ADSM-L

Re: [ADSM-L] Enabling Encryption in TS3500/E06 Drives

2013-09-03 12:04:08
Subject: Re: [ADSM-L] Enabling Encryption in TS3500/E06 Drives
From: Zoltan Forray <zforray AT VCU DOT EDU>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Tue, 3 Sep 2013 12:01:38 -0400
Sorry - I should have mentioned this is Redhat Linux


On Tue, Sep 3, 2013 at 11:42 AM, Billaudeau, Pierre
<P.Billaudeau AT saq.qc DOT ca>wrote:

> Hi Zoltan,
>         Is the drive encryption enabled at the OS level. On E05 drives, I
> had to update our AIX server drive definition:
> chdev  -l 'rmt6' -a wrt_encryption='on'
>         I did not have to change anything to our new E07 drive, I guess
> they were set OK.
>
> Pierre Billaudeau
> SAQ
> Montreal
>
> -----Message d'origine-----
> De : ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] De la part 
> de
> Zoltan Forray
> Envoyé : 3 septembre 2013 11:15
> À : ADSM-L AT VM.MARIST DOT EDU
> Objet : Re: [ADSM-L] Enabling Encryption in TS3500/E06 Drives
>
> Well, contrary to the response I received about this being as simple as
> changing the devclass value, I can not get encryption to work.
>
> I changed the devclass to  DRIVEENCRYPTION=ON and the first attempt to
> write a new tape fails with:
>
> 9/3/2013 9:59:03 AM ANR8985E The drive 7876475
> (/dev/lin_tape/by-serial/000007876475) in library TS3500-COPY is using an
> encryption method that is incompatible with the current server settings.
>
> So, I figured I would check the hardware settings of the TS1130 -E06
> drives.  They were all set to NO ENCRYPTION.  I changed this to APPLICATION
> and figured that would take care of it. No such luck.  Same errors.
>
> Tried resetting/cycling the drives - still nothing.
>
> Tried taking all drives and paths offline, figuring this might
> reset/retrieve the new drive setting - still nothing - same errors.
>
> Is there some library (TS3500) setting that may be blocking this?
>
> So, what I am missing?
>
>
>
>
> On Tue, Aug 20, 2013 at 12:34 PM, Zoltan Forray <zforray AT vcu DOT edu> 
> wrote:
>
> > Well, the saga is coming to a conclusion and I am going to active
> > encryption of offsite tapes, via AME/TSM.
> >
> > Is there anything more I need to do besides update the DEVCLASS to
> > DRIVEENCRYPTION=ALLOW on all of my TSM servers?
> >
> > When I check the drive details via the TS3500 interface, is says
> > encryption is disabled?  Do I need to go to each drive and enable it?
> >
> > --
> > *Zoltan Forray*
> > TSM Software & Hardware Administrator
> > Virginia Commonwealth University
> > UCC/Office of Technology Services
> > zforray AT vcu DOT edu - 804-828-4807
> > Don't be a phishing victim - VCU and other reputable organizations
> > will never use email to request that you reply with your password,
> > social security number or confidential personal information. For more
> > details visit http://infosecurity.vcu.edu/phishing.html
> >
>
>
>
> --
> *Zoltan Forray*
> TSM Software & Hardware Administrator
> Virginia Commonwealth University
> UCC/Office of Technology Services
> zforray AT vcu DOT edu - 804-828-4807
> Don't be a phishing victim - VCU and other reputable organizations will
> never use email to request that you reply with your password, social
> security number or confidential personal information. For more details
> visit http://infosecurity.vcu.edu/phishing.html
>
> ------------------
>
>
> Information confidentielle : Le présent message, ainsi que tout fichier
> qui y est joint, est envoyé à l'intention exclusive de son ou de ses
> destinataires; il est de nature confidentielle et peut constituer une
> information privilégiée. Nous avertissons toute personne autre que le
> destinataire prévu que tout examen, réacheminement, impression, copie,
> distribution ou autre utilisation de ce message et de tout fichier qui y
> est joint est strictement interdit. Si vous n'êtes pas le destinataire
> prévu, veuillez en aviser immédiatement l'expéditeur par retour de courriel
> et supprimer ce message et tout document joint de votre système. Merci.
>



-- 
*Zoltan Forray*
TSM Software & Hardware Administrator
Virginia Commonwealth University
UCC/Office of Technology Services
zforray AT vcu DOT edu - 804-828-4807
Don't be a phishing victim - VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information. For more details
visit http://infosecurity.vcu.edu/phishing.html

<Prev in Thread] Current Thread [Next in Thread>