Brocade Fabric OS Encryption Administrator’s Guide Supporting HP Secure Key Manager (SKM) and HP Enterprise Secure Key Manager (ESKM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 144)

124 Fabric OS Encryption Administrator’s Guide (SKM/ESKM)
53-1002923-01
Viewing and editing encryption group properties
2
Tape pools overview
Tape cartridges and volumes can be organized into a tape pool (a collection of tape media). The
same data encryption keys are used for all cartridges and volumes in the pool. Tape pools are used
by backup application programs to group all tape volumes used in a single backup or in a backup
plan. The tape pool name or number used must be the same name or number used by the host
backup application. If the same tape pool name or number is configured for an encryption group,
tapes in that tape pool are encrypted according to the tape pool settings instead of the tape LUN
settings.
Encryption switches and encryption blades support tape encryption at the tape pool level (for most
backup applications) and at the LUN (tape drive) level. Since Tape Pool policies override the LUN
(tape drive) policies, the LUN pool policies are used only if no tape pools exist or if the tape
media/volume does not belong to any configured tape pools.
All encryption engines in the encryption group share the tape pool definitions. Tapes can be
encrypted by any encryption engine in the group where the container for the tape target LUN is
hosted. The tape media is mounted on the tape target LUN.
Tape pool definitions are not needed to read a tape. The tape contains enough information
(encryption method and key ID) to read the tape. Tape pool definitions are only used when writing
to tape. Tape pool names and numbers must be unique within the encryption group.
Adding tape pools
A tape pool can be identified by either a name or a number, but not both. Tape pool names and
numbers must be unique within the encryption group. When a new encryption group is created, any
existing tape pools in the switch are removed and must be added.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to Figure 1 on page 14.)
2. Select a group from the Encryption Center Devices table, then select Group > Tape Pools from
the menu task bar.
NOTE
If groups are not visible in the Encryption Center Devices table, select View > Groups from the
menu task bar.
3. Click Add.
The Add Tape Pool dialog box displays. (Refer to Figure 84 .) The Name tape pool label type is
the default; however, you can change the tape pool label type to Number. (Refer to Figure 85 .)
FIGURE 84 Add Tape Pool by name dialog box