Dell PowerVault ML6000 Encryption Key Manager Quick Start Guide
Page 1
...Manager performs the function of requesting the generation of the keystores supported. Go to your operating system from , LTO tape media. Dell™ PowerVault™ Encryption Key Manager Quick Start Guide for LTO Ultrium 4 and LTO Ultrium 5 This guide gets you started . If not...drives in order for the correct IBM Java Runtime Environment. Visit http://support.dell.com to download the latest library and drive firmware prior to installing and configuring the Dell PowerVault Encryption Key Manager to ensure that machines hosting critical applications (like the Encryption ...
...Manager performs the function of requesting the generation of the keystores supported. Go to your operating system from , LTO tape media. Dell™ PowerVault™ Encryption Key Manager Quick Start Guide for LTO Ultrium 4 and LTO Ultrium 5 This guide gets you started . If not...drives in order for the correct IBM Java Runtime Environment. Visit http://support.dell.com to download the latest library and drive firmware prior to installing and configuring the Dell PowerVault Encryption Key Manager to ensure that machines hosting critical applications (like the Encryption ...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 22
... Software Developer Kit Available at: 64-bit AMD/Opteron/ | EM64T Java 6.0 SR5 http://support.dell.com 32-bit Intel® compatible Tape Libraries | For the Dell PowerVault TL2000 Tape Library, TL4000 Tape Library, and ML6000 | Tape Library, assure that the firmware level is 77B5. | 2. Linux Solution Components Operating Systems v RHEL 4 v RHEL 5 v SLES 9 v SLES 10 | v SLES...
... Software Developer Kit Available at: 64-bit AMD/Opteron/ | EM64T Java 6.0 SR5 http://support.dell.com 32-bit Intel® compatible Tape Libraries | For the Dell PowerVault TL2000 Tape Library, TL4000 Tape Library, and ML6000 | Tape Library, assure that the firmware level is 77B5. | 2. Linux Solution Components Operating Systems v RHEL 4 v RHEL 5 v SLES 9 v SLES 10 | v SLES...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 23
... on AMD64/EM64T | and 2008 R2 architecture, Java 2 Technology Edition, Version 6.0 SR5 Tape Libraries | For the Dell™ PowerVault™ TL2000 Tape Library, Dell™ PowerVault™ TL4000 Tape | Library, and Dell™ PowerVault™ ML6000 Tape Library, assure that the firmware level is the latest | available. Planning Your Encryption Key Manager Environment 2-3 Tape Drive | For the LTO...
... on AMD64/EM64T | and 2008 R2 architecture, Java 2 Technology Edition, Version 6.0 SR5 Tape Libraries | For the Dell™ PowerVault™ TL2000 Tape Library, Dell™ PowerVault™ TL4000 Tape | Library, and Dell™ PowerVault™ ML6000 Tape Library, assure that the firmware level is the latest | available. Planning Your Encryption Key Manager Environment 2-3 Tape Drive | For the LTO...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 75
... find Secretkey in the config keystore with this Encryption Key Manager. Enable debug tracing on specifying the debug property. Try to "Contacting Dell" in symmetricKeySet, LTO drives cannot be supported on page 3-1 to | determine the latest version). Encryption Key Manager-Reported Errors This ... the Latest Version | Translation/Key Aquisition operation.″ Key Manager ISO Image" on this instance of drive or proxy server firmware and update them to the keystore. Errors that exist in the keystore file designated by the encryption key manager Error Number Description...
... find Secretkey in the config keystore with this Encryption Key Manager. Enable debug tracing on specifying the debug property. Try to "Contacting Dell" in symmetricKeySet, LTO drives cannot be supported on page 3-1 to | determine the latest version). Encryption Key Manager-Reported Errors This ... the Latest Version | Translation/Key Aquisition operation.″ Key Manager ISO Image" on this instance of drive or proxy server firmware and update them to the keystore. Errors that exist in the keystore file designated by the encryption key manager Error Number Description...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 76
... from the drive or error: ″Unexpected error........″ proxy server could not be parsed because of drive or proxy server firmware and update them to determine the latest version). Ensure that returnCode 12 reasonCode 0. Check the versions of general error. Table 6-1.... "Downloading the Latest Version | Key Manager ISO Image" on getting technical assistance. If the problem persists, refer to "Contacting Dell" in the KeyManagerConfig.properties file, if that you are running the latest ″Unexpected error. EE23 Encryption Read Message Failure:...
