Chapter 8: Encryption Key ManagementUsing SKM316 Quantum Scalar i6000 User’s GuideLTO-4, LTO-5 or LTO-6 FC drives are encryption-capable, but to use theQ-EKM software application, you must purchase an Encryption KeyManagement license and provide a server or servers on which to installQ-EKM. Q-EKM does not currently support encryption on other tapedrive types or manufacturer brands, even if they are assigned to apartition selected for encryption.Note: You must be running Q-EKM version 2.0 (or higher) to supportIBM LTO-5 or LTO-6 tape drives.The encryption keys pass through the library, so that encryption is“transparent” to the applications. If you purchase Q-EKM, Quantum'sService department will schedule an appointment to install theapplication onto your server(s).Using SKMIf you purchase SKM, you will receive the software application, twoservers (optional beginning with SKM 1.1), and installation andconfiguration instructions. This chapter describes how to configure yourencryption key management (EKM) solution (Q-EKM or SKM) on thelibrary.SKM Management Sharing Encrypted Tape CartridgesIf you are using SKM, you can use the library to facilitate sharingencrypted tapes with other companies and individuals who also useSKM for managing encryption keys.Each SKM server provides a unique encryption key for each tapecartridge that is encrypted. To read an encrypted tape in a library that isattached to a SKM server that is different than the one that originallyprovided the encryption key, the encryption key from the originating(i.e., source) SKM server needs to be shared with the receiving (i.e.,destination) SKM server.The key (or list of keys, if there is more than one tape) is exported fromthe source SKM server to a file, which is sent to the destination
