Dell PowerVault TL2000 Dell Encryption Key Manager and Library Managed Encr
Dell PowerVault TL2000 Manual
View all Dell PowerVault TL2000 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell PowerVault TL2000 manual content summary:
- Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 1
Dell Encryption Key Manager and Library Managed Encryption Best Practices and FAQ - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 2
. Trademarks used in this text: Dell™, the DELL logo, and PowerEdge™ are trademarks of Dell Inc. Microsoft®, Windows®, and Windows Server® are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. Linux® is the registered trademark of Linus - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 3
Contents 1 Dell Encryption Key Manager and Library Managed Encryption 7 Best Practices 7 FAQ 9 Is Encryption Key Manager (EKM) supported on Microsoft Windows Server 2008 and Windows Server 2008 R2 9 Is EKM supported on SUSE Linux Enterprise Server 11 9 Is EKM supported on a virtual machine 9 - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 4
the login fails 23 The Dell Encryption Key Manager User's Guide does not contain details on how the user can edit the EKM configuration files for the server and client 23 My PowerVault TL2000/TL4000 posts an LME Failure when I change the configuration from Library-Managed Encryption to Application - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 5
My PowerVault TL2000/TL4000 is configured for library-managed encryption and my RMU shows an error condition with no associated text 24 When I attempt to add a drive manually using adddrive in the CLI, it asks for a 12-digit drive serial number. The drive serial number is only 10 digits 24 How is - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 6
6 Contents - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 7
using your Dell PowerVault TL2000, TL4000, or ML6000 tape libraries. Dell Encryption Key Manager and Library Managed Encryption This document covers the Dell Encryption Key Manager and Library Managed Encryption used on the Dell PowerVault TL2000, TL4000, and ML6000 tape libraries. Best Practices - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 8
. If the library firmware does not support key path diagnostics, the firmware can be updated to the most recent version so that key path diagnostics can be used. Test backups can also be used to validate the EKM connectivity. When using new media, the user must ensure that the tape backup software - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 9
added in EKM version 2.1 available at support.dell.com. Is EKM supported on SUSE Linux Enterprise Server 11? Support for SUSE Linux Enterprise Server 11 was added in EKM version 2.1 available at support.dell.com. Is EKM supported on a virtual machine? Support for Microsoft Windows Hyper-V and VMWare - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 10
drivers on the existing server. e Install EKM 2.1. Use the GUI to configure the EKM. The EKM 2.1 settings must be the same as the original EKM - the following items must match: group name, number of keys, key store name, and key store password. 10 Dell Encryption Key Manager and Library Managed - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 11
IP address. h If required, update the EKM IP address in the library configuration. If this is a password. 3 Stop the redundant EKM (second EKM installed). 4 Collect the backup files from the primary EKM located at C:\ekm\backup (default Dell Encryption Key Manager and Library Managed Encryption 11 - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 12
page of the EKM GUI. How do I ensure that EKM restarts automatically if my server reboots? EKM should be configured to run as a Windows or Linux-based service to ensure that it restarts automatically if the server reboots. 12 Dell Encryption Key Manager and Library Managed Encryption - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 13
, this needs to be configured for each platform. 1 Download the Dell - Application Version Dell EKM Services release for the TL2000/TL4000 or the Dell - Patch/Upgrade for the ML6000 from the Dell Support website at support.dell.com. 2 Extract the LaunchEKMService.exe file from the release - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 14
paths if they are correct. Pay close attention to the location of the semicolons. Semicolons should default installation and key store names Options Complete Path config.keygroup.xml.file FILE:C:/ekm/gui/keygroups/KeyGroups.xml Admin Dell Encryption Key Manager and Library Managed Encryption - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 15
Windows Service manually the first time it is used by using the control panel. 10 Once the Dell Encryption Key Manager is installed as a Windows service with the above command, it can be started and stopped from the Service Control Panel. Dell Encryption Key Manager and Library Managed Encryption - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 16
Verify your EKM server is once again running. NOTE: In a 64-bit Windows environment, the user account where the shortcut was created must remain logged in for the EKM service to remain running. If the user account logs out, backup jobs requiring encryption keys fail due to the lack of an EKM server - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 17
longer need to run EKM as a service. How do I change my login password? 1 In the EKM GUI window, stop the EKM server and log out of the GUI. 2 Open a command prompt window. 3 Navigate to the EKM directory through C:\cd ekm. NOTE: C:\ekm is the default directory. 4 Navigate to the EKMServer directory - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 18
changeME2 is the desired new password. Once logged in, the user can use the command line interface to complete operations not supported in the GUI. 10 Type exit to logout. This returns the user to the command prompt. EKM Server is configured to start as a Windows service but it stops after initially - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 19
a Linux-based system: 1 Download Dell - Patch/Upgrade for the ML6000 or the Dell - Application Version Dell EKM Services release for the TL2000/TL4000 from the Dell Support website at support.dell.com. 2 Locate the LocalOS directory in the download. Dell Encryption Key Manager and Library Managed - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 20
typically /IBMJava2-amd64-142 for a 64-bit AMD Linux kernel running the 1.4.2 JVM. After the installation is complete, you can start the EKM server. The EKM client can now login with the OS-based user name and password. Note that only userids allowed to login and submit commands - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 21
PowerVault ML6000. Tapes can be migrated from an ML6000 to a TL2000 or TL4000 for this purpose. The TL2000 or TL4000 then needs to be pointed to the appropriate EKM. 1 Ensure that the EKM server is running, and configured properly. 2 Login to the RMU GUI for the TL2000/TL4000 (admin/service login - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 22
to the RMU GUI for the TL2000/4000. 2 Navigate to Monitor Library, and then to Inventory. 3 Click the drop down menu for the appropriate magazine. 4 Verify that the Comment section shows Not Encrypted. Only after all desired media is un-encrypted can EKM be removed or uninstalled. It is recommended - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 23
file that needs to be updated using the text editor of your choice. 3 Make the necessary updates. Make sure to follow the instructions in the Dell Encryption Key Manager User's Guide. 4 Save the document. 5 Restart the EKM server. Dell Encryption Key Manager and Library Managed Encryption 23 - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 24
RMU by navigating to the warning log in the unit. To clear the error, it must be acknowledged in the OCP. This issue was fixed in the 7.40 version of the library firmware (version A07 on support.dell.com). When I attempt to add a drive manually using adddrive in the CLI, it asks for a 12-digit drive - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 25
Configuration tab in the EKM GUI. To add the drives manually, follow the instructions in the Encryption Key Manager User's Guide to add the drives through the command line interface. It is not cause an increase in the backup window. Dell Encryption Key Manager and Library Managed Encryption 25 - Dell PowerVault TL2000 | Dell Encryption Key Manager and Library
Managed Encr - Page 26
EC number: M10948A IBM Part number: 46X4059 (1P) P/N:46X4059 *1P46X4059*
Dell Encryption Key Manager
and Library Managed
Encryption
Best Practices and FAQ