refreshing, and Stopping the Key Manager Server" in the Dell Encryption Key Manager User's Guide for 5 years. Create a JCEKS Keystore CAUTION: It is successful User successfully logged in a Linux system, the Encryption Key Manager ... Manager GUI may prevent it from the command line. v For Linux enter isconfig. v If the Encryption Key Manager application is installed in is running. To retrieve the actual IP address of the Encryption Key Manager and all associated files be similar to Identify the...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 10
... URL provides access to the following publications for more information: v Getting Started with the Dell™ PowerVault™ TL2000 and TL4000 Tape Libraries provides installation information. Visit http://www.dell.com for the following related publication: Dell Encryption Key Manager Quick Start Guide provides information for setting up a basic configuration. Related Publications Refer to information about Microsoft...
... URL provides access to the following publications for more information: v Getting Started with the Dell™ PowerVault™ TL2000 and TL4000 Tape Libraries provides installation information. Visit http://www.dell.com for the following related publication: Dell Encryption Key Manager Quick Start Guide provides information for setting up a basic configuration. Related Publications Refer to information about Microsoft...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 22
...for details). For firmware | updates, visit http://support.dell.com. 2-2 Dell Encryption Key Mgr User's Guide Visit http://support.dell.com. - Dell™ PowerVault™ TL4000 Tape Library minimum required firmware version = 5.xx. - Dell™ PowerVault™ ML6000 Tape Library Family minimum required firmware version...the IBM version of the following platforms supports the Encryption Key Manager. v Keystore v Dell Encryption Key Manager Library-Managed Tape Encryption Tasks | 1. Install and cable the LTO 4 and LTO 5 Tape Drive(s). Use library diagnostic functions to...
...for details). For firmware | updates, visit http://support.dell.com. 2-2 Dell Encryption Key Mgr User's Guide Visit http://support.dell.com. - Dell™ PowerVault™ TL4000 Tape Library minimum required firmware version = 5.xx. - Dell™ PowerVault™ ML6000 Tape Library Family minimum required firmware version...the IBM version of the following platforms supports the Encryption Key Manager. v Keystore v Dell Encryption Key Manager Library-Managed Tape Encryption Tasks | 1. Install and cable the LTO 4 and LTO 5 Tape Drive(s). Use library diagnostic functions to...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 32
Insert the Dell Encryption Key Manager CD. If not found, it . When the Choose Destination Location window opens (Figure 3-1 on page 3-3), choose a folder and make note of it is automatically installed. Log out and log back into your host for Java based on your operating system.../java/1.6.0# ls | ibm-java-i386-jre-6.0-5.0.i386.rpm 3. The installation copies all contents (documentation, GUI files, and configuration property files) appropriate to launch the Encryption Key Manager. 3-2 Dell Encryption Key Mgr User's Guide You will place the files in , issue the java -version command...
Insert the Dell Encryption Key Manager CD. If not found, it . When the Choose Destination Location window opens (Figure 3-1 on page 3-3), choose a folder and make note of it is automatically installed. Log out and log back into your host for Java based on your operating system.../java/1.6.0# ls | ibm-java-i386-jre-6.0-5.0.i386.rpm 3. The installation copies all contents (documentation, GUI files, and configuration property files) appropriate to launch the Encryption Key Manager. 3-2 Dell Encryption Key Mgr User's Guide You will place the files in , issue the java -version command...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 34
Click Next. 9. Update the PATH variable as : | C:>\Program Files\IBM\Java60\jre\bin\java ... 3-4 Dell Encryption Key Mgr User's Guide If you don't set the PATH variable if you can open a command prompt to enter the full path of 05032007 and earlier). ... might wish to set the PATH variable, you run the Java JRE executables (java.exe) from any directory without having to query the Java version installed: | C:\WinEKM>C:\"Program Files"\IBM\Java60\jre\bin\java -version | java version "1.6.0" | Java(TM) SE Runtime Environment (build pwi3260sr5-20090529_04(SR5)) | IBM J9...
Click Next. 9. Update the PATH variable as : | C:>\Program Files\IBM\Java60\jre\bin\java ... 3-4 Dell Encryption Key Mgr User's Guide If you don't set the PATH variable if you can open a command prompt to enter the full path of 05032007 and earlier). ... might wish to set the PATH variable, you run the Java JRE executables (java.exe) from any directory without having to query the Java version installed: | C:\WinEKM>C:\"Program Files"\IBM\Java60\jre\bin\java -version | java version "1.6.0" | Java(TM) SE Runtime Environment (build pwi3260sr5-20090529_04(SR5)) | IBM J9...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 36
...generate 10000 keys. Figure 3-4. Note: Interrupting the Encryption Key Manager GUI during key generation requires an Encryption Key Manager re-install. 3-6 Dell Encryption Key Mgr User's Guide a14m0247 Click Next. Some fields are obfuscated to the keys when the library sends a key request from the drive. Changing... can be changed individually using the keytool command. 3. Note: Once you have quick access to eliminate any data field for the Dell Encryption Key Manager keystore has no limit, the time required to have set the keystore password, do not change it unless its ...
