Quantum PX720 Manuel utilisateur

PX720 DLTSage™ Tape Security

Quick Start Guide

TABLE OF CONTENTS

Introduction .......................................1

Notational Conventions .................1

Creating a Secure User ......................1

Creating a Secure Key........................2

Protection Mode for Cartridges.....3

Enable/Disable Secure Key for

Drives...............................................4

Modify Secure Key for Library .......4

Assign Secure Key to Cartridge......4

Create Secure Key Name/Secure Key

Pair...................................................5

Delete Secure Key Name.................5

Backup Secure Key File ...................5

Upload Secure Key File ...................6

Importing Secured Tape Cartridges ..6

Secure Key Maintenance ...................7

Introduction 0

The PX720 tape library with DLT-S4 tape drives is capable of utilizing DLTSage Tape

security. DLTSage Tape Security is a unique solution designed to prevent

unauthorized access to tape cartridges which is particularly valuable when

protecting tapes that are transported offsite. DLTSage Tape Security is a firmware

feature designed into the DLT-S4 tape drive which uses an electronic key to prevent

or allow reading and writing of data on to a tape cartridge. This key is managed

through the remote management pages of the PX720 tape library (refer to the

Quantum PX720 User’s Guide

, PN 6444601 located on the

PX720 Documentation

for more information on the remote management pages). DLTSage Tape

Security is available at no additional cost as an integrated feature of the DLT-S4

tape drive and PX720 tape library (firmware revision 4.5 or later).

Notational Conventions 0

This instruction uses the following conventions:

Setting up your PX720 tape library with DLTSage Tape Security consists of the

following steps:

•Creating a Secure User

•Creating a Secure Key

Creating a Secure User 0

The Secure User is the only user that has the ability to create, modify, and delete a

Secure Key for the Library. The Secure User also has the ability to enable and

NOTE:Notes emphasize important information related to the main topic.

CAUTION:Cautions indicate potential hazards to equipment and are included

to prevent damage to equipment.

WARNING:Warnings indicate potential hazards to personal safety and are

included to prevent injury.

CAUTION:If the secure key information is lost, any tape cartridges that were

secured with the lost key will be unavailable for reading or writing.

PX720 DLTSage™ Tape Security Quick Start Guide

disable Secure Capable Drives for reading and writing

data to and from tapes using the Secure Key.

When a user is created with administrator privileges (other

than the default admin user), the Create Secure User

section appears at the bottom of the Users page (see

figure 1).

Figure 1 Create Secure User

To create a secure user:

There is only one Secure User and the username is always

securekeyadmin.

1Enter a secure password.

2Verify the secure password by entering the password a

second time in the Verify Password box.

3Click Create to create the secure key password.

Once the secure key administrator password is added,

the Delete Secure User section displays at the bottom

of the Users page (see figure 2).

Figure 2 Delete Secure User

To update the secure key password:

NOTE:Only users with administrator privileges (other

than the default administrator) can create a

secure user.

NOTE:Secure Passwords must be alphanumeric

strings of at least one character. A blank

secure password will be rejected. Secure

Password and Verify Password must

match.

NOTE:Only the Secure User can change the secure user

password.

1Enter a secure password.

2Verify the secure password by entering the password a

second time in the Verify Password box.

3Click Update to update the secure key password.

The secure key password is updated.

Creating a Secure Key 0

The Secure Key tab displays when a secure user has been

added to the library and the secure user is logged in.

To access the Secure Key page, from the Setup page, click

on the Secure Key tab at the top of the page.

The Secure Key page displays (see figure 3).

NOTE:Secure Passwords must be alphanumeric

strings of at least one character. A blank

secure password will be rejected. Secure

Password and Verify Password must

match.

NOTE:When logging on as a secure user, the IP address

entered in the address line of the internet browser

uses https, not the common http. Example:

https://<ip address>

PX720 DLTSage™ Tape Security Quick Start Guide

Figure 3 Secure Key Page The Secure Key page is divided into the following sections:

•Protection Mode for Cartridges

•Enable/Disable Secure Key for Drives

•Modify Secure Key for Library

•Assign Secure Key to Cartridge

•Create Secure Key Name/Secure Key Pair

•Delete Secure Key Name

•Backup Secure Key File

•Upload Secure Key File

Protection Mode for

Cartridges 0

Refer to figure 4 for information on Protection Mode for

Cartridges.

Figure 4 Protection Mode for

Cartridges

The Protection Mode for Cartridges area defines when the

secure key is used for a cartridge in a tape drive with a

secure key enabled. In all modes, the secure key is used to

read data from cartridges that have a pre-existing secure

key. If the secure key on the cartridge does not match the

current secure key on the library, the data on the cartridge

can not be read.

Three write protection modes are available:

•Never Write Secure Key to a Cartridge - The secure

key will never be written to a cartridge placed in a

secured tape drive.

