Dell PowerVault ML6000 - Manual (Page 156)

Chapter 8 Library Managed Encryption
Configuring the Dell Encryption Key Manager (EKM) on the Library
Dell PowerVault ML6000 User’s Guide 156
Diagnostics on page 156.
4
Click
Apply
.
5
Save the library configuration.
Using EKM Path
Diagnostics
8
The EKM Path Diagnostics consists of a series of short tests to validate
whether the key servers are running, connected, and able to serve keys as
required.
Run the Manual EKM Path Diagnostics any time you change the key
server settings or library encryption settings, and when you replace a
tape drive. It is recommended that you test each drive that communicates
with key manager servers.
The diagnostics consists of the following tests:
•
Ping
— Verifies the Ethernet communication link between the library
and the key servers. If the partition in which the selected tape drive
resides uses EKM server overrides, then the override IP addresses are
tested (see
Setup > Encryption > Partition Configuration
). If the
partition does not use overrides, the default system IP addresses are
tested (see
Setup > Encryption > System Configuration
).
•
Drive
— Verifies the tape drive’s path in the library (communication
from library to tape drive sled and from tape drive sled to tape drive).
The tape drive must be unloaded, ready, and online in order to run
this test. If this test fails, the Path and Config tests are not performed.
•
Path
— Verifies that EKM services are running on the key servers.
•
Config
— Verifies that the key servers are capable of serving
encryption keys.
If any of the tests fail, try the following resolutions and run the test again
to make sure it passes:
•
Ping Test Failure
— Verify that the key server host is running and
accessible from the network to which the library is connected.
•
Drive Test Failure
— Look for any tape drive RAS tickets and follow
the resolution instructions in the ticket.
Note:
This test cannot run if the Drive test fails.