Page 1
PX720 DLTSage™ Tape Security
Quick Start Guide
TABLE OF CONTENTS
Introduction .......................................1
Notational Conventions .................1
Creating a Secure User ......................1
Creating a Secure Key........................ 2
Protection Mode for Cartridges.....3
Enable/Disable Secure Key for
Drives...............................................4
Modify Secure Key for Library .......4
Assign Secure Key to Cartridge......4
Create Secure Key Name/Secure Key
Pair...................................................5
Delete Secure Key Name................. 5
Backup Secure Key File ...................5
Upload Secure Key File ...................6
Importing Secured Tape Cartridges..6
Secure Key Maintenance ...................7
Introduction 0
The PX720 tape library with DLT-S4 tape drives is capable of utilizing DLTSage Tape
security. DLTSage Tape Security is a unique solution designed to prevent
unauthorized access to tape cartridges which is particularly valuable when
protecting tapes that are transported offsite. DLTSage Tape Security is a firmware
feature designed into the DLT-S4 tape drive which uses an electronic key to prevent
or allow reading and writing of data on to a tape cartridge. This key is managed
through the remote management pages of the PX720 tape library (refer to the
Quantum PX720 User’s Guide
CD
for more information on the remote management pages). DLTSage Tape
Security is available at no additional cost as an integrated feature of the DLT-S4
tape drive and PX720 tape library (firmware revision 4.5 or later).
Notational Conventions 0
This instruction uses the following conventions:
, PN 6444601 located on the
PX720 Documentation
OTE: Notes emphasize important information related to the main topic.
N
AUTION: Cautions indicate potential hazards to equipment and are included
C
to prevent damage to equipment.
ARNING: Warnings indicate potential hazards to personal safety and are
W
included to prevent injury.
Setting up your PX720 tape library with DLTSage Tape Security consists of the
following steps:
• Creating a Secure User
• Creating a Secure Key
Creating a Secure User 0
C
AUTION: If the secure key information is lost, any tape cartridges that were
secured with the lost key will be unavailable for reading or writing.
The Secure User is the only user that has the ability to create, modify, and delete a
Secure Key for the Library. The Secure User also has the ability to enable and
Page 2
PX720 DLTSage™ Tape Security Quick Start Guide
disable Secure Capable Drives for reading and writing
data to and from tapes using the Secure Key.
When a user is created with administrator privileges (other
than the default admin user), the Create Secure User
section appears at the bottom of the Users page (see
figure 1
).
Figure 1 Create Secure User
To create a secure user:
N
OTE: Only users with administrator privileges (other
than the default administrator) can create a
secure user.
There is only one Secure User and the username is always
securekeyadmin.
1 Enter a secure password.
OTE: Secure Passwords must be alphanumeric
N
strings of at least one character. A blank
secure password will be rejected. Secure
Password and Verify Password must
match.
1 Enter a secure password.
N
OTE: Secure Passwords must be alphanumeric
strings of at least one character. A blank
secure password will be rejected. Secure
Password and Verify Password must
match.
2 Verify the secure password by entering the password a
second time in the Verify Password box.
3 Click Update to update the secure key password.
The secure key password is updated.
Creating a Secure Key 0
The Secure Key tab displays when a secure user has been
added to the library and the secure user is logged in.
OTE: When logging on as a secure user, the IP address
N
entered in the address line of the internet browser
uses https, not the common http. Example:
https://<ip address>
To access the Secure Key page, from the Setup page, click
on the Secure Key tab at the top of the page.
The Secure Key page displays (see figure 3
).
2 Verify the secure password by entering the password a
second time in the Verify Password box.
3 Click Create to create the secure key password.
Once the secure key administrator password is added,
the Delete Secure User section displays at the bottom
of the Users page (see figure 2
).
Figure 2 Delete Secure User
To update the secure key password:
OTE: Only the Secure User can change the secure user
N
password.
