I have the EKM set up doing library managed encryption.  It works well
once it is set up and takes any TSM dependencies out of the picture.  It
also allows me to push off most of the encryption maintenance to our
security group.
IBM's encryption expertise for open systems has been underwhelming.
I am using EKM on AIX.  It should work on Windows if you get the correct
java and configurations.


Neil Strand
Storage Engineer - Legg Mason
Baltimore, MD.
(410) 580-7491
Whatever you can do or believe you can, begin it.
Boldness has genius, power and magic.


-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
William Boyer
Sent: Wednesday, December 05, 2007 9:56 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: [ADSM-L] Anyone doing TSM Encryption on TS1120's in a 3494 tape
library??

Looking for help...TSM 5.4.1.1 on WIndows2003 running the latest IBM
tape driver. The library and drives are at the latest firmware as of
about 2-weeks ago. The drives have application encryption enabled. This
was done through the CE interface on the back of the drives. A query of
the drive VPD data from the library console shows application encryption
is enabled.

When we enable encryption in TSM  UPD DEVC 3592 DRIVEENCRYPTION=ON, we
get ANR8985E message when mounting scratch tapes. Using the NTUTIL
command and specifying that you want 59: Get encryption State it shows:

Encryption capable: True
Encryption method: None (0)
Encryption state: Off (0)

We rebooted the TSM server after making the encryption changes to the
drives.

Could really use some help on this....calling IBM and trying to figure
out where to start ....is it a TSM issue...driver....hardware
configuraiton......???

Bill Boyer
>Select * from USERS where CLUE>0
0 rows returned

IMPORTANT:  E-mail sent through the Internet is not secure. Legg Mason 
therefore recommends that you do not send any confidential or sensitive 
information to us via electronic mail, including social security numbers, 
account numbers, or personal identification numbers. Delivery, and or timely 
delivery of Internet mail is not guaranteed. Legg Mason therefore recommends 
that you do not send time sensitive 
or action-oriented messages to us via electronic mail.

This message is intended for the addressee only and may contain privileged or 
confidential information. Unless you are the intended recipient, you may not 
use, copy or disclose to anyone any information contained in this message. If 
you have received this message in error, please notify the author by replying 
to this message and then kindly delete the message. Thank you.