HP StoreEver MSL Tape Libraries - Manual (Page 26)

Figure 15 Inserting the key server token
Enter the PIN
When a key server token is inserted for the first time in any autoloader or library, the autoloader
or library will recognize it as a new token and display a dialog on the RMI requesting that you
enter a PIN. The new PIN must be between eight and 16 characters long and contain at least one
capitol letter, at least one lower case letter, and at least two digits. Follow the directions in the
dialog to enter your PIN.
NOTE: Some older versions of autoloader and MSL2024, MSL4048, and MSL8096 library
firmware versions limit the PIN length to 15 characters. For optimal interoperability limit the length
of the PIN to 15 characters or ensure that the most current firmware is installed on your devices.
Store a copy of the PIN in a secure location.
CAUTION: The key server token protects the encryption keys with a PIN. If you lose the PIN, you
will not be able to restore data from your encrypted tapes using that token. Neither you nor HP
can recover a lost PIN. Keep a copy of the PIN in a safe place.
Configure the encryption mode and features
From the Configuration > Security screen you can enter the name of the token, enable or disable
encryption for the autoloader or library, and enable the autoloader or library to automatically
generate a new key. If your library is configured in multiple logical libraries, you can enable or
disable encryption independently for each logical library containing an LTO-4 or later generation
tape drive. Only one encryption key is used at a time to write tape cartridges and the same
encryption key is used by all tape drives in the library.
NOTE: If your application appends data to existing tapes, the key originally used to write the
tape is used to append additional data to the tape; a key server token holding that key must be
installed in the autoloader or library.
To configure the encryption mode and features:
26 Installing and configuring the encryption kit