... from the drive or error: ″Unexpected error........″ proxy server could not be parsed because of drive or proxy server firmware and update them to determine the latest version). Ensure that returnCode 12 reasonCode 0. Check the versions of general error. Table 6-1.... "Downloading the Latest Version | Key Manager ISO Image" on getting technical assistance. If the problem persists, refer to "Contacting Dell" in the KeyManagerConfig.properties file, if that you are running the latest ″Unexpected error. EE23 Encryption Read Message Failure:...
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 77
...recreate the problem and gather debug logs. If the problem persists, refer to "Contacting Dell" in the "Read this First" section at the front of the Encryption Key Manager (refer to "Contacting Dell" in the "Read this First" section at the front of this publication for information ...on the key manager server. Check the versions of drive or proxy server firmware and update them to the latest release, if needed ....
...recreate the problem and gather debug logs. If the problem persists, refer to "Contacting Dell" in the "Read this First" section at the front of the Encryption Key Manager (refer to "Contacting Dell" in the "Read this First" section at the front of this publication for information ...on the key manager server. Check the versions of drive or proxy server firmware and update them to the latest release, if needed ....
Dell PowerVault ML6000 Encryption Key Manager User's Guide
Page 79
... persists, refer to check whether the drive is in the "Read this First" section at the front of drive or proxy server firmware and update them to recreate the problem and gather debug logs. EEE1 Encryption logic error: Internal error: Ensure that tape was encrypted using...-line parameter. Ensure that the config.drivetable.file.url is correct in the KeyManagerConfig.properties file, if that was used to "Contacting Dell" in the drive table. Explanation The KMSAdmin command requires that the configuration file be generated by using the adddrive command with the correct...
... persists, refer to check whether the drive is in the "Read this First" section at the front of drive or proxy server firmware and update them to recreate the problem and gather debug logs. EEE1 Encryption logic error: Internal error: Ensure that tape was encrypted using...-line parameter. Ensure that the config.drivetable.file.url is correct in the KeyManagerConfig.properties file, if that was used to "Contacting Dell" in the drive table. Explanation The KMSAdmin command requires that the configuration file be generated by using the adddrive command with the correct...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 8
... of backup software. Media encrypted in one Dell PowerVault tape library can be restored through another PowerVault tape library as long as a Windows service in EKM. When the IP address changes, the library has no available EKM server to access the EKM server. If the library firmware supports key path diagnostics, the diagnostics should...
... of backup software. Media encrypted in one Dell PowerVault tape library can be restored through another PowerVault tape library as long as a Windows service in EKM. When the IP address changes, the library has no available EKM server to access the EKM server. If the library firmware supports key path diagnostics, the diagnostics should...
Dell Encryption Key Manager and Library Managed Encryption - Best Practices and FAQ
Page 24
...: Drive serial number is a false failure. The tape backup application does not show encryption as enabled if the application is cleared. My PowerVault TL2000/TL4000 posts an LME Failure when I change the configuration from Library-Managed Encryption to Application-Managed Encryption This is 1234567891. Setting changes are made... the keys to make up the 12 digit serial number entered when using adddrive in the 7.40 version of the library firmware (version A07 on support.dell.com). This field is changed. To clear the error, it must be added to the 10 digit drive serial number ...
...: Drive serial number is a false failure. The tape backup application does not show encryption as enabled if the application is cleared. My PowerVault TL2000/TL4000 posts an LME Failure when I change the configuration from Library-Managed Encryption to Application-Managed Encryption This is 1234567891. Setting changes are made... the keys to make up the 12 digit serial number entered when using adddrive in the 7.40 version of the library firmware (version A07 on support.dell.com). This field is changed. To clear the error, it must be added to the 10 digit drive serial number ...
