Quantum Scalar i40 Guida Utente Scaricare il pdf (Pagina 227)

Chapter 7: Encryption Key Management

Performing Scalar Key Manager Functions Available on the Library

Quantum Scalar i40 and Scalar i80 User’s Guide 199

Generating Data

Encryption Keys

Caution: Every time you generate new data encryption keys, you

must back up both SKM servers before you begin using the

keys to encrypt data. Refer to the

Scalar Key Manager

User’s Guide

for instructions.

Data encryption keys are generated in sets of a specified quantity (see

the

Scalar Key Manager User’s Guide

for more information).

The library tracks data encryption key usage and reminds you to

generate more keys when needed. If you try to generate data encryption

keys on an SKM server that already has sufficient unused data

encryption keys, then it will not create more. You will receive a message

to that effect on the library remote Web client.

Note: Each library that you connect to an SKM server requires its own

set of data encryption keys. Each library only pulls data

encryption keys from the set that “belongs” to it. This means

that an SKM server may contain several distinct sets of data

encryption keys. When the data encryption keys for one library

have all been used, then more keys must be generated.

You can generate data encryption keys in the following ways:

• Generating Data Encryption Keys at Initial Setup

• Generating Data Encryption Keys When 80% Depleted

• Generating Data Encryption Keys When 100% Depleted

• Manually Generating Data Encryption Keys

Generating Data Encryption Keys at Initial Setup

At initial setup, the library triggers each SKM server to generate a set of

data encryption keys. The process is described in

Step 7: Configure

Partitions for Library Managed Encryption on page 183.

Generating Data Encryption Keys When 80% Depleted

When an SKM server has used 80 percent of the data encryption keys

assigned to a particular library, that library attempts to automatically

generate data encryption keys on the SKM server. Both SKM servers

must be running and operational in order for automatic key generation

to succeed.

1 2 ... 222 223 224 225 226 227 228 229 230 231 232 ... 339 340

Nessun commento

Quantum Scalar i40 Guida Utente Pagina 227