User Guide
Page 5
.... Encryption Library firmware level must be greater than 3.90. Library firmware level: 4.50 Contacting Dell For customers in the Choose A Country/Region drop-down menu at the minimum level required to support Ultrium 5 tape drives. Service availability varies by the library. Attempts to support HH V2 Tape Drives... on your country or region in the United States, call 800-WWW-DELL (800-999-3355). Ensure any host applications and software, that requires a minimum level of the page. Key Path Diagnostics Path Failover IPv6 Support LTO4 Drive firmware level must be blocked...
.... Encryption Library firmware level must be greater than 3.90. Library firmware level: 4.50 Contacting Dell For customers in the Choose A Country/Region drop-down menu at the minimum level required to support Ultrium 5 tape drives. Service availability varies by the library. Attempts to support HH V2 Tape Drives... on your country or region in the United States, call 800-WWW-DELL (800-999-3355). Ensure any host applications and software, that requires a minimum level of the page. Key Path Diagnostics Path Failover IPv6 Support LTO4 Drive firmware level must be blocked...
User Guide
Page 9
.... 4-16. 4-17. 4-18. 4-19. The 4U library Configure Library: Logical Libraries page 4-21 The Configure Library: Path Failover Feature Activation screen 4-21 Feature Key verification screen . . . . . 4-22 Feature Activation Key screen . . . . . 4-22 Configure Library: Encryption Activation screen 4-23 The Configure Library: Drive screen 4-24 Configure Library: Network Page 4-25 Warning Screen 4-26 The Configure Library: User Access screen 4-27 The Configure...
.... 4-16. 4-17. 4-18. 4-19. The 4U library Configure Library: Logical Libraries page 4-21 The Configure Library: Path Failover Feature Activation screen 4-21 Feature Key verification screen . . . . . 4-22 Feature Activation Key screen . . . . . 4-22 Configure Library: Encryption Activation screen 4-23 The Configure Library: Drive screen 4-24 Configure Library: Network Page 4-25 Warning Screen 4-26 The Configure Library: User Access screen 4-27 The Configure...
User Guide
Page 10
...-21. partition system A-4 A-2. partition system A-5 viii Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide ESD label 10-1 10-2. Drive sled taping diagrams . . . . . 10-18 10-18. Access holes for a 4U library 5-50 Configure Library: Network Page 5-51 Warning Screen 5-52 Configure Library: User Access page 5-53 The Configure Library: Date & Time page 5-54 Configure Library: Logs & Traces page 5-54 Configure...
...-21. partition system A-4 A-2. partition system A-5 viii Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide ESD label 10-1 10-2. Drive sled taping diagrams . . . . . 10-18 10-18. Access holes for a 4U library 5-50 Configure Library: Network Page 5-51 Warning Screen 5-52 Configure Library: User Access page 5-53 The Configure Library: Date & Time page 5-54 Configure Library: Logs & Traces page 5-54 Configure...
User Guide
Page 28
... page 5-47 for information on page 9-1 for activation instructions. 1-6 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide The encryption enabled drive contains the necessary hardware and firmware to eject media from Magazine Slots" on configuring a primary and secondary EKM for Redundancy) of the Dell Encryption Key Manager User's Guide and to expiration of the timeout set in the...
... page 5-47 for information on page 9-1 for activation instructions. 1-6 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide The encryption enabled drive contains the necessary hardware and firmware to eject media from Magazine Slots" on configuring a primary and secondary EKM for Redundancy) of the Dell Encryption Key Manager User's Guide and to expiration of the timeout set in the...
User Guide
Page 29
... refer to obtain your library as a backup. SNMP Messaging Occasionally, the library may have been swapped with the library, please visit http://www.dell.com/ tapeautomation to "Configure Library: Encryption" on your issue, please contact Dell technical support. 3. Product Description 1-7 Please refer to Chapter 5.0 of the Dell Encryption Key Manager User's Guide for EKM. Install the Dell Encryption Key Manager (EKM) application on...
... refer to obtain your library as a backup. SNMP Messaging Occasionally, the library may have been swapped with the library, please visit http://www.dell.com/ tapeautomation to "Configure Library: Encryption" on your issue, please contact Dell technical support. 3. Product Description 1-7 Please refer to Chapter 5.0 of the Dell Encryption Key Manager User's Guide for EKM. Install the Dell Encryption Key Manager (EKM) application on...
