PX500 Series DLTSage™ Tape Security
Quick Start Guide
TABLE OF CONTENTS
Introduction
0
The PX500 Series (PX502, PX506, and PX510) tape libraries with DLT-S4 tape drives
are capable of utilizing DLTSage Tape security. DLTSage Tape Security is a unique
solution designed to prevent unauthorized access to tape cartridges which is
particularly valuable when protecting tapes that are transported offsite. DLTSage
Tape Security is a firmware feature designed into the DLT-S4 tape drive which uses
an electronic key to prevent or allow reading and writing of data on to a tape
cartridge. This key is managed through the remote management pages of the
PX500 Series tape library (refer to the Quantum PX500 Series User’s Guide, PN 81-
81290 located on the PX500 Series Documentation CD for more information on
the remote management pages). DLTSage Tape Security is available at no
additional cost as an integrated feature in of the DLT-S4 tape drive and PX500
Series tape library (firmware version 20 or later).
Enable/Disable Secure Key for
Notational Conventions
0
This instruction uses the following conventions:
NOTE: Notes emphasize important information related to the main topic.
CAUTION: Cautions indicate potential hazards to equipment and are included
to prevent damage to equipment.
WARNING: Warnings indicate potential hazards to personal safety and are
included to prevent injury.
Setting up your PX500 Series tape library with DLTSage Tape Security consists of
the following steps:
•
•
Creating a Secure User
0
CAUTION: If the Secure Key information is lost, any tape cartridges that were
secured with the lost key will be unavailable for reading or writing.
The Secure User is the only user that has the ability to create, modify, and delete a
Secure Key for the Library. The Secure User also has the ability to enable and
PX500 Series DLTSage™ Tape Security Quick Start Guide
The Secure Key page is divided into the following sections:
Figure 3 Secure Key Page
•
•
•
•
•
•
•
•
Protection Mode for
Cartridges
0
Cartridges.
Figure 4 Protection Mode for
Cartridges
The Protection Mode for Cartridges area defines when the
Secure Key is used for a cartridge in a tape drive with a
Secure Key enabled. In all modes, the Secure Key is used to
read data from cartridges that have a pre-existing Secure
Key. If the Secure Key on the cartridge does not match the
current Secure Key on the library, the data on the cartridge
can not be read.
Three write protection modes are available:
•
•
•
Never Write Secure Key to a Cartridge - The Secure
Key will never be written to a cartridge placed in a
secured tape drive.
Only Write Secure Key to Blank Cartridges - The
Secure Key will only be written to blank, unformatted
cartridges.
Write Secure Key to All Cartridges - The Secure Key
will be written to all cartridges, including blank and
formatted cartridges containing data. This mode may
be used to apply a Secure Key to cartridges with pre-
existing data.
3
PX500 Series DLTSage™ Tape Security Quick Start Guide
1 Select the Secure Key name from the list of available
Enable/Disable Secure Key
for Drives
names.
0
NOTE: Selecting None to will cause the library to
NOT use a Secure Key.
Key for Drives.
Figure 5 Enable/Disable Secure
Key for Drives
2 Click Update.
NOTE: The system must be offline to modify a
Secure Key.
Assign Secure Key to
Cartridge
0
Cartridge.
The Secure Key can only be used with tape drives that are
Secure Key capable. This section lists the tape drives in the
library that are Secure Key capable. A checkmark in the
Secure Key column indicates a Secure Key is enabled for
the tape drive.
Figure 7 Assign Secure Key to
Cartridge
1 The Secure Key can be enabled or disabled for all tape
drives by clicking the corresponding radio button.
2 Click the Secure Key check box for individual tape
drives to enable/disable Secure Key for a tape drive.
3 Click Update to activate the changes.
NOTE: The system must be offline to Enable/Disable
Secure Key setting for drives.
Click Find to list all secured cartridges and their assigned
Secure Key names.
Modify Secure Key for
Library
0
To assign a Secure Key to a cartridge:
Library.
1 Enter the barcode of the cartridge. Separate multiple
barcodes with either spaces or commas.
2 Select a Secure Key name from the list of available
Figure 6 Modify Secure Key for
Library
names.
3 Selecting Remove will remove the association between
the cartridge and a Secure Key name in the cartridge
database.
4 Click Update to accept the changes.
Create Secure Key Name/
Secure Key Pair
0
Name/Secure Key Pair.
To modify the Secure Key used by the library:
4
PX500 Series DLTSage™ Tape Security Quick Start Guide
•
•
Unused Secure Keys - keys not associated with any
cartridges or tape drives currently in the system.
