Quantum PX720 User Manual

DLTSage™ Tape Security
Best Practices and Key Migration Instructions
TABLE OF CONTENTS
Introduction .......................................1
Notational Conventions .................1
Best Practices .....................................1
Key Migration Scenarios....................2
Disaster Recovery Scenario ............2

Introduction 0

DLTSage Tape Security is a unique solution designed to prevent unauthorized access to tape cartridges which is particularly valuable when protecting tapes that are transported offsite. DLTSage Tape Security is a firmware feature designed into the DLT-S4 tape drive which uses an electronic key to prevent or allow reading and writing of data on to a tape cartridge. This key is managed through the remote management pages of both the PX720 and PX500 series tape libraries. DLTSage Tape Security is available at no additional cost as an integrated feature in of the DLT-S4 tape drive and both the PX720 and PX500 Series tape libraries.
This document provides information on “Best Practices” when implementing DLTSage Tape Security and also instructions for migrating your security keys from one library to another.
For more information on implementing DLTSage Tape Security with your specific library, refer to the following Quick Start Guides provided on the documentation CD included in the library accessory kit:
PX500 Series DLTSage Tape Security Quick Start Guide
PX720 DLTSage Tape Security Quick Start Guide
PN 81-81627
PN 81-81588

Notational Conventions 0

This instruction uses the following conventions:
OTE: Notes emphasize important information related to the main topic.
N
AUTION: Cautions indicate potential hazards to equipment and are included
C
to prevent damage to equipment.
ARNING: Warnings indicate potential hazards to personal safety and are
W
included to prevent injury.

Best Practices 0

When implementing DLTSage Tape Security in your tape library, there are several “Best Practices” or guidelines to consider:
The encryption key file should be saved off of the library at least once a month or whenever a large amount of tapes is removed/added to the library. It is a good idea to use the date in the file name of the backup file.
DLTSage™ Tape Security Best Practices and Key Migration Instructions
In the library remote management pages, the secure key and tape cartridge barcode associations are displayed when you click Find in the Assign Secure Key to Cartridge section without a specific barcode entered in the barcode edit box. You should save this file off of the library so the secure key and barcode associations are available in case of disaster recovery or when moving the tapes from one library to another. This also makes it easy to copy and paste the barcode numbers into the PX720 and PX500 Series remote management pages when associating barcodes with secure keys.
Secure key and encryption password information should NOT be stored in unsecured areas.

Key Migration Scenarios 0

The following examples describe two key migration scenarios:

Disaster Recovery Scenario

Tape Cartridge Migration Scenario
Disaster Recovery Scenario 0
In the disaster recovery scenario, the original library is inoperable, but secure keys have been saved off of the system and are available on the network.
1 Remove the tape cartridges and place them in another
tape security enabled library.
2 Follow the steps listed below (beginning with step 2) to
import cartridges and associate barcodes with secure keys.

Tape Cartridge Migration Scenario

0
In this tape cartridge migration example, tape cartridges have been secured in one tape library (PX720 or PX500 series) and you want to move them into another PX720 or PX500 series library and access them:
1 On the original library containing the cartridges:
a Access the library remote management screens.
b In the Backup Secure Key file section, backup the
secure key file. This file contains all of the encrypted secure keys and bar code associations in the original library. Once you click Save as... you must right-click on the download link to save the file to a local or network directory. This file must be located on a resource that is available to the new library.
c Export the tape cartridges from the library.
2 On the new library:
a Import the tape cartridges into the new library.
b Upload the secure key file from the original library:
If you are uploading a backup file from a PX720 to a PX500 series library, you must enter the serial number of the original PX720 in the Encryption
Key field, browse to the backup file, and click Upload.
If you are uploading a file from a PX500 series library to a PX720, you must enter the user defined key name in the Serial number field, browse to the backup file, and click Upload.
c When the file is uploaded, the secure keys from the
original library display in the secure key name list.
The tape cartridges are now available for reading and writing.
United States of America Quantum Corporation 141 Innovation Drive Irvine, CA 92612 U.S.A. phone 949.856.7800 fax 949.856.7799
©2006 Quantum Corporation. Quantum, the Quantum logo, and the DLTtape logo are all registered trademarks of Quantum Corporation. SDLT and Super DLTtape are trademarks of Quantum Corporation. Other trademarks may be mentioned herein which belong to other companies.
European Headquarters Quantum Corporaton 3 Bracknell Beeches Old Bracknell Lane West Bracknell Berkshire RG12 7BW United Kingdom phone +44 1344 353500 fax +44 1344 353510
Asia Pacific Quantum Corporaton Level 3 200 Creek Street Brisbane, Qld 4000 Australia phone +61 7 3839 0950 fax +61 7 3839 0955
81-81650-01 A01 July 2006
Loading...