HP StoreEver MSL Tape Libraries - Manual (Page 39)

Combining keys from multiple key server tokens
You may want to combine the encryption keys from two or more key servers to read tapes encrypted
in multiple autoloaders or libraries that use the encryption kit, for example, when you install the
HP MSL Library Extender with two libraries that are using the encryption kit or combine the functions
of two or more autoloaders or libraries into a larger library.
To combine the keys from multiple key server tokens:
1.
Select the destination token for the encryption keys and set it aside. This token needs to have
enough remaining capacity for all of the keys that will be copied onto it. In most cases, this
will be a new token or one with only a few keys.
NOTE: The current encryption key is the one used to encrypt data when writing tapes. The
current encryption key from this token will remain the current encryption key after the keys are
combined. If this a new token, the current encryption key from the first set of keys put on the
token will be the current encryption key.
Figure 34 The first five keys were on the original token; keys 6 and 7 were added from another
token
2. Verify that no backup operations are in progress.
3. Log into the RMI and supply the PIN for the token in the autoloader or library.
•
MSL6480 — Log into the RMI as the security user, navigate to Configuration > Encryption
> USB — MSL Encryption Kit screen and then enter the PIN in the Pin Management section.
•
Autoloader and other libraries — Log into the RMI as the administrator user and enter
the PIN in the Configuration > Security screen.
4. For each of the tokens other than the destination token:
a.
Insert the token into the USB port on the back of the autoloader or library.
b. If the Number of Keys to Backup option is not visible or active, you must back up all keys
on the token. Once all of the keys are backed up, you will be able to select the number
of keys to back up.
c. In the Back up Token to File pane, enter a password which will be used to secure the data
file on the computer in both fields. The second one ensures that the password was typed
correctly.
d. Click Submit Token Backup File Password.
e. If the Number of Keys to Backup option is active, select the number of keys to copy onto
the new token. The highest numbered keys will be copied to the file. For example, if the
token contains seven keys and you select three, keys five, six, and seven will be copied.
f. Click Save. The RMI will prompt you for the location to save the file. Follow the instructions
in RMI.
5. Insert the destination token into the USB port of the autoloader or library.
Combining keys from multiple key server tokens 39