Quantum PX500 Series User Manual

Size:
282.22 Kb
Download

PX500 Series DLTSage™ Tape Security

Quick Start Guide

TABLE OF CONTENTS

 

Introduction .......................................

1

Notational Conventions .................

1

Creating a Secure User ......................

1

Creating a Secure Key........................

2

Protection Mode for Cartridges.....

3

Enable/Disable Secure Key for

 

Drives...............................................

4

Modify Secure Key for Library .......

4

Assign Secure Key to Cartridge......

4

Create Secure Key Name/Secure Key

Pair...................................................

4

Delete Secure Key Name.................

5

Backup Secure Key File ...................

5

Upload Secure Key File ...................

6

Importing Secured Tape Cartridges..

6

Secure Key Maintenance ...................

6

Introduction

The PX500 Series (PX502, PX506, and PX510) tape libraries with DLT-S4tape drives are capable of utilizing DLTSage Tape security. DLTSage Tape Security is a unique solution designed to prevent unauthorized access to tape cartridges which is particularly valuable when protecting tapes that are transported offsite. DLTSage Tape Security is a firmware feature designed into theDLT-S4tape drive which uses an electronic key to prevent or allow reading and writing of data on to a tape cartridge. This key is managed through the remote management pages of the PX500 Series tape library (refer to theQuantum PX500 Series User’s Guide, PN 8181290 located on thePX500 Series Documentation CD for more information on the remote management pages). DLTSage Tape Security is available at no additional cost as an integrated feature in of theDLT-S4tape drive and PX500 Series tape library (firmware version 20 or later).

Notational Conventions

This instruction uses the following conventions:

NOTE: Notes emphasize important information related to the main topic.

CAUTION: Cautions indicate potential hazards to equipment and are included to prevent damage to equipment.

WARNING: Warnings indicate potential hazards to personal safety and are included to prevent injury.

Setting up your PX500 Series tape library with DLTSage Tape Security consists of the following steps:

Creating a Secure User

Creating a Secure Key

Creating a Secure User

CAUTION: If theSecure Key information is lost, any tape cartridges that were secured with the lost key will be unavailable for reading or writing.

The Secure User is the only user that has the ability to create, modify, and delete aSecure Key for the Library. TheSecure User also has the ability to enable and

PX500 Series DLTSage™ Tape Security Quick Start Guide

disable Secure Capable Drives for reading and writing data to and from tapes using theSecure Key.

When a user is created with administrator privileges (other than the default admin user), the Create Secure User section appears at the bottom of theUsers page (seefigure 1).

Figure 1 Create Secure User

To create a secure user:

NOTE: Only users with administrator privileges (other than the default administrator) can create a secure user.

There is only one Secure User and the username is alwaysskadmin.

1 Enter a secure password.

NOTE: Secure Passwordsmust be alphanumeric strings of at least one character. A blank secure password will be rejected. Secure Passwordand Verify Passwordmust match.

2Verify the secure password by entering the password a second time in the Verify Password box.

3Click Create to create theSecure Key password.

Once the Secure Key administrator password is added, theRemove Secure User section displays at the bottom of theUsers page (seefigure 2).

Figure 2 Remove Secure User

To update the Secure Key password:

NOTE: Only theSecure User can change the secure user password.

1 Enter a secure password.

NOTE: Secure Passwordsmust be alphanumeric strings of at least one character. A blank secure password will be rejected. Secure Passwordand Verify Passwordmust match.

2Verify the secure password by entering the password a second time in the Verify Password box.

3Click Update to update theSecure Key password. TheSecure Key password is updated.

Creating a Secure Key

The Secure Key tab displays when a secure user has been added to the library and the secure user is logged in.

NOTE: When logging on as a secure user, the IP address entered in the address line of the internet browser useshttps, not the common http. Example:https://<ip address>

To access the Secure Key page, from theSetup page, click on theSecure Key tab at the top of the page.

The Secure Key page displays (seefigure 3).

