beautypg.com

Dell TL2000 User Manual

Page 25

background image

is

installed

at

manufacturing

time.

Each

drive

receives

a

unique

serial

number

and

certificate.

The

T10

application

may

validate

each

drive

instance

by

checking

the

drive’s

digital

certificate.

CAUTION:

The

library

must

be

offline

from

any

user

and

all

media

must

be

removed

from

the

drives

before

license

keys

are

installed

or

any

configuration

modifications

are

made.

Please

refer

to

“Power

ON/OFF”

on

page

2-4

and

“Removing

Cartridges

from

Magazine

Slots”

on

page

9-1

for

instructions

to

take

the

library

offline

and

to

eject

media

from

the

drives.

To

prevent

possible

data

loss

due

to

an

EKM

server

failure,

Dell

recommends

the

use

of

a

primary

and

secondary

EKM

server.

This

configuration

provides

redundancy

in

the

event

the

primary

EKM

server

is

down

or

unavailable.

Please

refer

to

Chapter

2

(Multiple

Key

Managers

for

Redundancy)

of

the

Dell

Encryption

Key

Manager

User’s

Guide

and

to

“Configure

Library:

Encryption”

on

page

5-41

for

information

on

configuring

a

primary

and

secondary

EKM

for

your

library.

If

the

backup

job

fails

due

to

an

EKM

server

failure,

the

job

will

recover

if

connectivity

is

restored

to

the

EKM

server

prior

to

expiration

of

the

timeout

set

in

the

tape

backup

software

application.

Enabling

library-managed

encryption

on

a

PowerVault

TL2000

or

TL4000

is

a

6

step

process.

1.

Upgrade

the

library

and

drive

firmware

to

the

latest

versions.

The

firmware

can

be

found

at

http://support.dell.com

.

2.

Enable

library-managed

encryption

on

the

library

via

the

license

key

if

not

already

licensed.

Please

refer

to

Figure

2-25

for

activation

instructions.

.

If

you

purchased

library-managed

encryption

at

the

time

you

purchased

your

library,

a

hard

copy

of

the

license

key

is

provided

with

your

library

as

a

backup.

If

there

are

any

issues

with

the

license

key

for

library-managed

encryption

purchased

with

the

library,

please

visit

http://www.dell.com/

tapeautomation

to

obtain

your

license

key.

You

will

need

the

library

serial

number

and

worldwide

node

name

to

obtain

the

license

key.

Please

refer

to

the

following

tables

in

this

document

for

instructions

on

locating

this

information:

v

Table

1.2

for

library

serial

number

v

Table

4.5

for

library

worldwide

node

name

If

this

does

not

resolve

your

issue,

please

contact

Dell

technical

support.

3.

Configure

library-managed

encryption

on

your

library.

Please

refer

to

Figure

2-26

for

instructions.

4.

Install

the

Dell

Encryption

Key

Manager

(EKM)

application

on

the

server

designated

for

EKM.

Please

refer

to

Chapter

3.0

of

the

Dell

Encryption

Key

Manager

User’s

Guide

for

instructions.

This

document

can

be

found

at

http://support.dell.com

.

5.

Configure

the

EKM

application.

Please

refer

to

Chapter

4.0

of

the

Dell

Encryption

Key

Manager

User’s

Guide

for

instructions.

6.

Start

the

EKM

application.

Please

refer

to

Chapter

5.0

of

the

Dell

Encryption

Key

Manager

User’s

Guide

for

instructions.

Note:

All

encryption

settings

should

be

configured

or

re-verified

in

the

drive

after

any

library

or

drive

reset.

This

is

because

a

new

drive

may

have

been

added

or

an

existing

drive

may

have

been

swapped

with

another

drive.

Chapter

1.

Product

Description

1-7