HP StoreEver MSL Tape Libraries Encryption Key Server Configuration Guide

KMIP-based key servers
The 1/8 G2 Tape Autoloader and the MSL2024, MSL4048, MSL6480, MSL8048, and MSL8096
Tape Libraries support integration with non-HP key servers through the KMIP protocol. This requires
a KMIP Encryption license for the library. For configuration information, see “KMIP-based key
server integration” (page 12).
Considerations for using an encryption key server
The libraries only support the configuration of one encryption key method at a time. For example,
if the library is configured to obtain encryption keys from an encryption key server, it will not also
be able to obtain encryption keys from the HP MSL Encryption Kit nor from a backup application.
Media compatibility for drives supporting encryption
Table 1 Media compatibility
LTO-6 driveLTO-5 driveLTO-4 drive
IncompatibleIncompatibleIncompatibleLTO-1 media
IncompatibleIncompatibleRead onlyLTO-2 media
IncompatibleRead onlyRead/Write (no encryption)LTO-3 media
Read onlyRead/WriteRead/WriteLTO-4 media — unencrypted
Read only with encryption
key
Read/Write with
encryption key
Read/Write with
encryption key
LTO-4 media — encrypted
Read/WriteRead/WriteIncompatibleLTO-5 media — unencrypted
Read/Write with encryption
key
Read/Write with
encryption key
IncompatibleLTO-5 media — encrypted
Read/WriteRead/WriteIncompatibleLTO-5 media — unencrypted
Read/Write with encryption
key
Read/Write with
encryption key
IncompatibleLTO-5 media — encrypted
Read/WriteIncompatibleIncompatibleLTO-6 media — unencrypted
Read/Write with encryption
key
IncompatibleIncompatibleLTO-6 media — encrypted
Licensing
The KMIP and ESKM features require that the applicable license for the library be installed before
the feature can be enabled and configured.
Table 2 KMIP and ESKM encryption licenses
License namePart numberLibraries
HP StoreEver MSL6480 KMIP 1.2 Key Manager LicenseD4T76AMSL6480
HP StoreEver MSL6480 KMIP 1.2 Key Manager E-LicenseD4T76AAE
HP StoreEver MSL6480 ESKM Encryption LicenseTC469A
HP StoreEver MSL6480 ESKM Encryption E-LicenseTC469AAE
HP StoreEver MSL2024/4048/8096 KMIP LicenseTC468A
1/8 G2 Tape
Autoloader
•
HP StoreEver MSL2024/4048/8096 KMIP E-LicenseTC468AAE
• MSL2024
Considerations for using an encryption key server 5