Dell PowerVault ML6000 - Manual (Page 5)

www
.de
ll
.co
m | sup
port.d
ell
.c
om
5
The Progress Window opens. The Progress Window contains information on the action, elapsed time, and
status of the operation. Do one of the following:
• If Success appears in the Progress Window, the EKM system settings were successfully configured.
Click Close to close the Progress Window.
• If Failure appears in the Progress Window, the EKM system settings were not successfully configured.
Follow the instructions listed in the Progress Window to resolve any issues that occurred during the
operation.
NOTE:
If you plan to use different EKM key servers for different partitions, you must also fill in the overrides section of
the Setup > Encryption > Partition Encryption screen. See Step 3: Configuring Partition Encryption.
Step 3: Configuring Partition Encryption
Encryption on the Dell PowerVault ML6000 tape library is enabled by partition only. You cannot select individual
tape drives for encryption; you must select an entire partition to be encrypted. If you enable a partition for library
managed encryption, all library managed encryption-supported tape drives in the partition are enabled for
encryption, and all data written to library managed encryption-supported media in the partition is encrypted.
Any tape drives not supported by library managed encryption in that partition are not enabled for encryption,
and data written to non-supported media is not encrypted.
Data written to encryption-supported and encryption-capable media in library managed encryption-supported
tape drives will be encrypted unless data was previously written to the media in a non-encrypted format. In order
for data to be encrypted, the media must be blank or have been written to using library managed encryption at
the first write operation at the beginning of tape (BOT).
Configure the partition(s) as follows:
1 From the Web client, select Setup > Encryption > Partition Configuration.
A list of all your partitions displays, along with a drop-down list displaying the encryption method for each
partition.
2 If you want to change the encryption method for a partition, make sure that no tape drives in that partition
have cartridges loaded in them. If tape drives have cartridges loaded, you cannot change the encryption
method.
3 Select an encryption method from the drop-down list for each partition. (For tape drives that support
encryption, the default is Application Managed.) The Encryption Method applies to all encryption-
capable tape drives and media in that partition.
Encryption Method Description
Library Managed For use with EKM. Enables encryption support via a
connected Dell EKM key server for all encryption-capable
tape drives and media assigned to the partition.
Application Managed Not for use with EKM. Allows an external backup application
to provide encryption support to all encryption-capable tape
drives and media within the partition. The library will NOT
communicate with the Dell EKM server on this partition.
This is the default setting if you have encryption-capable tape
drives in the partition. This option should remain selected
unless you want Dell EKM to manage encryption.
NOTE:
If you want an application to manage encryption, you
must specifically configure the application to do so. The library
will not participate in performing this type of encryption.
None Disables encryption on the partition.