Hp ultrium worm data cartridges, Ultrium 1840 tape drives and encryption, When should i use encryption – HP StoreEver Ultrium Tape Drives User Manual
Page 50: How do i enable encryption
HP Ultrium WORM data cartridges
The HP StorageWorks Ultrium 1840 and 960 tape drive includes support for both re-writable and
Write-Once, Read-Many, WORM, data cartridges. WORM cartridges provide for an enhanced level
of data security against accidental or malicious alteration of data on the tape cartridge. The WORM
data cartridge can be appended to maximize the full capacity of the tape cartridge, but the user will
be unable to erase or overwrite data on the cartridge. Any attempt to modify a WORM cartridge to
enable writing over existing data will result in the media becoming permanently write protected. It
should still be readable in a WORM drive, depending upon the severity of the tampering, but no further
appended backups will be possible.
WORM data cartridges are clearly identified by their distinctive, two-tone cartridge color. They can only
be used with Ultrium tape drives that support the WORM feature.
To check whether your backup or archive software application supports WORM cartridges, refer to the
following web site:
For information on how your HP Ultrium StorageWorks tape drive and WORM cartridge can help your
business meet Information Lifecycle Management and regulatory compliance requirements, please refer
to the HP Business Support Center at:
Ultrium 1840 tape drives and encryption
Your Ultrium 1840 tape drive includes hardware capable of performing data encryption at full speed
while writing data, and decrypting when reading.
Encryption is the process of changing data into a form that cannot be read until it is deciphered, protecting
the data from unauthorized access and use. HP Ultrium 1840 tape drives use the strongest version of the
industry-standard AES encrypting algorithm to protect your data. To make use of this feature you need:
•
a backup application that supports hardware encryption
•
Ultrium 1.6 TB media (C7974A or C7974W); no encryption will be performed when writing earlier
generations of tape
When should I use encryption?
Your company policy will determine when you need to use encryption. For example, it may be mandatory
for company confidential and financial data, but not for personal data. Company policy will also define
how encryption keys should be generated and managed. Backup applications that support encryption
will generate a key for you or allow you to enter a key manually.
NOTE:
Encryption with keys that are generated directly from passwords or passphrases may be less secure than
encryption using truly random keys. Your application should explain the options and methods that are
available. Please refer to your application’s user documentation for more information.
How do I enable encryption?
Hardware encryption is turned off by default and is switched on by settings in your backup application,
where you also generate and supply the encryption key. Your backup application must support hardware
encryption for this feature to work. The software supplied with the tape drive provides this support. See
o-date list of other suitable backup software.
50
Use the correct media