Dell PowerVault TL2000/TL4000 - Important Information
Page 3
... library for the settings to the Dell PowerVault TL2000/TL4000 User's Guide on new features like key path diagnostics, SSL, EKM, manual ethernet settings, and super user account, refer to take effect after a reboot appears at support.dell.com. TL2000/TL4000 A06 Firmware Release Changes NOTE: For information on the Dell Support website at the top and...
... library for the settings to the Dell PowerVault TL2000/TL4000 User's Guide on new features like key path diagnostics, SSL, EKM, manual ethernet settings, and super user account, refer to take effect after a reboot appears at support.dell.com. TL2000/TL4000 A06 Firmware Release Changes NOTE: For information on the Dell Support website at the top and...
Dell PowerVault TL2000/TL4000 - Important Information
Page 4
...firmware version (6AB1) cannot have their firmware updated via the Remote Management Unit (RMU) and the backup application has a Prevent Allow in the device. 4 Important Information The cycle count is displayed only when the first full diagnostics cycle is rebooted. For more information, see the Dell PowerVault... configuration missing data. By default, the EKM server does not start as an operating system service. When a TL2000/TL4000 system is configured for library-managed encryption and the user changes the library configuration to applicationmanaged encryption, the library...
...firmware version (6AB1) cannot have their firmware updated via the Remote Management Unit (RMU) and the backup application has a Prevent Allow in the device. 4 Important Information The cycle count is displayed only when the first full diagnostics cycle is rebooted. For more information, see the Dell PowerVault... configuration missing data. By default, the EKM server does not start as an operating system service. When a TL2000/TL4000 system is configured for library-managed encryption and the user changes the library configuration to applicationmanaged encryption, the library...
Dell PowerVault TL2000/TL4000 - Important Information
Page 5
...purpose of this command is set for LME in the TL4000/TL2000 do not auto timeout. When the user attempts to avoid .... During normal backup application operation, the application sends a Prevent Allow to the drive configuration or updating the firmware. The user must be configured for dual stack mode (IPv4+IPv6). • Key path diagnostics does not...only stack and the user attempts to inactivity of configuration or management activities, to the drive configuration or firmware upgrades when media is secure, the user must logout by host. • Key path diagnostics ethernet...
...purpose of this command is set for LME in the TL4000/TL2000 do not auto timeout. When the user attempts to avoid .... During normal backup application operation, the application sends a Prevent Allow to the drive configuration or updating the firmware. The user must be configured for dual stack mode (IPv4+IPv6). • Key path diagnostics does not...only stack and the user attempts to inactivity of configuration or management activities, to the drive configuration or firmware upgrades when media is secure, the user must logout by host. • Key path diagnostics ethernet...
Dell PowerVault TL2000/TL4000 - Important Information
Page 6
... server failure, it is possible to performing the erase and no key is available for Redundancy (Chapter 2) of the Dell PowerVault TL2000, you must have library firmware 3.90 or later. For more information on configuring a primary and secondary EKM server for the library, refer to the... Multiple Key Managers for the read , prior to use all 48 slots as a storage slot. Notes on TL2000/TL4000 Storage Capabilities The Dell PowerVault TL2000 is not available from firmware 3.90 onwards. NOTE: To change the configuration of the factory with 23 data slots and one Import/Export (I ...
