Virtual TapeServer 8.0 Configuration Guide

Enabling and Configuring Data Encryption | 65
3. Click ADD NEW SERVER in the KEY SERVERS section of the page. The following is
displayed:
4. Specify key server settings as described in the help. To view the help, click the Help
button at the top of the page.
After you add a key generator and a key database backup host (other than localhost), allow
five minutes for the key generator to create the first set of keys and key IDs. Key IDs may not
be available until after this initial time period.
Adding a key database backup host
By default, each VTS server is configured as its own backup host. You must configure at least
one other backup host on the key generator. (You do not need to configure a backup host on a
server that is not configured as the key generator.) The key server backs up the key database
to the localhost and all defined backup hosts every time a new key is generated. (Keys are not
available for use until the key database is successfully backed up to the localhost and at least
one other backup host.)
Note It is highly recommended that you configure at least one other backup host that is not
in the VTS environment. An off-site backup host ensures that data is safe in case of
unrecoverable failures in the VTS environment.
To configure a server as a backup host, the server must support SCP, either through the use
of the scp or scp2 program. The scp program is installed on every VTS server. If you use a non-
VTS server as a backup host, make sure SCP is supported.
When you add a backup host, VTS immediately sends a copy of the local key database to the
host. This tests the connection to the host and validates the host parameters that you
specified. If a copy of the key database exists on the target host, it is overwritten.
Requires Administration group membership
To add a backup host
1. Click Configuration→Data Encryption on the navigation pane.
2. If necessary, log in using an account that is a member of the Administration group. Click
the Log In button at the top of the page and enter a username and password.