Dell PowerVault TL4000 Manuals

Dell Encryption Key Manager and Library Managed Encryption Best Practices and FAQ

Dell™PowerVault™ Encryption Key Manager Quick Start Guide for LTO Ultrium 4 and LTO Ultrium 5 This guide gets you started with a basic configuration for encryption on LTO Gen 4 and LTO Gen 5 tape drives. Visit http://support.dell.com to download the latest library and drive firmware prior to installing and configuring the Dell PowerVault Encryption Key Manager to ensure that there are no issues. The Dell PowerVault Encryption Key Manager (referred to as the Encryption Key Manager from this point forward) is a Java™software program that assists encryption-enabled tape drives in generating, protecting, storing, and maintaining encryption keys. These keys are used to encrypt information being written to, and decrypt information being read from, LTO tape media. The Encryption Key Manager operates on Linux® and Windows®, and is designed to be a shared resource deployed in several locations within an enterprise. This document shows how quickly you can install and set up the Encryption Key Manager using the graphical user interface (GUI) or using commands. This document shows how to use the JCEKS keystore type because the JCEKS keystore type is the easiest and most transportable of the keystores supported. If you want more information about a particular step or another supported keystore type, see the Dell Encryption Key Manager User's Guide, which can be found at: http://support.dell.com or on the Dell Encryption Key Manager media provided with your product. Note: IMPORTANT Encryption Key Manager HOST SERVER CONFIGURATION INFORMATION: It is recommended that machines hosting the Dell Encryption Key Manager program use ECC memory in order to minimize the risk of data loss. The Encryption Key Manager performs the function of requesting the generation of encryption keys and passing those keys to the LTO-4 and LTO-5 tape drives. The key material, in wrapped (encrypted form) resides in system memory during processing by the Encryption Key Manager. Note that the key material must be transferred without error to the appropriate tape drive so that data written on a cartridge may be recovered (decrypted). If for some reason key material is corrupted due to a bit error in system memory, and that key material is used to write data to a cartridge, then the data written to that cartridge will not be recoverable (i.e. decrypted at a later date). There are safeguards in place to make sure that such data errors do not occur. However, if the machine hosting the Encryption Key Manager is not using Error Correction Code (ECC) memory there remains a possibility that the key material may become corrupted while in system memory and the corruption could then cause data loss. The chance of this occurrence is small, but it is always recommended that machines hosting critical applications (like the Encryption Key Manager) use ECC memory. Do This First: Install Encryption Key Manager Software 1. Insert your Dell Encryption Key Manager CD. If installation does not start automatically in Windows, navigate to the CD and double click on Install_Windows.bat. For Linux, installation does not start automatically. Go to the CD root directory and enter Install_Linux.sh. An end user license agreement is displayed. You must acknowledge this license agreement in order for installation to continue. The installation copies all contents (documentation, GUI files, and configuration property files) appropriate to your operating system from the CD to your hard drive. During installation, your system is checked for the correct IBM Java Runtime Environment. If not found, it is automatically installed. When installation is complete, the Graphical User Interface (GUI) is started.

Dell™PowerVault™Encryption Key Manager User's Guide

Dell PowerVault™ TL4000/TL2000 Failover Guide 1 | P a g e 1 2 / 3 1 / 0 9   v e r s i o n   2 . 0 Always refer to www.dell.com\support for latest documentation and updates Dell PowerVault™ TL4000/TL2000 Failover Configuration Guide This document describes the failover feature, outlines the supported failover configurations for the Dell PowerVault™ TL4000 and TL2000 products and provides instructions for configuring the library, drives, and host server for failover. Please note the supported configurations are closely related to the LTO drive generation and form factor installed in the tape library. Please refer Dell PowerVault™ supported Failover configuration matrix table 1 and 2 Contents What is Failover?...........................................................................................................................................2 Dell PowerVault™ TL2000/TL4000 Configuration Support matrix ...............................................................2 Basic Environment Configuration Requirements..........................................................................................3 Failover Support Configuration Details.........................................................................................................4 Configuration Samples..................................................................................................................................4 LT05 Specific Requirements For Failover Support......................................................................................11 Heterogeneous validated configurations ...................................................................................................13 Configuring your Environment to Support Failover....................................................................................15 Dell PowerVault™ TL2000/TL4000 Library Failover Setup..........................................................................16 Take the Library Offline...............................................................................................................................16 Upgrade Library and Drive Firmware to the Latest Version.......................................................................16 Backup Host Control Path Failover Setup...................................................................................................18 Backup Application Setup and Support ......................................................................................................18 Failover Configuration Verification.............................................................................................................20 Failover Test Procedure ..............................................................................................................................20 Failover Performance considerations.........................................................................................................21 Appendix A ‐ Recovering from a failover event..........................................................................................22

w w w. d e l l . c o m | s u p p o r t . d e l l . c o m Dell™ PowerVault™ TL2000/TL4000 Important Information

