Encryption

The LTO™ tape drive supports host Application Managed Encryption (AME), with T10 encryption methods.

Data encryption is supported by LTO Ultrium™ 4 and later data cartridges only.

The encryption-enabled drive contains the necessary hardware and firmware to encrypt and decrypt host tape application data. Encryption policy and encryption keys are provided by the host application. A drive digital certificate is installed at manufacturing time. Each drive receives a unique serial number and certificate. The T10 Application can validate each drive instance by checking the drive's digital certificate.

For details, see the IBM® Tape Device Drivers Encryption Support documentation, and the IBM LTO Ultrium Tape Drive SCSI Reference documentation.