HP StoreEver MSL6480 Tape Library User and Service Guide Addendum (QU625-96016, October 2013)

3 HP Enterprise Secure Key Manager (ESKM) integration
The library now supports the ESKM, which allows encryption keys and encrypted tapes to be
shared with other tape libraries that support the ESKM.
ESKM license
The ESKM feature requires a license.
Table 2 MSL6480 ESKM licenses
DescriptionPart number
HP StoreEver MSL6480 ESKM Encryption LicenseTC469A
HP StoreEver MSL6480 ESKM Encryption E-LicenseTC469AAE
From the Configuration > System > License Key Handling screen you can add and view license
keys.
1. Navigate to the Configuration > System > License Key Handling screen.
2. In the Add License Key pane, enter the License Key and then click Add License.
You can also use Command View for Tape Libraries 3.7 or newer versions to manage licenses.
Configuring use of the ESKM
With the ESKM Wizard you can configure use of the HP Enterprise Secure Key Management server
with the library. Access the wizard from the Encryption menu on the RMI, which is only available
to the security user and requires that the ESKM license has been added from the Configuration >
System > License Key Handling screen.
NOTE: The library only allows one encryption key manager type to be used at a time. For
example, if ESKM is enabled and in use, the MSL Encryption Kit cannot also be used for encryption
key generation and retrieval.
For additional information on configuring ESKM for use with the library, see the HP Enterprise
Secure Key Manager Configuration Guide for HP Tape Libraries.
Before running the wizard, verify that:
• The library configuration is complete, including defining all library partitions.
• A 1024-bit or 2048-bit server certificate for each HP ESKM device in the cluster has been
created.
• The ESKM server certificate has been signed by the Certificate Authority (CA) you intend to
use and has been installed on the ESKM.
• SSL is enabled on the ESKM KMS server.
• The HP ESKM Management Console is open and ready for use. The ESKM Management
Console and library RMI are used together to configure the library for ESKM.
22 HP Enterprise Secure Key Manager (ESKM) integration