HP StoreEver MSL Tape Libraries - Manual (Page 12)

The Yellow token has been initialized with a name “Yellow” but does not have any keys.
Yellow token
The Green token has current key F, with decryption keys F, A, and E. Key A is the same key A on
the Blue token from a previous save/restore operation.
Green token
F = current key
E
A
Scenario 1
In this scenario, a backup file from the Blue token is restored to the Yellow token. Because the
Yellow token does not have any keys, after the restore operation the Yellow token has all of the
keys from the Blue token, with D as the current key.
Restoring to a token without keys is the only way for two tokens to have the same current key.
Yellow token (after restore)
D = current key
C
B
A
Scenario 2
In this scenario, a backup file from the Blue token is restored to the Green token. After the restore
operation, the Green token contains all of the keys from both tokens. It only has one key A, which
was on both tokens. It retains F as its current key.
Any tapes written with the Green token after the restore will be encrypted with a different key (F)
than tapes written with the Blue token installed (D).
Green token (after restore)
F = current key
E
D
C
B
A
Scenario 3
In this scenario, a backup file from the Green token (after the restore in Scenario 2) is restored to
the Blue token. After the restore operation, the both tokens have an identical set of keys, but do
not have the same current key used to encrypt new and formatted tapes. The only way to create
12 Features and overview