Skip to main content

## Run Key Path Diagnostic

The Key Path Diagnostic test checks all communication paths to ensure a key can be transmitted from the encryption key servers to the drive in order to properly encrypt and decrypt the tape cartridges.

The test consists of two parts. The first part, the drive test, verifies if the communication between library and drive is working properly. This test is only executed on the drives which are configured to library managed encryption (LME).

The second part verifies the communication between the library and the encryption key servers. If the secondary ethernet port is enabled and configured, the tests are executed on both ports separately.

This part of the test includes 4 subtests:

- Ping test
  This test checks if the key server can be reached. If ICMP requests are blocked on the server side, this test will fail as well. Therefor, the following tests will be executed regardless the result of the ping test.
- SSL/TLS test
  This test tries to establish a SSL/TLS connection with the key server. If this test fails, the following tests will be skipped, because they would also fail. This test will be skipped in case SSL/TLS is not enabled.
- Key Server Login
  This test will only be executed in combination with a KMIP encryption server since SKLM currently does not support login. If this test fails, the following Key Retrieval test will be skipped, because it would also fail.
- Key Retrieval
  This test will request a key from the encryption server. For SKLM servers, a key from the key pool will be requested. On other servers, the library will acquire a specific diagnostic key.

The test results will be stored and can be shown until the next test has been started. In case a test has failed, a ticket will be generated and can be opened to show the details by clicking the failed icon.

The test run can be stopped using the "Stop Test" button. Once the test is stopped the currently running test will be aborted and the remaining tests skipped.