Modify Encryption Method

Screen Element Description
Logical Library_a Encryption Settings
Encryption method Choose the method from the drop-down list. Valid methods are Application Managed Encryption (AME), System Managed Encryption (SME), and Libary Managed Encryption (LME). AME is standard for all Ultrium 4, 5, 6 and 7 drives in this library. SME and LME require an additional license key.
Note: If you do not have an installed encryption license key, you will not be able to choose SME or LME methods. If you attempt to choose either of these methods without an installed encryption key, an error message displays and the encryption method defaults to None.
Encryption server type Choose a server type from the drop-down list. Valid server types are EKM/TKLM/SKLM (default) or KMIP key manager. The KMIP key manager is only valid for LTO 5, 6, and 7 drives. Also, you can only have one encryption server type per library so all logical libraries must use the same server type. If you are switching the logical libraries to a different type, the current encryption partitions must have their encryption method set to "None" and the configuration saved. After setting all the current encryption partitions to method "None", you can change them back to LME and select the new key server type.
Encryption Policy Choose a policy from the drop-down list. Valid policies are Encrypt All (default), Internal Label - Selective Encryption, or Internal Label - Encrypt All.
Advanced Encryption Settings
Advanced encryption method Choose either No Advanced Setting (default) or Custom Method from the drop-down list. If you choose Custom Method, you must specify density and key path options.
Advanced encryption policy Choose one of the options from the drop-down list:
  • No Advanced Setting (default)
  • Don't Encrypt if No Policy
  • Encrypt if No Policy
  • Policy Required
  • Never Encrypt (Policy Override)
  • Always Encrypt (Policy Override)
  • Internal Label - Selective Encryption
  • Internal Label - Encrypt All
Encryption density Choose a method from the drop-down list. Valid methods are No Advanced Setting (default), Shows Encryption, or Masks Encryption.
Encryption key path Choose an encryption path from the drop-down list. Valid paths are Application (IBM), Application (T10), System, or Library.
EKM Server Settings
Primary address The primary address of the encryption server. The field can accept IPv4, IPv6, or a Host name and domain depending on the system configuration.
Primary TCP port number The primary port for the encryption server.
Secondary address The secondary address of the encryption server. The field can accept IPv4, IPv6, or a Host name and domain depending on the system configuration.
Secondary TCP port number The secondary port for the encryption server.
Enable SSL for Encryption Check this box if you want to allow the security feature SSL when using the Web User Interface.
Common Screen Elements
OK button Click this button to accept changes.
Cancel button Click this button to cancel the changes.