Dell™ PowerVault™ TL2000/TL4000 Library-Managed Encryption Enablement Instructions NOTE: The library must be offline from any user and all media must be removed from the drives before license keys are installed or any configuration modifications are made. Please refer to the Dell PowerVault TL2000/TL4000 User's Guide for instructions to take the library offline and to eject media from the drives. NOTICE: To prevent possible data loss due to an EKM server failure, Dell recommends the use of a primary and secondary EKM server. This configuration provides redundancy in the event the primary EKM server is down or unavailable. Please refer to Chapter 2 (Multiple Key Managers for Redundancy) of the Dell Encryption Key Manager User's Guide and to the Configure Library Encryption section (Chapter 4.0) of the Dell PowerVault TL2000/TL4000 User's Guide for information on configuring a primary and secondary EKM for your library. NOTE: If the backup job fails due to an EKM server failure, the job will recover if connectivity is restored to the EKM server prior to expiration of the timeout set in the tape backup software application Enabling library-managed encryption on your library is a 6 step process: 1 Upgrade the library and drive firmware to the latest versions. The firmware can be found at http://support.dell.com. 2 Enable library-managed encryption on the library via the license key if not already licensed. Please refer to Figure 4-23 in the Dell PowerVault TL2000/TL4000 User's Guide for activation instructions. The User's Guide can be found at http://support.dell.com. If you purchased library-managed encryption at the time you purchased your library, a hard copy of the license key is provided with your library as a backup. If there are any issues with the license key for library-managed encryption purchased with the library, visit http://www.dell.com/tapeautomation to obtain your license key. You will need the library serial number and worldwide node name to obtain the license key. Refer to the following tables in the May 2010

Page 1 Dell™ Model TL2000/TL4000 1GB iSCSI to SAS bridge iSCSI initiators Table of Contents Install the iSCSI Initiator Software (iSCSI-attached Host Servers Only).......................................3 Installing the iSCSI Initiator on a Windows Host Server............................................................3 Installing the iSCSI Initiator on a Linux Host Server..................................................................3 Installing the iSCSI initiator during RHEL 4 installation .........................................................3 Installing the iSCSI initiator after RHEL 4 installation: ...........................................................3 Installing the iSCSI Initiator on a RHEL 5 System.....................................................................4 Installing the iSCSI initiator during RHEL 5 installation: ........................................................4 Installing the iSCSI initiator after RHEL 5 installation: ...........................................................4 Installing the iSCSI initiator after RHEL 5 installation via the command line: ........................4 Installing the iSCSI Initiator on a SLES 9 System .....................................................................4 Installing the iSCSI initiator during SLES 9 installation:.........................................................4 Installing the iSCSI initiator after SLES 9 installation:............................................................4 Installing the iSCSI Initiator on a SLES 10 SP1 System ...........................................................5 Install the iSCSI initiator during SLES 10 SP1 installation:....................................................5 Installing the iSCSI initiator after SLES 10 SP1 installation:..................................................5 Perform Target Discovery from the iSCSI Initiator........................................................................5 Using Windows Server 2003 or Windows Server 2008 GUI version.........................................5 Using Windows Server 2008 Core Version ...............................................................................6 Using Linux Server....................................................................................................................6 Using RHEL 5 or SLES 10 SP1 ................................................................................................6 Configure CHAP Authentication on the Host Server (optional).....................................................7 Using Windows Server 2003 or Windows Server 2008 GUI version.........................................7 Using Windows Server 2008 Core Version ...............................................................................7 Using Linux Server....................................................................................................................8 If you are using RHEL 5 or SLES 10 SP1 .................................................................................8 If you are using SLES10 SP1 via the GUI.................................................................................8

Dell™ PowerVault™ TL2000/TL4000 Tape Library SCSI Reference

Dell TM PowerVault TM TL2000/TL4000 Tape Library 3.90 Firmware Release Notes June 2007 These release notes document the A01 TL2000/TL4000 product feature updates and known issues These release notes document the 3.90 release of the Dell PowerVault TL2000/TL4000 Tape Library firmware. These release notes provide information on new functionality, tape drive compatibility, and the current known issues. This document is organized in following sections: New Features Component Firmware Problems Resolved Known Issues Contacting Dell *************************************************************************************************************** New Features Introduction of LTO3 Half Height SAS drive support Introduction of LTO4 SAS and FC drive support Ability to convert the unit I/O and cleaning slots into storage slots Support for SNMP *************************************************************************************************************** Component Firmware The following component firmware has been qualified with the 3.90 firmware. Drives: o IBM LTO-3 (Fibre): 73P5 o IBM LTO-3 (SCSI): 73P5 o IBM LTO-3 (Half Height SAS): 73P7 o IBM LTO-4 (SAS): 74H6 o IBM LTO-4 (Fibre): 74H6 *************************************************************************************************************** Problems Resolved PowerVault TL2000/TL4000 2nd generation support has a service tag field implemented in the RMU (Remote Management Unit)