Page 3 - Crypto Key Management System; HP LTO4 Tape Drive
Sun Microsystems, Inc.www.sun.com Crypto Key Management System Version 2.0 HP LTO4 Tape Drive Technical Brief Part Number: 316196601June 2008 Revision: A
Page 5 - Contents
316196601 • Revision: A iii Contents Preface v Organization v Related Information v Additional Information vi 1. Introduction 1 Drive Tray 2 Specifications 3 Compatibility 5 Order Numbers 6 2. Dione Card 7 Firmware Requirements 7 Dione Card Components 8 Connecting to the Dione Card 9 KMS Operations ...
Page 7 - Preface; Organization
316196601 • Revision: A v Preface This technical brief is intended for Sun StorageTek TM representatives, customers, and anyone responsible for planning the installation of the Crypto Key Management System (KMS) encryption solution. Organization Related Information These publications contain the add...
Page 8 - Additional Information; Sun’s External Web Site
Preface vi KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Additional Information Sun Microsystems, Inc. (Sun) offers several methods to obtain additional information. Sun’s External Web Site Sun’s external Web site provides marketing, product, event, corporate, and service information...
Page 9 - Introduction
316196601 • Revision: A 1 C H A P T E R 1 Introduction Overview The Hewlett Packard (HP) LTO4 is the fourth-generation of Ultrium, Linear Tape-Open tape drives. This generation offers more capacity and increased performance than earlier versions of LTO tape drives. Encryption Capable The Hewlett Pac...
Page 10 - Drive Tray
Drive Tray 2 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Installing this tape drive in one of Sun StorageTek’s automated tape configurations offers customers with an even wider choice of tape-based storage solutions. ■ Server compatibility: Fibre Channel and SCSI models on popular ...
Page 11 - Specifications
316196601 • Revision: A Chapter 1 Introduction 3 Specifications Specifications TABLE 1-1 provides a comparison of tape drive specifications. TABLE 1-1 Tape Drive Specifications LTO2 LTO3 LTO4 Physical Specifications Height 8.25 cm (3.25 in.) 8.25 cm (3.25 in.) 8.25 cm (3.25 in.) Width 14.6 cm (5.75 ...
Page 13 - Compatibility
316196601 • Revision: A Chapter 1 Introduction 5 Specifications Compatibility HP LTO Ultrium 4 drives are specified to interchange with un-encrypted data cartridges from other tape drives that comply to the LTO U-28, U-316 and U-416 specifications: Future compatibility: In the future, HP LTO Ultrium...
Page 14 - Order Numbers
Order Numbers 6 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Order Numbers License Keys Configured End Items X-Options (Conversion Bills) Dione Card FIGURE 1-2 License Keys LTO4 Encryption Key Marketing Number Description Bundled X-HP-LTO4-EKEY-B One required per encryption enabled ...
Page 15 - Dione Card; Firmware Requirements
316196601 • Revision: A 7 C H A P T E R 2 Dione Card The Dione card—pronounced (D - O - nee)—is a custom design that provides an Ethernet interface for the HP LTO4 tape drive. With this interface, the HP LTO4 tape drive can: ■ Encrypt and decrypt data using the Sun StorageTek Crypto Key Management S...
Page 16 - Dione Card Components
Dione Card Components 8 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Dione Card Components The Dione card installs in the open area of the drive trays behind the tape drives. Library drive trays that support this card are the: ■ SL8500 ■ SL3000 ■ SL500 ■ L-Series Each drive tray has...
Page 17 - Connecting to the Dione Card
316196601 • Revision: A Chapter 2 Dione Card 9 Dione Card Components Connecting to the Dione Card FIGURE 2-2 shows two ways to connect to the Dione card: ■ Point-to-point using a crossover cable ■ Network using a switch or hub and standard (straight-through) Ethernet cables Note – The default IP add...
Page 18 - KMS Operations; Key Lifecycle
KMS Operations 10 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 KMS Operations When the tape drive is powered-on, the Dione card communicates to the drive over the serial port to take control of drive encryption and decryption. HP LTO4 tape drives have the capability of storing one (...
Page 20 - Media RFID Chips; Media Types
KMS Operations 12 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 At release, the functionality to set a key in a compromised state is not present. This is a low impact issue due to the system assigning unique encryption keys for each tape cartridge. It is rare that a compromised key s...
Page 22 - Removal and Replacement; Removal
Removal and Replacement 14 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Removal and Replacement Encryption-capable HP LTO 4 tape drives contain an Ethernet card, which is a field replaceable unit (FRU). Depending on the library, each drive tray contains the card in a different locat...
Page 23 - Replacement
316196601 • Revision: A Chapter 2 Dione Card 15 Removal and Replacement 3. Place the drive and drive tray on a suitable work surface. 4. Remove the two T9 screws from the top cover and remove the cover. 5. Remove the connectors from the HBD card. 6. Remove the four T10 screws that attach the drive t...
Page 25 - Virtual Operator Panel
316196601 • Revision: A 17 C H A P T E R 3 Virtual Operator Panel The Sun StorageTek Virtual Operator Panel (VOP) is a computer-based application that provides a graphical user interface (GUI) to these tape drives: ■ T10000A ■ T10000B ■ T9840D With the VOP at Version 1.0.12 and higher, support for t...
Page 26 - VOP Prerequisites
18 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 The VOP application uses an Ethernet connection to communicate with the tape drives, either: ■ Point-to-point, using a cross-over cable ■ Networked, using a switch and standard—straight—Ethernet cables This Ethernet interface provides ...
Page 27 - Using VOP
316196601 • Revision: A Chapter 3 Virtual Operator Panel 19 Using VOP Using VOP There are two versions of VOP: 1) Customer and 2) Service. Refer to the VOP documentation for information about how to download and install these applications. TABLE 3-1 is an example of these versions. For the initial c...
Page 28 - Start VOP
Using VOP 20 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Start VOP Important: ■ Remember, the Service Delivery Platform (SDP) does not support the LTO4 drives. You may need to make adjustments to the network addresses if mixing tape drives on the same KMA and/or SDP network (LAN 2)...
Page 31 - Diagnose Drive Tab; Run LED Diagnostic Test
316196601 • Revision: A Chapter 3 Virtual Operator Panel 23 Diagnose Drive Tab Diagnose Drive Tab The Dione card and the VOP Diagnose Drive tab allow you to perform limit tests, get logs for engineering review, and to load Dione card firmware. Run LED Diagnostic Test To run the LED diagnostic test: ...
Page 32 - Run Loopback Test
Diagnose Drive Tab 24 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Run Loopback Test To run the Loopback diagnostic test: 1. Click on Run Loopback Test. 2. Observe the display as the test starts and ends. FIGURE 3-8 Run LED Diag
Page 33 - Get Log
316196601 • Revision: A Chapter 3 Virtual Operator Panel 25 Diagnose Drive Tab Get Log If a Dione card or connection is consistently having problems, engineering may request you retrieve a log of events from the Dione card. 1. Click Get Log. 2. Create and select a location for the file. Once the fil...
Page 35 - Index
316196601 • Revision: A 27 Index B batch file , 19 C cartridge memory , 12 comparisons LTO tape drives , 3 media , 4 compatibility, media , 5 compliance regulations , 2 Configure Drive tab , 21 connecting to a Dione card , 9 conversion bills , 6 D Data Unit , 12 default IP address , 9, 20 Dione card...
Page 38 - SUNTM
SUN™ THE NETWORK IS THE COMPUTER ©2006 Sun Microsystems, Inc. All rights reserved. Sun, Sun Microsystems, and the Sun logo are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 USA...