2
Page 3
PX720 DLTSage™ Tape Security Quick Start Guide
Figure 3 Secure Key Page
The Secure Key page is divided into the following sections:
• Protection Mode for Cartridges
• Enable/Disable Secure Key for Drives
• Modify Secure Key for Library
• Assign Secure Key to Cartridge
• Create Secure Key Name/Secure Key Pair
• Delete Secure Key Name
• Backup Secure Key File
• Upload Secure Key File
Protection Mode for
Cartridges 0
Refer to figure 4 for information on Protection Mode for
Cartridges.
Figure 4 Protection Mode for
Cartridges
The Protection Mode for Cartridges area defines when the
secure key is used for a cartridge in a tape drive with a
secure key enabled. In all modes, the secure key is used to
read data from cartridges that have a pre-existing secure
key. If the secure key on the cartridge does not match the
current secure key on the library, the data on the cartridge
can not be read.
Three write protection modes are available:
• Never Write Secure Key to a Cartridge - The secure
key will never be written to a cartridge placed in a
secured tape drive.
• Only Write Secure Key to Blank Cartridges - The
secure key will only be written to blank, unformatted
cartridges.
3
Page 4
PX720 DLTSage™ Tape Security Quick Start Guide
• Write Secure Key to All Cartridges - The secure key
will be written to all cartridges, including blank and
formatted cartridges containing data. This mode may
be used to apply a secure key to cartridges with preexisting data.
Enable/Disable Secure Key for Drives 0
Refer to figure 5 for information on Enable/Disable Secure
Key for Drives.
Figure 5 Enable/Disable Secure
Key for Drives
The secure key can only be used with tape drives that are
secure key capable. This section lists the tape drives in the
library that are secure key capable. A checkmark in the
Secure Key column indicates a secure key is enabled for the
tape drive.
1 The secure key can be enabled or disabled for all tape
drives by clicking the corresponding radio button.
2 Click the Secure Key check box for individual tape
drives to enable/disable secure key for a tape drive.
3 Click Update to activate the changes.
Figure 6 Modify Secure Key for
Library
To modify the secure key used by the library:
1 Select the secure key name from the list of available
names.
N
OTE: Selecting None to will cause the library to
NOT use a secure key.
2 Click Update.
NOTE: The system must be offline to modify a
secure key.
Assign Secure Key to Cartridge
0
Refer to figure 7 for information on Assign Secure Key to
Cartridge.
Figure 7 Assign Secure Key to
Cartridge
OTE: The system must be offline to Enable/Disable
N
Secure Key setting for drives.
Modify Secure Key for Library
0
Refer to figure 6 for information on Modify Secure Key for
Library.
Click Find to list all secured cartridges and their assigned
secure key names.
To assign a secure key to a cartridge:
1 Enter the barcode of the cartridge. Separate multiple
barcodes with either spaces or commas.
2 Select a secure key name from the list of available
names.
4
Page 5
PX720 DLTSage™ Tape Security Quick Start Guide
1 Selecting Remove will remove the association between
the cartridge and a secure key name in the cartridge
database.
2 Click Update to accept the changes.
Create Secure Key Name/ Secure Key Pair 0
Refer to figure 8 for information on Create Secure Key
Name/Secure Key Pair.
Figure 8 Create Secure Key
Name/Secure Key Pair
To create a secure key name/secure key pair:
1 Enter the Secure Key Name.
N
OTE: The secure key name must be less than 12
characters, may include spaces, but cannot
contain the following characters: ( ) = ;
2 Enter a securekey in the protected Secure Key field.
3 Enter the same secure key in the Verify Secure Key
field.
OTE: The Secure Key must be at least 8 characters
N
and no more than 32 characters.
Figure 9 Delete Secure Key Name
The Secure Key Names maintained on the library are
displayed in one of three lists:
• Unused Secure Keys - keys not associated with any
cartridges or tape drives currently in the system.
• Inactive Secure Keys - keys associated with cartridges
in the library, or currently assigned to the library, but
not assigned to any tape drives.
• Active Secure Keys - keys currently assigned to a tape
drive.
To d e le t e a Secure Key Name/Secure Key pair from the
library:
1 Select the desired Secure Key Names from the
available lists.
2 Click Delete.
A confirmation message will be displayed, click Yes to
continue.
Any tape drives that have been secure key enabled will
remain enabled, but the secure key will not be used to
read or write cartridges.
4 Click New to create the secure key name/key pair.
Delete Secure Key Name 0
Refer to figure 9 for information on Delete Secure Key
Name.
Backup Secure Key File 0
Refer to figure 10 for information on Backup Secure Key
File.
Figure 10 Backup Secure Key File
5
Page 6
PX720 DLTSage™ Tape Security Quick Start Guide
The list of Secure Key Name/Secure Key Pairs maintained
on the library should be backed up to a local device
whenever a change is made to the security keys.
OTE: Note the library's Encryption Key. The
N
Encryption Key is required when restoring the
file to any library.
1 Enter and verify the Encryption Key.
The Encryption Key is required when restoring the
backup secure key file to any library.
2 Click Save As...
The browser displays a download link.
3 Right-click on the download link and select Save As...
to select a path and name the file.
4
Click OK.
Upload Secure Key File 0
Refer to figure 11 for information on Upload Secure Key
File.
Figure 11 Upload Secure Key File
The Secure Key page is refreshed listing restored
secure keys.
OTE: An error is displayed if the encryption key
N
provided does not match the encryption key used
to encode the secure keys.
Importing Secured Tape Cartridges 0
If you need to import tape cartridges into your library which
have been secured with a key from another PX720 library,
you need to import the secure key before the library can
read or write to the tape cartridges.
To import secured tapes:
1 Insert the tape cartridges into the PX720 library (refer
to the PX720 User’s Guide (PN 6444601) for
information on inserting tape cartridges.
2 On the PX720 library where the tape cartridges were
originally secured with a key, backup the specific secure
key associated with those tape cartridges (see Backup
Secure Key File).
3 Upload the secure key from the original library to the
library where the tape cartridges were imported (see
Upload Secure Key File
The imported tape cartridges are now associated with
the secure key.
).
A file containing a list of Secure Key Name/Secure Key
Pairs can be restored to the library.
OTE: The user defined encryption key of the library
N
originally maintaining the list is required to
restore the file.
To upload (restore) a Secure Key File:
1 Enter the encryption key of the original library.
2 Enter the path and file name of the file to be uploaded
(click Browse...)
3 Click Upload button.
A progress window is displayed indicating when the
upload is complete or if any errors occurred during the
upload or restoration of the file.
6
Page 7
PX720 DLTSage™ Tape Security Quick Start Guide
Secure Key Maintenance 0
Quantum strongly recommends that you backup your
secure keys whenever a new key is added (see Backup
Secure Key File). The location of these keys should be
available to library administrators who need access to
secured tape cartridges.
AUTION: If the secure key information is lost, any tape
C
cartridges that were secured with the lost
key will be unavailable for reading or writing.
United States of America
Quantum Corporation
141 Innovation Drive
Irvine, CA 92612
U.S.A.
phone 949.856.7800
fax 949.856.7799
©2006 Quantum Corporation. Quantum, the Quantum logo, and the DLTtape logo are all registered trademarks of Quantum Corporation. SDLT and Super DLTtape are trademarks of
Quantum Corporation. Other trademarks may be mentioned herein which belong to other companies.
European Headquarters
Quantum Corporaton
3 Bracknell Beeches
Old Bracknell Lane West
Bracknell
Berkshire RG12 7BW
United Kingdom
phone +44 1344 353500
fax +44 1344 353510
Asia Pacific
Quantum Corporation
9 Temasek Boulevard, #08-03
Suntec Tower Two
Singapore 038989
Tel: +65 6334 0660
Fax: +65 6432 2830
Email: singapore.sales@quantum.com
81-81588-02 A01 October 2006
Loading...