BackBox H4.00 Tape Encryption Option

Configuration
22 BackBox H4.00 Tape Encryption
• Stop the tape drive
• Alter the tape drive with attribute: KEYGENPOLICY NOENCRYPTION
• Start the tape drive
• Status tape drive with attribute: ENCRYPTION to validate result
When done, STOP all the tape drives again and replace the failed FC HBA by
following the “Replacing an FC Target card in an existing VTC Server FC setup”
instructions in the BackPak FC Connection Installation manual.
After the HBA is replaced you will need to re-activate the key generation policy for
the tape drives that use the new HBA.
• Stop the tape drive
• Alter the tape drive with attribute: KEYGENPOLICY KEYPERTAPE
• Start the tape drive
• Status tape drive with attribute: ENCRYPTION to validate result
Adding the Key Manager in BackBox configuration
The main goal here consist to attach the list CLIM supporting VLE and able to reach
the targeted ESKM Key Manager represented by a BackBox Key Manager’s
configuration entity (Key Manager ID.)
Logon to the BackPak UI interface
• Select the Configuration menu and select the Switch to Edit mode
• Select the Key Manager tab
• Select the targeted Key Manager ID. Note: You can attach a VLE-CLIM Client
to ESKM Key Manager Type only. If the Key Manager entity doesn’t exit, you
will need to create one first. Click on the Create Key Manager button and
filled Key Manager’s information:
o Choose an alias name and type it in the Key Manager ID filed
o Server Type must be set to ESKM
o Client Type must be set to VLE INTEROPERABILITY
o Others fields can remain empty or filled for self configuration
documentation or for future used