•Only Write Secure Key to Blank Cartridges - The

secure key will only be written to blank, unformatted

cartridges.

PX720 DLTSage™ Tape Security Quick Start Guide

•Write Secure Key to All Cartridges - The secure key

will be written to all cartridges, including blank and

formatted cartridges containing data. This mode may

be used to apply a secure key to cartridges with pre-

existing data.

Enable/Disable Secure Key

for Drives 0

Refer to figure 5 for information on Enable/Disable Secure

Key for Drives.

Figure 5 Enable/Disable Secure

Key for Drives

The secure key can only be used with tape drives that are

secure key capable. This section lists the tape drives in the

library that are secure key capable. A checkmark in the

Secure Key column indicates a secure key is enabled for the

tape drive.

1The secure key can be enabled or disabled for all tape

drives by clicking the corresponding radio button.

2Click the Secure Key check box for individual tape

drives to enable/disable secure key for a tape drive.

3Click Update to activate the changes.

Modify Secure Key for

Library 0

Refer to figure 6 for information on Modify Secure Key for

Library.

NOTE:The system must be offline to Enable/Disable

Secure Key setting for drives.

Figure 6 Modify Secure Key for

Library

To modify the secure key used by the library:

1Select the secure key name from the list of available

names.

2Click Update.

Assign Secure Key to

Cartridge 0

Refer to figure 7 for information on Assign Secure Key to

Cartridge.

Figure 7 Assign Secure Key to

Cartridge

Click Find to list all secured cartridges and their assigned

secure key names.

To assign a secure key to a cartridge:

1Enter the barcode of the cartridge. Separate multiple

barcodes with either spaces or commas.

2Select a secure key name from the list of available

names.

NOTE:Selecting None to will cause the library to

NOT use a secure key.

NOTE:The system must be offline to modify a

secure key.

PX720 DLTSage™ Tape Security Quick Start Guide

1Selecting Remove will remove the association between

the cartridge and a secure key name in the cartridge

database.

2Click Update to accept the changes.

Create Secure Key Name/

Secure Key Pair 0

Refer to figure 8 for information on Create Secure Key

Name/Secure Key Pair.

Figure 8 Create Secure Key

Name/Secure Key Pair

To create a secure key name/secure key pair:

1Enter the Secure Key Name.

2Enter a securekey in the protected Secure Key field.

3Enter the same secure key in the Verify Secure Key

field.

4Click New to create the secure key name/key pair.

Delete Secure Key Name 0

Refer to figure 9 for information on Delete Secure Key

Name.

NOTE:The secure key name must be less than 12

characters, may include spaces, but cannot

contain the following characters: ( ) = ;

NOTE:The Secure Key must be at least 8 characters

and no more than 32 characters.

Figure 9 Delete Secure Key Name

The Secure Key Names maintained on the library are

displayed in one of three lists:

•Unused Secure Keys - keys not associated with any

cartridges or tape drives currently in the system.

•Inactive Secure Keys - keys associated with cartridges

in the library, or currently assigned to the library, but

not assigned to any tape drives.

•Active Secure Keys - keys currently assigned to a tape

drive.

To de l et e a Secure Key Name/Secure Key pair from the

library:

1Select the desired Secure Key Names from the

available lists.

2Click Delete.

A confirmation message will be displayed, click Yes to

continue.

Any tape drives that have been secure key enabled will

remain enabled, but the secure key will not be used to

read or write cartridges.

Backup Secure Key File 0

Refer to figure 10 for information on Backup Secure Key

File.

Figure 10 Backup Secure Key File

PX720 DLTSage™ Tape Security Quick Start Guide

The list of Secure Key Name/Secure Key Pairs maintained

on the library should be backed up to a local device

whenever a change is made to the security keys.

1Enter and verify the Encryption Key.

The Encryption Key is required when restoring the

backup secure key file to any library.

2Click Save As...

The browser displays a download link.

3Right-click on the download link and select Save As...

to select a path and name the file.

4Click OK.

Upload Secure Key File 0

Refer to figure 11 for information on Upload Secure Key

File.

Figure 11 Upload Secure Key File

A file containing a list of Secure Key Name/Secure Key

Pairs can be restored to the library.

To upload (restore) a Secure Key File:

1Enter the encryption key of the original library.

2Enter the path and file name of the file to be uploaded

(click Browse...)

3Click Upload button.

A progress window is displayed indicating when the

upload is complete or if any errors occurred during the

upload or restoration of the file.

NOTE:Note the library's Encryption Key. The

Encryption Key is required when restoring the

file to any library.

NOTE:The user defined encryption key of the library

originally maintaining the list is required to

restore the file.

The Secure Key page is refreshed listing restored

secure keys.

Importing Secured Tape Cartridges 0

If you need to import tape cartridges into your library which

have been secured with a key from another PX720 library,

you need to import the secure key before the library can

read or write to the tape cartridges.