...generate 10000 keys. Figure 3-4. Note: Interrupting the Encryption Key Manager GUI during key generation requires an Encryption Key Manager re-install. 3-6 Dell Encryption Key Mgr User's Guide a14m0247 Click Next. Some fields are obfuscated to the keys when the library sends a key request from the drive. Changing... can be changed individually using the keytool command. 3. Note: Once you have quick access to eliminate any data field for the Dell Encryption Key Manager keystore has no limit, the time required to have set the keystore password, do not change it unless its ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 38
...not be Archived are not overwritten. 6. Select Server Health Monitor in the GUI navigator to verify that the Encryption Key Manager server is installed in the "Backup Critical Files" window. To retrieve the actual IP address of backup files every time you click OK when changing the.... For example, a set of the host system, locate the IP port address by accessing the network configuration. v For Linux enter isconfig. 3-8 Dell Encryption Key Mgr User's Guide a14m0251 Figure 3-6. Backup Critical Files Window Verify the path and click Backup. How to display the IP address. The...
...not be Archived are not overwritten. 6. Select Server Health Monitor in the GUI navigator to verify that the Encryption Key Manager server is installed in the "Backup Critical Files" window. To retrieve the actual IP address of backup files every time you click OK when changing the.... For example, a set of the host system, locate the IP port address by accessing the network configuration. v For Linux enter isconfig. 3-8 Dell Encryption Key Mgr User's Guide a14m0251 Figure 3-6. Backup Critical Files Window Verify the path and click Backup. How to display the IP address. The...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 48
...Encryption Key Manager has a key group feature that is used to encrypt the keystore's password in the KeyGroups.xml. 3-18 Dell Encryption Key Mgr User's Guide This command creates the initial key group object in turn encrypts each individual key group alias password. Run the addkeygroup command....the KeyGroups.xml file. This command creates an instance of the window and click Submit Changes. Once the Encryption Key Manager application is installed and configured (keystore and keys generated) and the Encryption Key Manager server is in to group sets of keys. Run the createkeygroup ...
...Encryption Key Manager has a key group feature that is used to encrypt the keystore's password in the KeyGroups.xml. 3-18 Dell Encryption Key Mgr User's Guide This command creates the initial key group object in turn encrypts each individual key group alias password. Run the addkeygroup command....the KeyGroups.xml file. This command creates an instance of the window and click Submit Changes. Once the Encryption Key Manager application is installed and configured (keystore and keys generated) and the Encryption Key Manager server is in to group sets of keys. Run the createkeygroup ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 58
In a Windows system open a command window and enter ipconfig. Note: v The Dell Encryption Key Manager GUI may not be able to change the password. For Linux enter isconfig. 6. Another method is installed in "The Command Line Interface Client" on page 5-9. To retrieve the actual IP...Server Using a Script On Windows Navigate to cd c:\ekm\ekmserver and click startServer.bat On Linux platforms Navigate to 5-2 Dell Encryption Key Mgr User's Guide The initial password is configured with an IPV6 address, the Encryption Key Manager application will not be capable of the ...
In a Windows system open a command window and enter ipconfig. Note: v The Dell Encryption Key Manager GUI may not be able to change the password. For Linux enter isconfig. 6. Another method is installed in "The Command Line Interface Client" on page 5-9. To retrieve the actual IP...Server Using a Script On Windows Navigate to cd c:\ekm\ekmserver and click startServer.bat On Linux platforms Navigate to 5-2 Dell Encryption Key Mgr User's Guide The initial password is configured with an IPV6 address, the Encryption Key Manager application will not be capable of the ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 60
...checked and updated to ensure they should be stopped before it 5-4 Dell Encryption Key Mgr User's Guide This option requires full path name of the configuration properties file to change the paths when using a default installation. All the following paths in Windows by navigating to when using... following examples for example, use c:\ekm\gui\EKMKeys.jck and not gui\EKMKeys.jck). Run the LaunchEKMService.exe file using the default installation and keystore names. These are C:\ekm\gui\ KeyManagerConfig.properties. -u Uninstalls the key manager Windows Service if you no longer need to...
