Nonstop Volume Level Encryption Guide
Temporarily turning encryption off
If you need to create an unencrypted tape you can turn encryption off, create the tape, and re-enable
encryption. When encryption is re-enabled, the same key will be used.
Clearing tape drive encryption
To clear tape drive encryption, follow these procedures:
1. Use the SCF STOP TAPE command to stop the drive.
2. Issue the ALTER TAPE, KEYGENPOLICY NOENCRYPTION command. The next tapes written
will write data in non-encrypted form.
3. Issue a START TAPE command to start the drive.
4. Issue the STATUS TAPE, ENCRYPTION, DETAIL command and verify that the tape drive is not
encrypted:
Tape drive hardware replacement
If an encrypted tape drive is replaced with a new drive, the new tape drive will not be encrypted.
The security officer is expected to ALTER the tape drive to enable encryption. HP recommends that
users verify device encryption status after any hardware replacement or software configuration
change of an encrypted device.
52 Encrypting data on storage devices










