BackBox H4.00 Tape Encryption Option

Configuration
9 BackBox H4.00 Tape Encryption
Non-VLE setup
BackBox software includes a key management client to interface with Key Manager
server. This allows tape encryption to the whole range of NonStop systems. All tape
device types supported by BackBox, CART3480, LTO 3 and LTO 4, can encrypt. VTCs
are registered as clients to the Key Manager Server.
In the BackBox configuration, VTC with encryption devices licensed are named VTC
Client and can be assigned to an ESKM or a KMIP Key manager ID. For each VTC
Client attached, we will need to define information related to the TLS/SSL
communication required to connect to the Key Manager server.
If a VTC Client is assigned to an ESKM Key manager ID with Client type set to “VLE
INTEROPERABILITY”:
• VLE key naming convention will be used :
NXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX_BBBBBBBB_ZZZZZZZZZZ
• Access to encrypted virtual volume can be made across NonStop node not
supporting Storage CLIM and Storage CLIM configure with VLE.
• VTC Client can be used by any available virtual tape drive. Virtual tape drives
are not dedicated to encryption