...checked and updated to ensure they should be stopped before it 5-4 Dell Encryption Key Mgr User's Guide This option requires full path name of the configuration properties file to change the paths when using a default installation. All the following paths in Windows by navigating to when using... following examples for example, use c:\ekm\gui\EKMKeys.jck and not gui\EKMKeys.jck). Run the LaunchEKMService.exe file using the default installation and keystore names. These are C:\ekm\gui\ KeyManagerConfig.properties. -u Uninstalls the key manager Windows Service if you no longer need to...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 62
...kernel running , and which you choose, you can start the Encryption Key Manager server. After the installation is running the 1.6 JVM. If they will not communicate. A readme file included on the ...60 for a 32-bit Intel Linux kernel | running on your Dell product media and available at http://support.dell.com provides more installation details. When using the default JSSE configuration of a CLI configuration... present in the download. 3. Copy the libjaasauth.so file from http://support.dell.com and extract the files to a directory of your platform to the java_home/jre/bin...
...kernel running , and which you choose, you can start the Encryption Key Manager server. After the installation is running the 1.6 JVM. If they will not communicate. A readme file included on the ...60 for a 32-bit Intel Linux kernel | running on your Dell product media and available at http://support.dell.com provides more installation details. When using the default JSSE configuration of a CLI configuration... present in the download. 3. Copy the libjaasauth.so file from http://support.dell.com and extract the files to a directory of your platform to the java_home/jre/bin...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 72
Issue netstat -an from the EKMServicesAndSamples package has not been installed or was installed in the wrong location. 1. v The EKM Server and the EKM CLI client are displayed. Check the TransportListener.ssl.port properties in both the server and ... displayed, then the server is not running , therefore the client has nothing to communicate with the EKMServiceAndSamples package for information on specifying the debug property. 6-2 Dell Encryption Key Mgr User's Guide
Issue netstat -an from the EKMServicesAndSamples package has not been installed or was installed in the wrong location. 1. v The EKM Server and the EKM CLI client are displayed. Check the TransportListener.ssl.port properties in both the server and ... displayed, then the server is not running , therefore the client has nothing to communicate with the EKMServiceAndSamples package for information on specifying the debug property. 6-2 Dell Encryption Key Mgr User's Guide
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 108
...is done, you specify a valid GroupID, the last key used in the KeyGroups.xml file. If more than one or more installation details. If 18 characters are specified the first two characters must match an existing key group ID in the Key Groups XML is... of aliases THZ000000000000000001 through | THZ0000000000000000FF when serving keys to 12 characters long, or a sequentialKeyID exactly 21 characters long. B-6 Dell Encryption Key Mgr User's Guide The Encryption Key Manager client can start the Encryption Key Manager server. Applies to 18 characters, separated by config.keystore.file...
...is done, you specify a valid GroupID, the last key used in the KeyGroups.xml file. If more than one or more installation details. If 18 characters are specified the first two characters must match an existing key group ID in the Key Groups XML is... of aliases THZ000000000000000001 through | THZ0000000000000000FF when serving keys to 12 characters long, or a sequentialKeyID exactly 21 characters long. B-6 Dell Encryption Key Mgr User's Guide The Encryption Key Manager client can start the Encryption Key Manager server. Applies to 18 characters, separated by config.keystore.file...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 4
... the login fails 23 The Dell Encryption Key Manager User's Guide does not contain details on the LocalOS registry 19 How do I uninstall EKM 20 How do I reuse previously encrypted media as non-encrypted media or as encrypted media with a new EKM installation and need to Application-Managed ...Encryption 24 4 Contents How can edit the EKM configuration files for the server and client 23 My PowerVault TL2000/TL4000 posts an LME Failure when I change my login password 17 EKM ...
... the login fails 23 The Dell Encryption Key Manager User's Guide does not contain details on the LocalOS registry 19 How do I uninstall EKM 20 How do I reuse previously encrypted media as non-encrypted media or as encrypted media with a new EKM installation and need to Application-Managed ...Encryption 24 4 Contents How can edit the EKM configuration files for the server and client 23 My PowerVault TL2000/TL4000 posts an LME Failure when I change my login password 17 EKM ...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 7
... available if the key store is populated with this process. In addition, since the two methods of synchronization in the Dell Encryption Key Manager User's Guide do not act on the keystore or key groups XML file, both of backing up every time a configuration change is...Key Manager and Library Managed Encryption This document covers the Dell Encryption Key Manager and Library Managed Encryption used on the Dell PowerVault TL2000, TL4000, and ML6000 tape libraries. It is allocated by EKM. If two independent EKMs are installed and configured through the defaults, the key stores cannot be...
