Prerequisites for using encryption

Certain hardware and software prerequisites must be met before using encryption with the TS4500 tape library.

With the TS4500 tape library, encryption is managed at the logical library level. All encryption-enabled drives that are assigned to a logical library use the same method of encryption.

The rules for setting up encryption differ based on whether the library is installed with 3592 or LTO tape drives, and whether you use Library-Managed Encryption (LME) or Application-Managed Encryption (AME).

If the library contains 3592 tape drives, the following prerequisites apply:
  • IBM® Security Key Lifecycle Manager (SKLM), formerly the Tivoli® Key Lifecycle Manager, must be attached to the TS4500 and configured for LME .
  • Tape drives must be enabled for encryption from the Logical Libraries page of the TS4500 management GUI.
If the library contains LTO tape drives, the following prerequisites apply:
  • Tape drives must be enabled for encryption from the Logical Libraries page of the TS4500 management GUI.
  • Feature code 1604, Transparent LTO Encryption, is required for LTO tape drives if using LME.
  • SKLM is required as the key manager when using LME with LTO.