Dell PowerVault ML6000 User Manual

Also see for PowerVault TL2000: Getting started guide Faq Quick start guide User guide Release notes

Contents

Two-Server ConfigurationsA two-server configuration is recommended. This Encryption Key Managerconfiguration will automatically failover to the secondary key manager should theprimary be inaccessible for any reason.Note: When different Encryption Key Manager servers are used to handle requestsfrom the same set of tape drives, the information in the associated keystoresMUST be identical. This is required so that regardless which key managerserver is contacted, the necessary information is available to supportrequests from the tape drives.Identical configurations: In an environment with two Encryption Key Managerservers having identical configurations, such as those shown in Figure 2-5,processing will automatically failover to the secondary key manager should theprimary go down. In such a configuration it is essential that the two key managerservers be synchronized. Updates to the configuration file and drive table of onekey manager server can be duplicated on the other automatically using the synccommand, but updates to one keystore must be copied to the other using methodsspecific to the keystore(s) being used. The keystores and key groups XML file mustbe copied manually. Refer to “Synchronizing Data Between Two Key ManagerServers” on page 4-2 for more information.Separate configurations: Two Encryption Key Manager servers may share acommon keystore and drive table yet have two different configuration files andtwo different sets of key groups defined in their XML files. The only requirement isthat the keys used to serve the common tape drives must be the same for eachserver. This allows each key manager server to have its own set of properties. Inthis type of configuration, shown in Figure 2-6 on page 2-9, only the drive tableshould be synchronized between key manager servers. (Refer to “SynchronizingData Between Two Key Manager Servers” on page 4-2 for more information.) Besure to specify sync.type = drivetab (do not specify config or all) to prevent theconfiguration files from being overwritten.Note: There is no way to partially share the configuration between servers.====Key StoreDrive TableConfig FileKey GroupsKey StoreDrive TableConfig FileKey GroupsTape LibraryATape LibraryBTape LibraryCa14m0254PrimaryEncryptionKey ManagerSecondaryEncryptionKey ManagerFigure 2-5. Two Servers with Shared Configurations2-8 Dell Encryption Key Mgr User's Guide||||