User Guide
Page 71
...Access to select Configure. "Choosing General Library Settings" on page 4-22 8. Item AutoClean Encryption Default Setting Disabled Application Managed Encryption (AME) For a full list of Logical Libraries for Library Managed Encryption" on page 4-30 16. Configuring Your Library using the Web User Interface To configure...PIN using the Operator Control Panel before the library can complete the configuration of the Web User Interface" on page 2-8 18. Press the DOWN button to Your Library" 2. "Entering Path Failover Feature Activation Key" on page 5-26 Establishing Remote Access to...
...Access to select Configure. "Choosing General Library Settings" on page 4-22 8. Item AutoClean Encryption Default Setting Disabled Application Managed Encryption (AME) For a full list of Logical Libraries for Library Managed Encryption" on page 4-30 16. Configuring Your Library using the Web User Interface To configure...PIN using the Operator Control Panel before the library can complete the configuration of the Web User Interface" on page 2-8 18. Press the DOWN button to Your Library" 2. "Entering Path Failover Feature Activation Key" on page 5-26 Establishing Remote Access to...
User Guide
Page 78
... level 5.80 or higher v Drive firmware level 77BE or higher v Tape backup software application that supports LTO4 encryption Minimum Prerequisites for additional encryption settings. 4-22 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide a77ug199 Library Managed Encryption requires a license key. Click Activate to configure your environment for failover. Feature Key verification screen Note: Follow the instructions in the left navigation pane...
... level 5.80 or higher v Drive firmware level 77BE or higher v Tape backup software application that supports LTO4 encryption Minimum Prerequisites for additional encryption settings. 4-22 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide a77ug199 Library Managed Encryption requires a license key. Click Activate to configure your environment for failover. Feature Key verification screen Note: Follow the instructions in the left navigation pane...
User Guide
Page 79
... the Encryption Key Manager (EKM) host must be set for TCP (SSL disabled) is 3801. Note: The Default Port for each logical library. It encrypts all drives in a TL2000/TL4000 logical library. A...library. Select an Encryption method for Library Managed Encryption only. v Without an encryption license key, select None or Application Managed Encryption. Select an Encryption policy for maximum availability of the Secondary TCP port. v Encrypt All: This is required to function in the EKM. v Internal Label - Selective Encryption: Check your Dell PowerVault Encryption Key...
... the Encryption Key Manager (EKM) host must be set for TCP (SSL disabled) is 3801. Note: The Default Port for each logical library. It encrypts all drives in a TL2000/TL4000 logical library. A...library. Select an Encryption method for Library Managed Encryption only. v Without an encryption license key, select None or Application Managed Encryption. Select an Encryption policy for maximum availability of the Secondary TCP port. v Encrypt All: This is required to function in the EKM. v Internal Label - Selective Encryption: Check your Dell PowerVault Encryption Key...
User Guide
Page 80
...25. 3. Choosing Drive(s) Interface Identification/Settings 1. Click one of the library and allows modification to display the Network page. 4-24 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Click Configure Library → Network in the left navigation pane, to the configuration. a77ug095...the EKM application. Refer to the screen Entering Library Network Settings This page shows the current network configuration of the following: v Refresh - The Configure Library: Drive screen 2. Install the Dell Encryption Key Manager (EKM) application on your...
...25. 3. Choosing Drive(s) Interface Identification/Settings 1. Click one of the library and allows modification to display the Network page. 4-24 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Click Configure Library → Network in the left navigation pane, to the configuration. a77ug095...the EKM application. Refer to the screen Entering Library Network Settings This page shows the current network configuration of the following: v Refresh - The Configure Library: Drive screen 2. Install the Dell Encryption Key Manager (EKM) application on your...
User Guide
Page 86
...console. 3. Enter SNMP settings. a. Check this box to have purchased an encryption activation key and any LTO 4 Fibre Channel or SAS drives in your library are to be sent, or leave as "public". Target 1-IP Address -...encryption configuration is limited to a SNMP Management console(s). The Community Name is correct. Testing Encryption Configuration for each Target IP Address. If you have SNMP traps sent to 33 alpha-numeric characters (A-Z, a-z, 0-9). See "Verifying/Updating Firmware" on page 4-18. 4-30 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library...
...console. 3. Enter SNMP settings. a. Check this box to have purchased an encryption activation key and any LTO 4 Fibre Channel or SAS drives in your library are to be sent, or leave as "public". Target 1-IP Address -...encryption configuration is limited to a SNMP Management console(s). The Community Name is correct. Testing Encryption Configuration for each Target IP Address. If you have SNMP traps sent to 33 alpha-numeric characters (A-Z, a-z, 0-9). See "Verifying/Updating Firmware" on page 4-18. 4-30 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library...
