Results 1 to 2 of 2
  1. #1
    Member
    Join Date
    Nov 2004
    Location
    michigan
    Posts
    126
    Thanks
    9
    Thanked 0 Times in 0 Posts

    Default TKLM encryption questions

    Hello to everyone here in the Forum,

    I have a new customer who is currently using server side encryption with a TS3500 single partition library.

    They have purchased TKLM, ALMS, and the transparent LTO encryption feature codes. At this time there are lto2 and lto4 drives in the partition. the majority of the lto2 drives are to be replaced with new lto4 drives but they intend to keep 2 lto2 drives for use to read those tapes and to encrypt them to lto4 in the future.

    This is the 1st customer of mine to choose the TKLM software or any encryption in general and I don't have any experience with it. I have read the TKLM admin and install guides but still not sure about all of this.

    My questions are:

    1. How does the TKLM software know what drives to encrypt, does it need to be installed on a server with SAN mapping to the drives or does it communicate via the node card on the ts3500?

    2. What is transparent encryption? Is it required for TKLM or is it used just to encrypt at the drive level using the meta data being written?

    3. Is ALMS required for TKLM?

    4. Do I need to create a new partition for use by TKLM so that the existing tapes encrypted by the server side encryption can been read and then written by TKLM on the 2nd partition?

    5. What has been your experience with TKLM? is a pain in the you know what to administer?

    I'm sure I will have many more questions to follow regarding this encryption stuff and I would really appreciate any assistance I can get from the forum.

    Thanks in advance

  2. #2
    Senior Member Trident's Avatar
    Join Date
    Apr 2007
    Location
    Oslo, Norway
    Posts
    272
    Thanks
    2
    Thanked 19 Times in 19 Posts

    Default

    1. How does the TKLM software know what drives to encrypt, does it need to be installed on a server with SAN mapping to the drives or does it communicate via the node card on the ts3500?
    You need to assign the drives (dedicated ones) tol a library. The TKLM will read of the serial numbers from the ts3500 over tcp/ip and issue encryption keys based on a volume label.

    2. What is transparent encryption? Is it required for TKLM or is it used just to encrypt at the drive level using the meta data being written?
    That is when data is encrypted by the LTO drive. This is a feature that needs to be enabled on your TS3500.

    3. Is ALMS required for TKLM?
    Not sure. I have it, and the encryption. Works like a charm

    4. Do I need to create a new partition for use by TKLM so that the existing tapes encrypted by the server side encryption can been read and then written by TKLM on the 2nd partition?
    Start from scratch. Create a new virtual library, and put the dedicated drives there. Then assign new tapes to that library

    5. What has been your experience with TKLM? is a pain in the you know what to administer?
    Pain to configure, works fine.

    I'm sure I will have many more questions to follow regarding this encryption stuff and I would really appreciate any assistance I can get from the forum.

    Thanks in advance
    -= Trident =-

  3. The Following User Says Thank You to Trident For This Useful Post:

    rvillano (10-30-2012)

Similar Threads

  1. CLI backup for TKLM
    By JonRoenick in forum Backup / Archive Discussion
    Replies: 0
    Last Post: 10-25-2011, 02:50 PM
  2. TKLM and selective encryption
    By khurram in forum TSM Server
    Replies: 3
    Last Post: 11-04-2010, 11:24 AM
  3. tklm encription
    By nancy in forum TSM Server
    Replies: 2
    Last Post: 09-23-2010, 01:44 AM
  4. Questions about Encryption at Client Level
    By soxfan in forum TSM Client
    Replies: 2
    Last Post: 10-21-2009, 01:13 PM
  5. Encryption questions for EXPORT NODE
    By bvillega in forum TSM Security and Regulatory Compliance
    Replies: 3
    Last Post: 11-30-2007, 01:25 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •