Quantum Encryption Key
Manager Release Notes
Contents
Product
Version
Software
Date
Purpose of This Release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
New Features and Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Firmware Notes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Compatibility Matrix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Qualified Backup Applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Known Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Quantum Encryption Key Manager (Q-EKM)
Q-EKM 2.3
253Q.GC00100
September 2014
Contacting Quantum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Purpose of This Release
This version of firmware adds support for Windows Server 2012 operating
systems.
© 2014 Quantum Corporation. All rights reserved. 6-01884-05 Rev A, September 2014
Quantum, the Quantum logo, DLT, DLTtape, the DLTtape logo, SuperLoader, Scalar, DXi, StorageCare, StorNext, GoProtect, and
Vision are registered trademarks of Quantum Corporation and its affiliates in the United States and/or other countries. All
other trademarks are the property of their respective owners. Quantum specifications are subject to change.
Release Notes: Q-EKM 2.3
6-01884-05 Rev A
September 2014
New Features and Enhancements
Q-EKM 2.3 includes the following new features and enhancements.
• Installation support for the Windows Server 2012 operating systems.
Firmware Notes
These notes list information you should be aware of as you set up, configure,
and use Q-EKM.
• Quantum Encryption Key Manager (Q-EKM) and Scalar Key Manager (SKM)
are not supported on the same library.
• The Scalar i2000 library does not support Q-EKM with LTO-5 or LTO-6 tape
drives. You must upgrade to Scalar
with LTO-5 or LTO-6 tape drives.
i6000 in order to use Q-EKM 2.0 or later
• Do not change the encryption method on a tape once write operations have
begun on that tape. The library applies encryption (or non-encryption) to a
tape in its entirety. Whichever encryption method is selected when write
operations begin on a given tape will continue throughout the entire tape,
regardless of whether you change the encryption method before that tape
is filled.
• For Q-EKM best practices and guidelines, see the Quantum Encryption Key
Manager User’s Guide and the Q-EKM section of your library user’s guide.
Compatibility Matrix
Q-EKM supports the following tape libraries, tape drives, and firmware:
Libraries and Tape Drives Scalar i500:
• IBM LTO-4 (Fibre Channel and SAS)
• IBM LTO-5 (Fibre Channel)
• IBM LTO-6 (Fibre Channel)
Scalar i2000:
• IBM LTO-4 (Fibre Channel)
Scalar i6000:
• IBM LTO-4 (Fibre Channel)
• IBM LTO-5 (Fibre Channel)
• IBM LTO-6 (Fibre Channel)
2 New Features and Enhancements
Release Notes: Q-EKM 2.3
6-01884-05 Rev A
September 2014
Library Firmware
Tape Drive Firmware
Qualified Backup Applications
It is recommended that you upgrade library
firmware to the latest released version.
The minimum library firmware required to run
Q-EKM 2.3 or later with LTO-5 drive is:
• Scalar i500: Version 585G
• Scalar i2000: must upgrade to Scalar i6000
• Scalar i6000: Version 605A
The minimum library firmware required to run
Q-EKM 2.3 or later with LTO-6 drive is:
• Scalar i500: Version 630G
• Scalar i2000: must upgrade to Scalar i6000
• Scalar i6000: Version 650Q
Install the latest version of tape drive firmware
that is qualified for the library firmware installed
on your library. Refer to the library release notes
for the correct version of tape drive firmware.
Q-EKM 2.3 has been tested with the following backup applications. Other
applications that are not listed may also work.
Backup Application Supported Versions
CA ARCserve® 11.5 and later
CommVault® Simpana® 7 and later
EMC® NetWorker® 7.5 and later
HP Data Protector 6.1 and later
IBM® Tivoli® Storage Manager 5.5 and later
Symantec™ Backup Exec™ 12.5 and later
Symantec NetBackup™ 6.5 and later
Qualified Backup Applications 3
Release Notes: Q-EKM 2.3
6-01884-05 Rev A
September 2014
Known Issues
This release of Q-EKM software has the following known issues.
Change
Request
Number
16990
(formerly
70638)
17013
(formerly
70536)
17057
(formerly
70657)
17058
(formerly
70523)
30193 On Windows installations, if you try to
Service
Request
Number
Description Workaround
Java applications on the Q-EKM server
can conflict with Q-EKM.
If Q-EKM server connectivity is lost and
a host issues I/O commands to a tape
drive with a command timeout value
less than the Q-EKM key retrieval
timeout value, it is possible to strand
the tape in the drive.
Cannot change keystore password
using the current script and
commands.
LUN reset or ABTS do not reset tape
drive key retrieval timeout.
export your native keys immediately
after importing a public certificate from
another server, you may receive an
error message stating the certificate
you selected to export the keys is not
valid, even though you just imported it
and it appears in the displayed list.
Use a dedicated server for Q-EKM so
there is no Java conflict. Remove all
Java from the server before installing
Q-EKM.
If this issue occurs, set your host
timeout to at least 3 minutes for all I/O
commands, and then power cycle the
drive.
There is currently no way to change the
keystore password.
Set your host command timeouts for
drive I/O to at least 3 minutes.
Close the command window, log back
in to Q-EKM Commands, and retry the
export.
30781 Due to language conversion issues,
when importing and exporting keys
between English and Japaneselanguage servers, the export keys
operation may fail due to entering an
“invalid serial number” even though
the library serial number you entered is
valid.
4 Known Issues
Need to exit the current command
window (
the upper right), then open a new
command window and perform the
export operation again.
Ctrl+C or click on the “X” in
Documentation
The following documents provide more information about Q-EKM.
Document Number Document Title
6-01847-02 Quantum Encryption Key Manager User’s Guide
6-01210-xx Scalar i500 User’s Guide
6-00421-xx Scalar i2000 User’s Guide
6-66879-xx Scalar i6000 User’s Guide
Contacting Quantum
Release Notes: Q-EKM 2.3
6-01884-05 Rev A
September 2014
More information about this product is available on the Service and Support
Web site at
contains a collection of information, including answers to frequently asked
questions (FAQs). You can also access software, firmware, and drivers through
this site.
For further assistance, or if training is desired, contact Quantum:
Telephone Support — Find contact
information for your location
Service and Support Web site www.quantum.com/support
To open an Online Service Request www.quantum.com/osr
www.quantum.com/support. The Service and Support Web site
www.quantum.com/ServiceandSupport/
Contacts/ProductSelect/Index.aspx
Documentation 5
Release Notes: Q-EKM 2.3
6-01884-05 Rev A
September 2014
6 Contacting Quantum
Loading...