Dell PowerVault ML6000 - Manual (Page 148)

Chapter 8 Library Managed Encryption
Configuring the Dell Encryption Key Manager (EKM) on the Library
Dell PowerVault ML6000 User’s Guide 148
General Notes About
EncryptionontheLibrary
8
Keep the following points in mind when using encryption on the library:
• Data written to encryption-supported and encryption-capable media
in LME-supported tape drives will be encrypted unless data was
previously written to the media in a non-encrypted format. In order
for data to be encrypted, the media must be blank or have been
written to using library managed encryption at the first write
operation at the beginning of tape (BOT).
• You cannot append encrypted data to a non-encrypted tape.
• You cannot append non-encrypted data to an encrypted tape.
• Only one data encryption key can be used per tape cartridge.
• Encryption is configured by partition. Partitions must be configured
for “Library Managed Encryption.” EKM partitions must contain
only the tape drives supported by the encryption system you are
using. (For more information, see Step 5: Configuring Partitions for
Library Managed Encryption on page 152.
About the EKM License 8
If you purchase an LME license after you purchased your library, you
must install the license key on your library to enable the LME
functionality. The LME license is sold on a per-drive basis. The license
corresponds to the number of tape drives that you can enable for library
managed encryption. If your library contains more encryption-enabled
tape drives than are covered by the license, you will need to purchase an
additional license to cover them. Your new license key replaces your
current license key and contains the entire license for the total number of
tape drives.
Configuring the Dell Encryption Key Manager (EKM) on the
Library
Make sure your Dell EKM servers are installed and running before
configuring the library (see the Dell Encryption Key Manager Deployment
Guide for instructions).