18.08.2013 Views

ClearPath OS 2200 Series Release 13.2 Software Planning and ...

ClearPath OS 2200 Series Release 13.2 Software Planning and ...

ClearPath OS 2200 Series Release 13.2 Software Planning and ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Tape <strong>and</strong> DVD<br />

An encrypting tape device can also read unencrypted cartridges, but you cannot write to<br />

an unencrypted cartridge unless you are at the beginning of tape (load point) <strong>and</strong> the<br />

cartridge would become encrypted. A tape cartridge currently cannot contain a mixture<br />

of encrypted data <strong>and</strong> unencrypted data; either the entire cartridge is encrypted or the<br />

entire cartridge is not encrypted.<br />

Tape Drives Supporting Encryption<br />

Encryption is fully supported on the following:<br />

• Sun/StorageTek T10000A<br />

• Sun/StorageTek T9840D<br />

• Sun/StorageTek LTO4-HP<br />

Restrictions<br />

Since the tape drive encryption process is totally transparent to the Operating System it<br />

is recommended that all drives be configured for encryption or all drives configured for<br />

no encryption. This release of encryption does not include any encryption subfield(s) on<br />

ECL or through program interfaces (ERs <strong>and</strong> CALLs). Future <strong>ClearPath</strong> releases will<br />

include enhancements to st<strong>and</strong>ard ECL statements to include encryption specifications.<br />

Encryption is not supported on the DSI LTO4-HP drive at this time.<br />

Operator Messages<br />

There are several I/O error messages that may be displayed on the operator<br />

console. These error messages can be found in the System Console Messages<br />

Reference Manual. The three new messages will be displayed for these events:<br />

• If an encrypted tape cartridge is inserted into a drive that does not have the<br />

encryption feature, the Operating System will prevent inadvertent overwrite of the<br />

encrypted cartridge <strong>and</strong> the operator will be notified.<br />

• If an unencrypted cartridge is mounted on a drive that has encryption enabled, you<br />

will not be able to append to that cartridge <strong>and</strong> the operator will be notified.<br />

• If an encrypted cartridge is mounted on an encryption enabled drive but the KMS<br />

system does not have the correct decryption key, you will not be able to read or<br />

write the tape <strong>and</strong> the operator will be notified.<br />

Related Documentation – Sun/StorageTek Crypto Key Management<br />

System 2.0<br />

• KMS 2.0 Systems Assurance Guide<br />

• KMS 2.0 Installation <strong>and</strong> Service Manual<br />

• KMS 2.0 Administration Guide<br />

• KMS 2.0 Engineer White Papers<br />

These documents can be accessed from the Sun Microsystems Web site.<br />

7831 0349–043 4–13

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!