When should i use encryption, How do i enable encryption, When will i be asked to enter the key – HP StoreEver LTO Ultrium Tape Blades User Manual
Page 49: 49 how do i enable encryption, 49 when will i be asked to enter the key, Hp storageworks sb3000c and sb1760c, Tape blades and encryption
HP StorageWorks SB3000c Tape Blades and partitioning
The HP StorageWorks SB3000c Tape Blade supports two tape partitions, when used with Ultrium 3
TB R/W cartridges. Tape partitioning is not supported with WORM cartridges or with earlier
generations of cartridge. It is not supported on earlier-generation tape drives. If you insert a partitioned
tape into a tape drive that does not support partitioning, it will be ejected.
To check for the latest information about support for partitioning and any required firmware upgrades,
go to
. Refer to your backup application's documentation
for information about creating and using partitions on the tape drive.
HP StorageWorks SB3000c and SB1760c Tape Blades and encryption
The HP StorageWorks SB3000c and SB1760c Tape Blade includes hardware capable of performing
data encryption at full speed while writing data, and decrypting when reading.
Encryption is the process of changing data into a form that cannot be read until it is deciphered,
protecting the data from unauthorized access and use. HP StorageWorks Tape Blades use the strongest
version of the industry-standard AES encrypting algorithm to protect your data.
To make use of this feature you need:
•
A backup application that supports hardware encryption
•
Ultrium 3 TB media (C7975A or C7975W) or Ultrium 1.6 TB media (C7974A or C7974W); no
encryption will be performed when writing earlier generations of tape
When should I use encryption?
Your company policy will determine when you need to use encryption. For example, it may be
mandatory for company confidential and financial data, but not for personal data. Company policy
will also define how encryption keys should be generated and managed. Backup applications that
support encryption will generate a key for you or allow you to enter a key manually.
NOTE:
Encryption with keys that are generated directly from passwords or passphrases may be less secure
than encryption using truly random keys. Your application should explain the options and methods
that are available. Please refer to your application's user documentation for more information.
How do I enable encryption?
Hardware encryption is turned off by default and is switched on by settings in your backup application,
where you also generate and supply the encryption key. Your backup application must support
hardware encryption for this feature to work. The software supplied with the tape drive provides this
support. See
for an up-to-date list of other suitable backup software.
When will I be asked to enter the key?
Encryption is primarily designed to protect the media once it is offline and to prevent it being accessed
from another machine. You will be able to read and append the encrypted media without being
prompted for a key as long as it is being accessed by the machine and application that first encrypted
it.
Tape Blade
49