Prerequisites for Library Managed Encryption:v SAS and Fibre Channel LTO Ultrium 4 Tape Drive (Full Height or Half Height)Note: Fibre Channel is full height drive only.v Ultrium 4 Tape Cartridgev Library firmware level 5.80 or higherv Drive firmware level 77BE or higherv Dell Encryption Key Manager applicationSetting a Drive’s Method of Encryption1. Click Encryption (Configure Library → Encryption) in the left navigation pane.2. On the Encryption screen, enter the Feature Activation Key to make availablethe library managed encryption options.3. Click Activate to save the key and expand the screen for additional encryptionsettings.4. Select Enable SSL for EKM to enable Secure Sockets Layer for the DellEncryption Key Manager application.5. Select an Encryption method for each logical library.v Without an encryption license key, select None or Application ManagedEncryption.v With an encryption license key, select Library Managed Encryption.6. Select an Encryption policy for each logical library.v Encrypt All: This is the default policy. It encrypts all cartridges using thedefault data keys specified in the EKM. This setting applies to all drives in aTL2000/TL4000 logical library.v Internal Label - Selective Encryption: Check your tape backup softwareapplication documentation to see if this feature is supported.v Internal Label - Encrypt All: Check your tape backup software applicationdocumentation to see if this feature is supported.7. A primary and secondary EKM server can be set for each logical library. Eachpartition has its own Encryption and EKM settings. Maintaining primary andsecondary EKM servers is desired for maximum availability of encrypteda77ug199Figure 4-24. Feature Activation Key screena77ug192Figure 4-25. Configure Library: Encryption Activation screen4-22 Dell PowerVault TL2000 Tape Library and TL4000 Tape Library User's Guide