User Guide
Page 87
... Web User Interface: v Encryption (if purchased) (see "Configure Library: Encryption" on page 5-47) v User Access Information (see "Configure Library: User Access" on page 5-52) v Logs and Traces (see "Configure Library: Logs & Traces" on page 5-54) v Event Notification Information (see "Configure Library: Email Notification" on page 5-55) v Key Path Diagnostic (if Encryption was purchased) (see "Service Library: Key Path Diagnostics" on...
... Web User Interface: v Encryption (if purchased) (see "Configure Library: Encryption" on page 5-47) v User Access Information (see "Configure Library: User Access" on page 5-52) v Logs and Traces (see "Configure Library: Logs & Traces" on page 5-54) v Event Notification Information (see "Configure Library: Email Notification" on page 5-55) v Key Path Diagnostic (if Encryption was purchased) (see "Service Library: Key Path Diagnostics" on...
User Guide
Page 98
Service Library → Key Path Diagnostics "Service Library: Key Path Diagnostics" on page 5-47 Encryption, testing configuration (if feature is available) Not available with this interface. Configure Library → Encryption "Configure Library: Encryption" on page 5-61 Encryption, determine method, current method Not available with this interface. Configure Library → Encryption "Configure Library: Encryption" on page 5-38 5-4 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide modify, and delete Configure Library →...
Service Library → Key Path Diagnostics "Service Library: Key Path Diagnostics" on page 5-47 Encryption, testing configuration (if feature is available) Not available with this interface. Configure Library → Encryption "Configure Library: Encryption" on page 5-61 Encryption, determine method, current method Not available with this interface. Configure Library → Encryption "Configure Library: Encryption" on page 5-38 5-4 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide modify, and delete Configure Library →...
User Guide
Page 133
...value which is the path used for use on the X drive. X X Key path This is X Address calculated from the WWID for transferring an encryption key. Operations 5-39 Choices are Auto (where the drive will automatically negotiate the speed ...of the drive to the host. X X BOP policy This indicates whether the Beginning of the server), 1Gb/s, 2Gb/s, or 4Gb/s. X X 4U Library SCSI Fibre SAS X X X X X...
...value which is the path used for use on the X drive. X X Key path This is X Address calculated from the WWID for transferring an encryption key. Operations 5-39 Choices are Auto (where the drive will automatically negotiate the speed ...of the drive to the host. X X BOP policy This indicates whether the Beginning of the server), 1Gb/s, 2Gb/s, or 4Gb/s. X X 4U Library SCSI Fibre SAS X X X X X...
User Guide
Page 141
... 5. Click Activate to purchase this feature. Log in to "Login" on page 2-5. 3. Chapter 5. Library Managed Encryption requires a license key. v Ultrium 4 Tape Cartridge v Library firmware level 5.80 or higher v Drive firmware level 77BE or higher v Dell Encryption Key Manager application Setting or Changing a Drive's Method of Encryption 1. Expand Configure Library in an internet browser address field and press ENTER. 2. On the...
... 5. Click Activate to purchase this feature. Log in to "Login" on page 2-5. 3. Chapter 5. Library Managed Encryption requires a license key. v Ultrium 4 Tape Cartridge v Library firmware level 5.80 or higher v Drive firmware level 77BE or higher v Dell Encryption Key Manager application Setting or Changing a Drive's Method of Encryption 1. Expand Configure Library in an internet browser address field and press ENTER. 2. On the...
User Guide
Page 142
... the IP address of the secondary EKM server. 5-48 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide a77ug190 Figure 5-40. Select an Encryption method, from the pull down menu, for each logical library. v Primary TCP port: After entering the Primary IP address, the library will automatically set for Library Managed Encryption only. These settings are required for each logical...
... the IP address of the secondary EKM server. 5-48 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide a77ug190 Figure 5-40. Select an Encryption method, from the pull down menu, for each logical library. v Primary TCP port: After entering the Primary IP address, the library will automatically set for Library Managed Encryption only. These settings are required for each logical...
User Guide
Page 143
They can be provided to the user by the EKM application. Review the Dell PowerVault Encryption Key Manager User's Guide for instructions to apply the changes. 12. The EKM IP address and EKM port will be changed depending on this option for ... Note: The Default Port for TCP (SSL disabled) is only supported for SAS full height drives X only. Drive Identity page elements Menu Item Description 2U Library SCSI Fibre SAS SCSI ID For each Fibre Channel drive, click LN-Port, X L-Port, or N-Port. Refer to power ON the X X X selected drive. This page...
