BackBox H4.00 Tape Encryption Option

35 BackBox H4.00 Tape Encryption
User interface details
Configuration
VT Controller
The VTC configuration matters only in a setup for VLE. It is used to verify:
- The Device type in the internal configuration of the VTC (FCConfig.txt) is set
for LTO4
• NonStop SCF configured the drive for VLE
(ALTER TAPE $... , KEYGENPOLICY KEYPERTAPE)
Key Manager
The Key Manager is an external server generating and storing encryption keys, the
encryption itself being processed in the BackBox VTC for all configuration types.
Key Manager must be configured, even for VLE encryption.
For VLE, the Key Manager configuration is used to control the encryption
configuration during the operations, and to clearly identify the key server storing
the encryption keys.
For non-VLE encryption, the Key Manager configuration is also used to identify
and secure a network path to key server.
It is possible to configure more than one Key manager instance, each describing the
server holding the encryption keys for different groups of tape volumes.
Refer to the Encryption section of the Configuration chapter for explanations on the
possible encryption setups and for the detailed configuration procedures.