IBM TS2340 User Guide - Page 301

Encryption, Library Managed

Page 301 highlights

IBM Tape Diagnostic Tool Encryption The Encryption [E] function is used to verify if data on the cartridge was actually written encrypted. It reads both decrypted and raw data from the cartridge into two separate files on disk. The user can then verify that the data differs to ensure that encryption worked. The Encryption function does not provide a Write - Read test. The Encryption function is only supported on encryption enabled drives and requires an encryption infrastructure including the Encryption Key Manager (EKM) to be properly set up. An encrypted data cartridge must be used. The Encryption function is supported for the following encryption environments: v System Managed: IBM tape device driver must be installed and in use by ITDT to read decrypted data v Library Managed v Application Managed: Only raw encrypted data will be read (result file *.ENC) Note: On i5/OS, media changers and media changer operations are not supported with this release of ITDT-SE. To test a tape drive inside a library, the Tape Drive must be varied online and the Tape Library must be varied offline (see "Starting ITDT-SE on i5/OS Operating Systems" on page 269 for details). As the Library is varied offline, the Encryption function does not deliver decrypted data in a Library Managed Encryption environment. 1. After starting ITDT-SE, type S followed by the Enter key to activate the device scan. 2. Select the device you want to test by entering its number and press the Enter key. Type E and press the Enter key to start the encryption test. 3. ITDT-SE then switches to the Encryption Verification screen. On this screen, the system requires the entry of the number of the start record and the amount of data (in KB) to be read. 4. Type S followed by a space and the start record number, then press the Enter key to enter the start record number. Type L followed by a blank and the data length, then press the Enter key to enter the data length, maximum 100000 KB. Chapter 10. IBM Tape Diagnostic Tool (ITDT) 283

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457

Encryption
The Encryption [E] function is used to verify if data on the cartridge was actually
written encrypted. It reads both decrypted and raw data from the cartridge into
two separate files on disk. The user can then verify that the data differs to ensure
that encryption worked.
The Encryption function does not provide a Write - Read test.
The Encryption function is only supported on encryption enabled drives and
requires an encryption infrastructure including the Encryption Key Manager (EKM)
to be properly set up. An encrypted data cartridge must be used.
The Encryption function is supported for the following encryption environments:
v
System Managed: IBM tape device driver must be installed and in use by ITDT
to read decrypted data
v
Library Managed
v
Application Managed: Only raw encrypted data will be read (result file *.ENC)
Note:
On i5/OS, media changers and media changer operations are not supported
with this release of ITDT-SE. To test a tape drive inside a library, the Tape
Drive must be varied online and the Tape Library must be varied offline
(see “Starting ITDT-SE on i5/OS Operating Systems” on page 269 for
details). As the Library is varied offline, the Encryption function does not
deliver decrypted data in a Library Managed Encryption environment.
1.
After starting ITDT-SE, type S followed by the Enter key to activate the device
scan.
2.
Select the device you want to test by entering its number and press the Enter
key. Type E and press the Enter key to start the encryption test.
3.
ITDT-SE then switches to the Encryption Verification screen. On this screen, the
system requires the entry of the number of the start record and the amount of
data (in KB) to be read.
4.
Type S followed by a space and the start record number, then press the Enter
key to enter the start record number. Type Lfollowed by a blank and the data
length, then press the Enter key to enter the data length, maximum 100000 KB.
IBM Tape Diagnostic Tool
Chapter 10. IBM Tape Diagnostic Tool (ITDT)
283