They can be provided to the user by the EKM application. Review the Dell PowerVault Encryption Key Manager User's Guide for instructions to apply the changes. 12. The EKM IP address and EKM port will be changed depending on this option for ... Note: The Default Port for TCP (SSL disabled) is only supported for SAS full height drives X only. Drive Identity page elements Menu Item Description 2U Library SCSI Fibre SAS SCSI ID For each Fibre Channel drive, click LN-Port, X L-Port, or N-Port. Refer to power ON the X X X selected drive. This page...
User Guide
Page 155
... slot locations. Figure 5-57. Service Library: Key Path Diagnostics Please refer to http://support.dell.com to perform diagnostics on page 5-47. Library firmware level must be modified to test the load and unload capability of cycles. Only encryption capable drives in the EKM to date...4-18. v EKM Path Test: For each EKM IP address that the library mechanics are up for each EKM IP address, the library performs a ping test and records the results. Refer to "Configure Library: Encryption" on the encryption key path. When completing the "Slot To Slot" test, you will need...
... slot locations. Figure 5-57. Service Library: Key Path Diagnostics Please refer to http://support.dell.com to perform diagnostics on page 5-47. Library firmware level must be modified to test the load and unload capability of cycles. Only encryption capable drives in the EKM to date...4-18. v EKM Path Test: For each EKM IP address that the library mechanics are up for each EKM IP address, the library performs a ping test and records the results. Refer to "Configure Library: Encryption" on the encryption key path. When completing the "Slot To Slot" test, you will need...
User Guide
Page 172
...) if this feature is placed in the EKM (refer to encryption. An error code history is being used. See "Service Library: View Drive Logs" on page 5-59 for how to get the error log over the Operator Control Panel and "Service Library: View Logs" on page C-6. FRONT PANEL LEDs 7-2 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide
...) if this feature is placed in the EKM (refer to encryption. An error code history is being used. See "Service Library: View Drive Logs" on page 5-59 for how to get the error log over the Operator Control Panel and "Service Library: View Logs" on page C-6. FRONT PANEL LEDs 7-2 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide
User Guide
Page 248
... 26 12 - Maximum Number of Supplemental Keys Exceeded C-10 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Key Translate EKM Sense Key 3 (Medium Error) 30 02 - Data Read after Write Decryption Failure EE E0 - Encryption - Encryption - Unsupported Type EE 2F - Encryption - Encryption - Key Reserved EE 23 - Key Method Change EE 25 - Encryption - eAK EE 29 - Invalid RDKi EE 2B - Encryption - Encryption - Key Required EE 20 - dAK EE...
... 26 12 - Maximum Number of Supplemental Keys Exceeded C-10 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide Key Translate EKM Sense Key 3 (Medium Error) 30 02 - Data Read after Write Decryption Failure EE E0 - Encryption - Encryption - Unsupported Type EE 2F - Encryption - Encryption - Key Reserved EE 23 - Key Method Change EE 25 - Encryption - eAK EE 29 - Invalid RDKi EE 2B - Encryption - Encryption - Key Required EE 20 - dAK EE...
User Guide
Page 249
... 26 10 - Data Encryption Key Instance Counter Has Changed 74 00 - Encryption - Changed (Write) EE 40 - Encryption - Unencrypted Data Encountered While Decrypting 74 03 - Cryptographic Integrity Validation Failed 74 05 - LTO Tape Drive Sense Data (continued) Bit Address or Name Byte 7 6 5 4 3 2 1 0 12-13 Sense Key 6 (Unit Attention) EE 12 - Encryption - Encryption - Encryption - Encryption - Initiator Response Changed 2A 11 - Encryption - SKSV = 0: First...
... 26 10 - Data Encryption Key Instance Counter Has Changed 74 00 - Encryption - Changed (Write) EE 40 - Encryption - Unencrypted Data Encountered While Decrypting 74 03 - Cryptographic Integrity Validation Failed 74 05 - LTO Tape Drive Sense Data (continued) Bit Address or Name Byte 7 6 5 4 3 2 1 0 12-13 Sense Key 6 (Unit Attention) EE 12 - Encryption - Encryption - Encryption - Encryption - Initiator Response Changed 2A 11 - Encryption - SKSV = 0: First...