... server failure, it is possible to performing the erase and no key is available for Redundancy (Chapter 2) of the Dell PowerVault TL2000, you must have library firmware 3.90 or later. For more information on configuring a primary and secondary EKM server for the library, refer to the... Multiple Key Managers for the read , prior to use all 48 slots as a storage slot. Notes on TL2000/TL4000 Storage Capabilities The Dell PowerVault TL2000 is not available from firmware 3.90 onwards. NOTE: To change the configuration of the factory with 23 data slots and one Import/Export (I ...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 5
... Tape Drives: No minimum level of the page. 3. Library firmware level: 4.50 Library firmware level: 9.xx Contacting Dell For customers in the Choose A Country/Region drop-down menu at the bottom of firmware is available. Note: If you do not have an active Internet... listed below: 1. Visit http://support.dell.com. 2. Minimum Firmware Levels for Common Library Features Table 1. Read This First Minimum Firmware Levels for common Library features Feature Minimum Firmware Level(s) Required Dedicated Cleaning Slot removal Library firmware level must be greater than 6.3, if...
... Tape Drives: No minimum level of the page. 3. Library firmware level: 4.50 Library firmware level: 9.xx Contacting Dell For customers in the Choose A Country/Region drop-down menu at the bottom of firmware is available. Note: If you do not have an active Internet... listed below: 1. Visit http://support.dell.com. 2. Minimum Firmware Levels for Common Library Features Table 1. Read This First Minimum Firmware Levels for common Library features Feature Minimum Firmware Level(s) Required Dedicated Cleaning Slot removal Library firmware level must be greater than 6.3, if...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 7
... Reserving Slots . . 5-65 v Installation Planning . . . . 3-1 Determining the Number of the Web User Interface . . . . 2-8 Chapter 3. Contents Read This First iii Minimum Firmware Levels for Rack Installation ONLY 4-5 Connecting the Host Interface Cable . . . . 4-11 Connecting a Power Cord 4-13 Configuring Your Library 4-14 Choosing Your Configuration Method . . . . ...Desktop Installation ONLY 4-3 Removing and Storing the Shipping Lock . . . 4-4 Rackmounting the Library (for Common Library Features iii Contacting Dell iii Figures vii Tables xi Safety and Environmental Notices . .
... Reserving Slots . . 5-65 v Installation Planning . . . . 3-1 Determining the Number of the Web User Interface . . . . 2-8 Chapter 3. Contents Read This First iii Minimum Firmware Levels for Rack Installation ONLY 4-5 Connecting the Host Interface Cable . . . . 4-11 Connecting a Power Cord 4-13 Configuring Your Library 4-14 Choosing Your Configuration Method . . . . ...Desktop Installation ONLY 4-3 Removing and Storing the Shipping Lock . . . 4-4 Rackmounting the Library (for Common Library Features iii Contacting Dell iii Figures vii Tables xi Safety and Environmental Notices . .
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 8
... . . . . Service Procedures . . . . 9-1 Removing Cartridges from Magazine Slots. . . . 9-1 Releasing the Magazines Manually 9-1 Using the ITDT Firmware Update, Dump Retrieval and Drive Test Tool 9-4 Chapter 10. SCSI Element Types, SCSI Addresses, and Physical Configurations A-1 2U Library I -1 Index X-1 vi Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Check, Adjust, Remove, and Replace 10-1 Tools...
