Just a reminder also, that "Encryption" on a 3584/3500 library is 
another Feature Code for the library - to be purchased.

David Longo

>>> Howard Coles <Howard.Coles AT ARDENTHEALTH DOT COM> 6/13/2011 2:51 PM >>>
Using a TKLM server you can point your Library to the IP address of the
server, and it will handle the keys, so that even your TSM DB backup
tape is encrypted.  
(as some have asked this as well):
You do have to tell the Library where the Encryption Key servers are,
and then modify the Logical library's Encryption policy.  We've had one
instance where we had to reconfigure the logical library after a
firmware update (to support LTO4s).

>From all I've seen the performance hit isn't noticeable, I think the
compression affects it more, and that's very minimal if any.

As far as whether its needed or not, the answer is yes, as Wanda said,
if you are in our case and have regulatory requirements.  Even without
them it's a good idea.  Gives the execs a warm and fuzzy about trade
secrets, customer data, etc. etc.  We now have it running at three
sites, and so far so good.  You just have to have hardware drives that
support that kind of encryption.


See Ya'
Howard Coles Jr., RHCE, CNE, CDE
John 3:16!

-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Mehdi Salehi
Sent: Sunday, June 12, 2011 11:13 PM
To: ADSM-L AT VM.MARIST DOT EDU 
Subject: Re: [ADSM-L] tape encryption in TSM environment

How much performance degradation would there if encryption is on?
Although
it is the duty of drive itself (I suppose), it might have negative
influence
on backup and even restore performance?



#####################################
This message is for the named person's use only.  It may 
contain private, proprietary, or legally privileged information.  
No privilege is waived or lost by any mistransmission.  If you 
receive this message in error, please immediately delete it and 
all copies of it from your system, destroy any hard copies of it, 
and notify the sender.  You must not, directly or indirectly, use, 
disclose, distribute, print, or copy any part of this message if you 
are not the intended recipient.  Health First reserves the right to 
monitor all e-mail communications through its networks.  Any views 
or opinions expressed in this message are solely those of the 
individual sender, except (1) where the message states such views 
or opinions are on behalf of a particular entity;  and (2) the sender 
is authorized by the entity to give such views or opinions.
#####################################