2

PX500 Series DLTSage™ Tape Security Quick Start Guide

Figure 3 Secure Key Page

The Secure Key page is divided into the following sections:

Protection Mode for Cartridges

Enable/Disable Secure Key for Drives

Modify Secure Key for Library

Assign Secure Key to Cartridge

Create Secure Key Name/Secure Key Pair

Delete Secure Key Name

Backup Secure Key File

Upload Secure Key File

Protection Mode for

Cartridges

Refer to figure 4 for information onProtection Mode for Cartridges.

Figure 4 Protection Mode for

Cartridges

The Protection Mode for Cartridgesarea defines when the

Secure Key is used for a cartridge in a tape drive with aSecure Key enabled. In all modes, theSecure Key is used to read data from cartridges that have apre-existingSecure Key. If theSecure Key on the cartridge does not match the currentSecure Key on the library, the data on the cartridge can not be read.

Three write protection modes are available:

Never Write Secure Key to a Cartridge - The Secure Keywill never be written to a cartridge placed in a secured tape drive.

Only Write Secure Key to Blank Cartridges - The

Secure Key will only be written to blank, unformatted cartridges.

Write Secure Key to All Cartridges - The Secure Keywill be written to all cartridges, including blank and formatted cartridges containing data. This mode may be used to apply a Secure Keyto cartridges with preexisting data.

3

PX500 Series DLTSage™ Tape Security Quick Start Guide

Enable/Disable Secure Key for Drives

Refer to figure 5 for information onEnable/Disable Secure Key for Drives.

Figure 5 Enable/Disable Secure

Key for Drives

The Secure Key can only be used with tape drives that areSecure Key capable. This section lists the tape drives in the library that areSecure Key capable. A checkmark in theSecure Key column indicates aSecure Key is enabled for the tape drive.

1The Secure Key can be enabled or disabled for all tape drives by clicking the corresponding radio button.

2Click the Secure Key check box for individual tape drives to enable/disableSecure Key for a tape drive.

3Click Update to activate the changes.

NOTE: The system must be offline to Enable/Disable Secure Key setting for drives.

Modify Secure Key for

Library

Refer to figure 6 for information onModify Secure Key for Library.

Figure 6 Modify Secure Key for

Library

To modify the Secure Key used by the library:

1Select the Secure Key name from the list of available names.

NOTE: SelectingNone to will cause the library to NOT use aSecure Key.

2 Click Update.

NOTE: The system must be offline to modify a

Secure Key.

Assign Secure Key to

Cartridge

Refer to figure 7 for information onAssign Secure Key to Cartridge.

Figure 7 Assign Secure Key to

Cartridge

Click Find to list all secured cartridges and their assigned

Secure Key names.

To assign a Secure Key to a cartridge:

1Enter the barcode of the cartridge. Separate multiple barcodes with either spaces or commas.

2Select a Secure Key name from the list of available names.

3Selecting Remove will remove the association between the cartridge and aSecure Key name in the cartridge database.

4Click Update to accept the changes.

Create Secure Key Name/

Secure Key Pair

Refer to figure 8 for information onCreate Secure Key Name/Secure Key Pair.

4

PX500 Series DLTSage™ Tape Security Quick Start Guide

Figure 8 Create Secure Key

Name/Secure Key Pair

To create a secure key name/secure key pair:

1 Enter the Secure Key Name.

NOTE: TheSecure Key name must be less than 12 characters, may include spaces, but cannot contain the following characters: ( ) = ;

2Enter a securekey in the protected Secure Key field.

3Enter the same Secure Keyin the Verify Secure Keyfield.

NOTE: TheSecure Key must be at least 8 characters and no more than 32 characters.

4 ClickNew to create theSecure Key name/key pair.

Delete Secure Key Name

Refer to figure 9 for information onDelete Secure Key Name.

Figure 9 Delete Secure Key Name

The Secure Key Names maintained on the library are displayed in one of three lists:

Unused Secure Keys - keys not associated with any cartridges or tape drives currently in the system.