To import secured tapes:

1Insert the tape cartridges into the PX720 library (refer

to the PX720 User’s Guide (PN 6444601) for

information on inserting tape cartridges.

2On the PX720 library where the tape cartridges were

originally secured with a key, backup the specific secure

key associated with those tape cartridges (see Backup

Secure Key File).

3Upload the secure key from the original library to the

library where the tape cartridges were imported (see

Upload Secure Key File).

The imported tape cartridges are now associated with

the secure key.

NOTE:An error is displayed if the encryption key

provided does not match the encryption key used

to encode the secure keys.

PX720 DLTSage™ Tape Security Quick Start Guide

United States of America

Quantum Corporation

141 Innovation Drive

Irvine, CA 92612

U.S.A.

phone 949.856.7800

fax 949.856.7799

European Headquarters

Quantum Corporaton

3 Bracknell Beeches

Old Bracknell Lane West

Bracknell

Berkshire RG12 7BW

United Kingdom

phone +44 1344 353500

fax +44 1344 353510

Asia Pacific

Quantum Corporation

9 Temasek Boulevard, #08-03

Suntec Tower Two

Singapore 038989

Tel: +65 6334 0660

Fax: +65 6432 2830

Email: [email protected]

Quantum Corporation. Other trademarks may be mentioned herein which belong to other companies.

81-81588-02 A01 October 2006

Secure Key Maintenance 0

Quantum strongly recommends that you backup your

secure keys whenever a new key is added (see Backup

Secure Key File). The location of these keys should be

available to library administrators who need access to

secured tape cartridges.

CAUTION:If the secure key information is lost, any tape

cartridges that were secured with the lost

key will be unavailable for reading or writing.

Autres manuels pour PX720

Table des matières

Autres manuels Quantum Stockage

Quantum

Quantum Tape Drive SDLT 600A Manuel utilisateur

Quantum

Quantum Scalar i500 Manuel utilisateur

Quantum

Quantum Scalar 50 Manuel utilisateur

Quantum

Quantum ValueLoader DLT VS160 Manuel utilisateur

Quantum

Quantum Scalar i80 Manuel utilisateur

Quantum

Quantum StorNext QD7000 Manuel utilisateur

Quantum

Quantum StorNext QD7000 Manuel utilisateur

Quantum

Quantum SuperLoader 3A Series Manuel utilisateur

Quantum

Quantum Q250 Manuel du produit

Quantum

Quantum QXS 12G Series Manuel technique

Quantum

Quantum DLT Series Instructions d'installation

Quantum

Quantum DLTtape DLT 2000 Manuel

Quantum

Quantum DXi3500 Manuel utilisateur

Quantum

Quantum StorNext AEL500 Manuel utilisateur

Quantum

Quantum 4000 Enhanced Mode d'emploi

Quantum

Quantum Quantum Atlas 10K II 9.2/18.4/36.7/73.4 GB Manuel utilisateur

Quantum

Quantum QDFLD25-***MUH1I Series Manuel utilisateur

Quantum

Quantum ACL 4/52 Manuel

Quantum

Quantum DXi6900 Guide de démarrage rapide

Quantum

Quantum FastStor 1 Manuel utilisateur

Quantum

Quantum QX Series Manuel utilisateur

Quantum

Quantum DXi4700 Manuel d'installation et d'exploitation

Quantum

Quantum PowerStor L200 Manuel utilisateur

Quantum

Quantum ValueLoader DLT VS160 Manuel utilisateur

Manuels Stockage populaires d'autres marques

QNAP

QNAP TS 32PXU Series Manuel utilisateur

LaCie

LaCie RUGGED RAID Manuel utilisateur

Freecom

Freecom CLS DOCK Manuel utilisateur

PNY

PNY Attache P-FD64MBATT3 Manuel utilisateur

HP StorageWorks MSL2024 Manuel utilisateur

OLT

OLT 6x6 Maximizer Manuel utilisateur

Transcend

Transcend JetFlash 160 Manuel utilisateur

LaCie

LaCie RUGGED MINI Manuel utilisateur

Thunderbolt

Thunderbolt 600 Manuel utilisateur

Panasonic

Panasonic LB-DH8 series Manuel

Intel

Intel RAID High Availability Manuel utilisateur

LaCie

LaCie 12big Thunderbolt 3 Manuel utilisateur

Spectra Logic

Spectra Logic T-Series Spectra T50e Manuel utilisateur

Panasonic

Panasonic LKM-F931-1 Manuel utilisateur

Tabernus

Tabernus Enterprise Erase E2400 Manuel utilisateur

Rocstor

Rocstor COMMANDER 3F series Manuel utilisateur

HP P9000 Manuel utilisateur

Western Digital

Western Digital Ultrastar Data60 Manuel utilisateur