Users Guide

v Encrypt All: This is the default policy. It encrypts all cartridges using the default data keys
specified in the key manager. This setting applies to all drives in a TL2000/TL4000 logical library.
v Internal Label - Selective Encryption: Check your tape backup software application documentation
to see if this feature is supported.
v Internal Label - Encrypt All: Check your tape backup software application documentation to see if
this feature is supported.
7. A primary and secondary key management server can be set for each logical library. Each partition
has its own Encryption and key management settings. Maintaining primary and secondary key
management servers is desired for maximum availability of encrypted backup and recovery. These
settings are required for Library Managed Encryption only. Enter the EKM Server Setting
information.
Note: The IP address of the key management host must be consistent with the library Network
settings. This means if the library is set to IPV4 only network support, the key management host
must be an IPV4 address. If the Dell PowerVault library is required to function in a mixed network
environment the library must be set to IPv4 + IPv6.
v Primary IP address (IPv4 or IPv6): Enter the IP address of the primary key management server.
v Primary TCP port: After entering the Primary IP address, the library will automatically set the
value of the Primary TCP port.
v Secondary IP address (IPv4 or IPv6): Enter the IP address of the secondary key management
server.
v Secondary TCP port: After entering the Secondary IP address, the library will automatically set the
value of the Secondary TCP port.
Note: The Default Port for TCP (SSL disabled) is 3801. The Default Port for SSL is 443. These values
are the default values set by the library. They can be changed depending on the user configuration
but the user has to make sure they match the EKM properties file.
Note: If SSL is enabled the encryption host configuration will request a SSL port instead of a TCP
port. Review your IBM SKLM Knowledge Center online at http://www-01.ibm.com/support/
knowledgecenter/SSWPVP/welcome?lang=en for instructions to locate the appropriate port
settings.
8. Click Submit to apply the changes.
9. Install the IBM SKLM application on your host. Refer to the IBM SKLM Knowledge Center online for
information on locating the appropriate IP address and port.
Choosing Drive(s) Interface Identification/Settings
1. Click Configure Library > Drives in the left navigation pane.
Installation and Configuration 61