Chapter 3 Configuring Your LibraryConfiguring Quantum Encryption Key Manager (Q-EKM)Scalar i500 User’s Guide 84Configuring Quantum Encryption Key Manager (Q-EKM)Quantum Encryption Key Manager (Q-EKM) is a centralized keymanager application that manages the encryption keys used as part of theLTO-4 drive-based data encryption process. Library-managed encryptionis an optional, licensed feature that must be enabled from the Scalar i500library in order to begin encrypting data using the LTO-4 tape driveencryption capabilities.For more information about Q-EKM and its license, see QuantumEncryption Key Manager (Q-EKM) on page 31.Step 1: UpgradeFirmware 3 Upgrade your library and tape drive firmware to the latest releasedversions.Step 2: Install the LicenseKey on the Library 3 If your license key is not already installed on the library, install it now(see Applying a License Key on page 83).Step 3: Install Q-EKM ona Server or Servers 3 You must supply a server or servers on which to install Q-EKM.Quantum Field Services will schedule an appointment to install thesoftware and configure your servers.Note: Since the Scalar i500 library needs to communicate with the Q-EKM server in real time when reading from or writing to anencryption-enabled drive, it is strongly recommended that youuse both a primary and secondary Q-EKM server. This way, ifthe primary server is unavailable at the time the library needsencryption information, the secondary server can handle therequest. The Scalar i500 library allows you to configure up totwo Q-EKM servers for redundancy/failover purposes.