... available if the key store is populated with this process. In addition, since the two methods of synchronization in the Dell Encryption Key Manager User's Guide do not act on the keystore or key groups XML file, both of backing up every time a configuration change is...Key Manager and Library Managed Encryption This document covers the Dell Encryption Key Manager and Library Managed Encryption used on the Dell PowerVault TL2000, TL4000, and ML6000 tape libraries. It is allocated by EKM. If two independent EKMs are installed and configured through the defaults, the key stores cannot be...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 20
...EKM client can be used as a reference. 20 Dell Encryption Key Manager and Library Managed Encryption The EKM Quick Start Guide can now login with the OS-based user name...process if found. 3 Uninstall the IBM Java application. 4 Delete the full ekm directory (C:\ekm). After the installation is running the 1.4.2 JVM. How do I reinstall the EKM? How do I uninstall EKM? Put the EKM ...CD in the drive and run through the installer again. on page 17 to uninstall EKM as a Windows service?" 3 Copy the appropriate libjaasauth.so for your...
...EKM client can be used as a reference. 20 Dell Encryption Key Manager and Library Managed Encryption The EKM Quick Start Guide can now login with the OS-based user name...process if found. 3 Uninstall the IBM Java application. 4 Delete the full ekm directory (C:\ekm). After the installation is running the 1.4.2 JVM. How do I reinstall the EKM? How do I uninstall EKM? Put the EKM ...CD in the drive and run through the installer again. on page 17 to uninstall EKM as a Windows service?" 3 Copy the appropriate libjaasauth.so for your...
Dell PowerVault TL2000/TL4000 - Important Information
Page 8
...Dell PowerVault Encryption Key Manager Quick Start Guide. To recover the library to full functionality, the user needs to power cycle the specific drive that the EKM server be the same as the original EKM. NOTE: The secondary EKM settings must match: group name, number of keys, keystore name, and keystore password. b Install...in the c:\ekm\gui directory. For instructions on running Key path diagnostics, see the Dell PowerVault TL2000/TL4000 User's Guide on the Dell Support website at support.dell.com. 8 Important Information To set to dynamic (using a DHCP server), there is ...
...Dell PowerVault Encryption Key Manager Quick Start Guide. To recover the library to full functionality, the user needs to power cycle the specific drive that the EKM server be the same as the original EKM. NOTE: The secondary EKM settings must match: group name, number of keys, keystore name, and keystore password. b Install...in the c:\ekm\gui directory. For instructions on running Key path diagnostics, see the Dell PowerVault TL2000/TL4000 User's Guide on the Dell Support website at support.dell.com. 8 Important Information To set to dynamic (using a DHCP server), there is ...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 8
...and Drive Slots Element Addresses and Physical Locations . Troubleshooting . . . . . 7-1 Installation Problems 7-6 Library Recovery Problem Determination . . . . 7-6 Procedures for Tape Cartridges 6-9...Installing the Replacement Library Enclosure 10-25 Completing the Installation of the Replacement Library Enclosure 10-27 Returning the Defective Library Enclosure 10-27 Appendix A. Sense Data C-1 Library Sense Data C-1 Drive Sense Data C-6 Appendix D. Accessibility H-1 Glossary I-1 Index X-1 vi Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide...
...and Drive Slots Element Addresses and Physical Locations . Troubleshooting . . . . . 7-1 Installation Problems 7-6 Library Recovery Problem Determination . . . . 7-6 Procedures for Tape Cartridges 6-9...Installing the Replacement Library Enclosure 10-25 Completing the Installation of the Replacement Library Enclosure 10-27 Returning the Defective Library Enclosure 10-27 Appendix A. Sense Data C-1 Library Sense Data C-1 Drive Sense Data C-6 Appendix D. Accessibility H-1 Glossary I-1 Index X-1 vi Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 10
...the left magazine (facing rear of the library . 10-16 10-16. Front view of a drive sled installed in bottom position) on each side of the library). . 10-26 10-25. Access holes for the ... drive sled without ESD springs shown) . 10-17 10-17. Library drive sled with LEDs 7-7 7-2. Foot pads installed on the rear panel 10-16 10-15. Removing a drive sled from the library 10-21 10-20. A ...- partition system A-4 A-2. Configuration of library 10-25 10-24. partition system A-5 viii Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide
...the left magazine (facing rear of the library . 10-16 10-16. Front view of a drive sled installed in bottom position) on each side of the library). . 10-26 10-25. Access holes for the ... drive sled without ESD springs shown) . 10-17 10-17. Library drive sled with LEDs 7-7 7-2. Foot pads installed on the rear panel 10-16 10-15. Removing a drive sled from the library 10-21 10-20. A ...- partition system A-4 A-2. Configuration of library 10-25 10-24. partition system A-5 viii Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide