IBM Tivoli Storage Manager, Version 7.1

Enabling ECARTRIDGE drive encryption

The DRIVEENCRYPTION parameter specifies whether drive encryption is enabled or can be enabled for DRIVE, T10000B, T10000B-C, T10000C, and T10000C-C formats. This parameter ensures Tivoli® Storage Manager compatibility with hardware encryption settings for empty volumes.

About this task

Tivoli Storage Manager supports the Application method of encryption with Oracle StorageTek T10000B or T10000C drives. The Library method of encryption is supported only if your system hardware supports it.

Remember: You cannot use drive encryption with write-once, read-many (WORM) media or VolSafe media.

The Application method, in which Tivoli Storage Manager generates and manages encryption keys, is defined through the hardware. To use the Application method, set the DRIVEENCRYPTION parameter to ON. This setting permits the encryption of data for empty volumes. If the parameter is set to ON and the hardware is configured for another encryption method, backup operations fail.

The following simplified example shows the steps you would take to permit data encryption for empty volumes in a storage pool:

Procedure

Define a library:
```
define library sl3000 libtype=scsi
```
Define a device class, ECART_ENCRYPT, and specify Tivoli Storage Manager as the key manager:
```
define devclass ecart_encrypt library=sl3000
   devtype=ecartridge driveencryption=on 
```

Define a storage pool:

define stgpool ecart_encrypt_pool ecart_encrypt

Feedback