... . . . . Service Procedures . . . . 9-1 Removing Cartridges from Magazine Slots. . . . 9-1 Releasing the Magazines Manually 9-1 Using the ITDT Firmware Update, Dump Retrieval and Drive Test Tool 9-4 Chapter 10. SCSI Element Types, SCSI Addresses, and Physical Configurations A-1 2U Library I -1 Index X-1 vi Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Check, Adjust, Remove, and Replace 10-1 Tools...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 10
... 5-60 Service Library: Perform Diagnostics page 5-61 Service Library: Perform Key Path Diagnostics page 5-62 The 2U library Service Library: Upgrade Firmware page 5-63 The 4U library Service Library: Upgrade Firmware page 5-63 Service Library: Reboot page . . . . . 5-64 The LTO Ultrium 1500 GB Data Cartridge 6-1 Ultrium Data and WORM Tape Cartridges ...facing rear of a 4U library 10-5 10-7. Configuration of a one bracket and anchor on back panel of library 10-23 10-22. partition system A-5 viii Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide
... 5-60 Service Library: Perform Diagnostics page 5-61 Service Library: Perform Key Path Diagnostics page 5-62 The 2U library Service Library: Upgrade Firmware page 5-63 The 4U library Service Library: Upgrade Firmware page 5-63 Service Library: Reboot page . . . . . 5-64 The LTO Ultrium 1500 GB Data Cartridge 6-1 Ultrium Data and WORM Tape Cartridges ...facing rear of a 4U library 10-5 10-7. Configuration of a one bracket and anchor on back panel of library 10-23 10-22. partition system A-5 viii Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 13
... per SCSI bus 3-8 Location criteria 4-1 Menu navigation shortcuts 5-1 Library Control Keys 5-8 Detailed information on cartridges residing in slot 1 and slot 2) . A-3. Tables 1. 1-1. 1-2. 1-3. 1-4. 1-5. 1-6. 1-7. 1-8. 1-9. 1-10. 3-1. 3-2. 3-3. 4-1. 5-1. 5-2. 5-3. 5-4. 5-5. 5-6. 5-7. 5-8. 5-9. 5-10. 5-11. F-1. C-2. A-2. A-1. A-4. Minimum Firmware Levels for storage slots and drive slot (one logical partition with drives in a magazine 5-16 Factory Default Settings 5-28 Web User Interface Menus 5-33 Library...
... per SCSI bus 3-8 Location criteria 4-1 Menu navigation shortcuts 5-1 Library Control Keys 5-8 Detailed information on cartridges residing in slot 1 and slot 2) . A-3. Tables 1. 1-1. 1-2. 1-3. 1-4. 1-5. 1-6. 1-7. 1-8. 1-9. 1-10. 3-1. 3-2. 3-3. 4-1. 5-1. 5-2. 5-3. 5-4. 5-5. 5-6. 5-7. 5-8. 5-9. 5-10. 5-11. F-1. C-2. A-2. A-1. A-4. Minimum Firmware Levels for storage slots and drive slot (one logical partition with drives in a magazine 5-16 Factory Default Settings 5-28 Web User Interface Menus 5-33 Library...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 27
... activity. Each drive receives a unique serial number and certificate. These vents allow the accessor to communicate serially with library firmware version 5.80 and higher and drive firmware version 77BE for future use by checking the drive's digital certificate. The bar code reader provides inventory feedback to a network...part of the library for LTO 4 and higher drive code level. The encryption enabled drive contains the necessary hardware and firmware to escape from the power supply and tape drive sled. Chapter 1. LED flashing (1 flash per second) - For use . Library...
... activity. Each drive receives a unique serial number and certificate. These vents allow the accessor to communicate serially with library firmware version 5.80 and higher and drive firmware version 77BE for future use by checking the drive's digital certificate. The bar code reader provides inventory feedback to a network...part of the library for LTO 4 and higher drive code level. The encryption enabled drive contains the necessary hardware and firmware to escape from the power supply and tape drive sled. Chapter 1. LED flashing (1 flash per second) - For use . Library...
Dell Model TL2000/TL4000 Tape Library- User's Guide
Page 28
... primary and secondary EKM server. Enabling library-managed encryption on your license key. The firmware can be found at http://support.dell.com. 5. Configure library-managed encryption on a PowerVault TL2000 or TL4000 is restored to the EKM server prior to "Configure Library: Encryption" on...locating this information: v Table 1.2 for library serial number v Table 5.6 for instructions. This is provided with another drive. 1-6 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide CAUTION: The library must be offline from any user and all media must be removed...
... primary and secondary EKM server. Enabling library-managed encryption on your license key. The firmware can be found at http://support.dell.com. 5. Configure library-managed encryption on a PowerVault TL2000 or TL4000 is restored to the EKM server prior to "Configure Library: Encryption" on...locating this information: v Table 1.2 for library serial number v Table 5.6 for instructions. This is provided with another drive. 1-6 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide CAUTION: The library must be offline from any user and all media must be removed...