Figure 8 Create Secure Key
Name/Secure Key Pair
Inactive Secure Keys - keys associated with cartridges
in the library, or currently assigned to the library, but
not assigned to any tape drives.
•
Active Secure Keys - keys currently assigned to a tape
drive.
To delete a Secure Key Name/Secure Key pair from the
library:
1 Select the desired Secure Key Names from the
available lists.
To create a secure key name/secure key pair:
2 Click Delete.
1 Enter the Secure Key Name.
A confirmation message will be displayed, click Yes to
continue.
NOTE: The Secure Key name must be less than 12
characters, may include spaces, but cannot
contain the following characters: ( ) = ;
Any tape drives that have been Secure Key enabled will
remain enabled, but the Secure Key will not be used to
read or write cartridges.
2 Enter a securekey in the protected Secure Key field.
3 Enter the same Secure Key in the Verify Secure Key
Backup Secure Key File
0
field.
File.
NOTE: The Secure Key must be at least 8 characters
and no more than 32 characters.
Figure 10 Backup Secure Key File
4 Click New to create the Secure Key name/key pair.
Delete Secure Key Name
0
Name.
Figure 9 Delete Secure Key Name
The list of Secure Key Name/Secure Key Pairs maintained
on the library should be backed up to a local device
whenever a change is made to the security keys.
NOTE: Note the library's Encryption Key. The Encryption
Key is required when restoring the file to any
library.
1 Click Save As...
2 From the browser's Save window, select a path and
name the file.
3 Click OK.
The Secure Key Names maintained on the library are
displayed in one of three lists:
5
PX500 Series DLTSage™ Tape Security Quick Start Guide
Upload Secure Key File
0
Importing Secured Tape Cartridges
0
File.
If you need to import tape cartridges into your library which
have been secured with a key from another PX500 Series
library, you need to import the Secure Key before the library
can read or write to the tape cartridges.
Figure 11 Upload Secure Key File
To import secured tapes:
1 Write down the barcodes for every secured tape that
will be imported into the library. You will need to have
these barcodes available when associating the tape
cartridges with the Secure Key.
2 Insert the tape cartridges into the PX500 Series library
(refer to the PX500 Series User’s Guide (PN 81-81290)
for information on inserting tape cartridges.
A file containing a list of Secure Key Name/Secure Key
Pairs can be restored to the library.
3 On the PX500 Series library where the tape cartridges
were originally secured with a key, backup the specific
Secure Key associated with those tape cartridges (see
NOTE: The Encryption Key of the library originally
maintaining the list is required to restore the file.
4 Upload the Secure Key from the original library to the
where the tape cartridges were imported (see Upload
To upload (restore) a Secure Key File:
1 Enter the Encryption Key of the original library.
2 Enter the path and file name of the file to be uploaded
5 Assign the barcode labels from the imported tape
cartridges with the Secure Key from the original library
(click Browse...)
3 Click Upload button.
The imported tape cartridges are now associated with
the Secure Key.
A progress window is displayed indicating when the
upload is complete or if any errors occurred during the
upload or restoration of the file.
The Secure Key page is refreshed listing restored
secure keys.
Secure Key Maintenance
0
Quantum strongly recommends that you backup your secure
keys whenever a new key is added (see Backup Secure Key
File). The location of these keys should be available to library
administrators who need access to secured tape cartridges.
NOTE: An error is displayed if the serial number provided
does not match the serial number used to encode
the secure keys.
CAUTION: If the Secure Key information is lost, any
tape cartridges that were secured with the
lost key will be unavailable for reading or
writing.
United States of America
Quantum Corporation
141 Innovation Drive
Irvine, CA 92612
U.S.A.
phone 949.856.7800
fax 949.856.7799
European Headquarters
Asia Pacific
Quantum Corporaton
3 Bracknell Beeches
Old Bracknell Lane West
Bracknell
Berkshire RG12 7BW
United Kingdom
Quantum Corporation
9 Temasek Boulevard, #08-03
Suntec Tower Two
Singapore 038989
Tel: +65 6334 0660
Fax: +65 6432 2830
Email: [email protected]
phone +44 1344 353500
fax +44 1344 353510
©2006 Quantum Corporation. Quantum, the Quantum logo, and the DLTtape logo are all registered trademarks of Quantum Corporation. SDLT and Super DLTtape are trademarks of
Quantum Corporation. Other trademarks may be mentioned herein which belong to other companies.
81-81627-01 A01 June 2006
|