Tape subsystem encryption is supported through a hardware encryption feature of the encryption-capable TS1120 tape drive. This encryption feature requires both hardware and microcode updates. MEDIA5 - MEDIA10 support a recording format EEFMT2 (encrypted) in addition to EFMT1 and EFMT2. EEFMT2 is compatible with both performance segmentation and performance scaling. EFMT2 is the default recording technology. EEFMT2 and EFMT1 must be requested through SMS data class. When EEFMT2 is requested, OPEN passes the key encoding mechanism and key labels obtained from SMS to the drive. The key labels are used by the Encryption Key Manager (EKM) to create externally encrypted data keys (EEDKs) which are stored on the cartridge in drive-only accessible areas.