Inactive Secure Keys - keys associated with cartridges in the library, or currently assigned to the library, but not assigned to any tape drives.

Active Secure Keys - keys currently assigned to a tape drive.

To delete a Secure Key Name/Secure Keypair from the library:

1Select the desired Secure Key Names from the available lists.

2Click Delete.

A confirmation message will be displayed, click Yes to continue.

Any tape drives that have been Secure Key enabled will remain enabled, but theSecure Key will not be used to read or write cartridges.

Backup Secure Key File

Refer to figure 10 for information onBackup Secure Key File.

Figure 10 Backup Secure Key File

The list of Secure Key Name/Secure Key Pairsmaintained on the library should be backed up to a local device whenever a change is made to the security keys.

NOTE:Note the library's Encryption Key. The Encryption Keyis required when restoring the file to any library.

1Click Save As...

2From the browser's Save window, select a path and name the file.

3Click OK.

5

PX500 Series DLTSage™ Tape Security Quick Start Guide

Upload Secure Key File

Refer to figure 11 for information onUpload Secure Key File.

Figure 11 Upload Secure Key File

A file containing a list of Secure Key Name/Secure Key Pairs can be restored to the library.

NOTE: TheEncryption Key of the library originally maintaining the list is required to restore the file.

To upload (restore) a Secure Key File:

1Enter the Encryption Key of the original library.

2Enter the path and file name of the file to be uploaded (click Browse...)

3Click Upload button.

A progress window is displayed indicating when the upload is complete or if any errors occurred during the upload or restoration of the file.

The Secure Key page is refreshed listing restored secure keys.

NOTE: An error is displayed if the serial number provided does not match the serial number used to encode the secure keys.

Importing Secured Tape Cartridges

If you need to import tape cartridges into your library which have been secured with a key from another PX500 Series library, you need to import the Secure Key before the library can read or write to the tape cartridges.

To import secured tapes:

1Write down the barcodes for every secured tape that will be imported into the library. You will need to have these barcodes available when associating the tape cartridges with the Secure Key.

2Insert the tape cartridges into the PX500 Series library (refer to the PX500 Series User’s Guide (PN 81-81290)for information on inserting tape cartridges.

3On the PX500 Series library where the tape cartridges were originally secured with a key, backup the specific Secure Key associated with those tape cartridges (seeBackup Secure Key File).

4Upload the Secure Key from the original library to the where the tape cartridges were imported (seeUpload Secure Key File).

5Assign the barcode labels from the imported tape cartridges with the Secure Key from the original library (seeAssign Secure Key to Cartridge).

The imported tape cartridges are now associated with the Secure Key.

Secure Key Maintenance

Quantum strongly recommends that you backup your secure keys whenever a new key is added (see Backup Secure Key File). The location of these keys should be available to library administrators who need access to secured tape cartridges.

CAUTION: If theSecure Key information is lost, any tape cartridges that were secured with the lost key will be unavailable for reading or writing.

United States of America

European Headquarters

Asia Pacific

Quantum Corporation

Quantum Corporaton

Quantum Corporation

141 Innovation Drive

3 Bracknell Beeches

9 Temasek Boulevard, #08-03

Irvine, CA 92612

Old Bracknell Lane West

Suntec Tower Two

U.S.A.

Bracknell

Singapore 038989

phone 949.856.7800

Berkshire RG12 7BW

Tel: +65 6334 0660

fax 949.856.7799

United Kingdom

Fax: +65 6432 2830

 

phone +44 1344 353500

Email: singapore.sales@quantum.com

 

fax +44 1344 353510

 

©2006 Quantum Corporation. Quantum, the Quantum logo, and the DLTtape logo are all registered trademarks of Quantum Corporation. SDLT and Super DLTtape are trademarks of Quantum Corporation. Other trademarks may be mentioned herein which belong to other companies.

81-81627-01A01 June 2006