Gebruiksaanwijzing /service van het product HP LTO4 van de fabrikant Sun Microsystems
Ga naar pagina of 38
Sun StorageTek TM Crypto Key Management System HP LTO4 Encryption-Capable Tape Drives Technical Brief Part Number: 316196601 Revision: A.
.
Sun Microsystems, Inc. www .sun.com Cr ypto K e y Management System V ersion 2.0 HP L T O4 T ape Driv e T echnical Br ief P art Number : 316196601 June 2008 Revision: A.
Copyright © 2008 Su n Microsyste ms, Inc., 4150 Network Cir cle, Santa Clara , California 95 054, U.S.A. All ri ghts rese rved. Sun Microsyste ms, Inc. has intellectual pr operty rights relating to technology embodied in th e product that is described in thi s document.
316196601 • Revision: A iii Contents Preface v Organization v Related Information v Additional Information vi 1. Introduction 1 Drive Tray 2 Specifications 3 Compatibility 5 Order Numbers 6 2.
iv KMS: LTO4 Technical Brief • June 20 08 Revision: A • 316196601 Using VOP 19 Start VOP 20 Diagnose Drive Tab 23 Run LED Diagno stic T est 23 Run Loopback T est 24 Get Log 25 Load Firmware 25.
316196601 • Revision: A v Pr eface This technical brief is intended for Sun StorageT ek TM r epresentatives, customers, and anyone r esponsible for planning the installation of the Cr ypto Key Management System (KMS ) encryption solution.
Preface vi KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Additional Information Sun Microsystems, Inc. (Sun) of fers se veral methods to obtain additional information. Sun’s External W eb Site Sun’s external W eb site pr ovides marketing, product, event, cor porate, and service information.
316196601 • Revision: A 1 CHAPTER 1 Intr oduction Overview The Hewlett Packard (HP) L TO4 is the fourth-generatio n of Ultrium, Linear T ape-Open tape drives. This ge neration offe rs more capac ity and incr eased performance than e arlier versions of L TO tape drives.
Drive Tray 2 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 Installing this tape drive in one of Sun St orageT ek ’s automated tape configurations offe rs customers wi th an even wider ch oice of tape-based storage solutions.
316196601 • Revision: A Chapter 1 Introduction 3 Specific ations Specifications T A BLE 1- 1 provides a comparison of tape drive specifications. T ABLE 1-1 T ape Drive Specifications LT O 2 LT O 3 LT O 4 Physical Specifications Height 8.25 cm (3.25 in.
Specifications 4 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 TA B L E 1-2 provides a comparison of media specifications. T A BLE 1-3 lists the reliabilit y specifications.
316196601 • Revision: A Chapter 1 Introduction 5 Specific ations Compatibility HP L TO Ultrium 4 drives are specified to inter change with un-encrypted data c a r t r i d g es f r o m o t h er t a p.
Order Numbers 6 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 Or der Numbers License Keys Configured E nd Items X-Options (Conversion Bills) Dione Card FIGURE 1-2 License Ke ys L T O 4 Encryp tion Key Marketing Number Description Bundled X-HP-L TO4-EKEY - B One r equir ed per encrypti on enabled dri ve.
316196601 • Revision: A 7 CHAPTER 2 Dione Car d The Dione card—pr onounced (D - O - nee)—i s a custom d esign that provides an Ethernet interface fo r the HP L TO4 tape dr ive. W ith this inte rface, the HP L TO4 tape drive can: ■ Encrypt and decrypt data using the Su n StorageT ek Crypto Key Management System (KMS), V ersion 2.
Dione Card Components 8 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 Dione Car d Components The Dione card installs in the open ar ea of the drive trays behind the tape drives.
316196601 • Revision: A Chapter 2 Dione Card 9 Dione Card Components Connecting to the Dione Car d FIGURE 2-2 shows two ways to conn ect to the Dione card: ■ Point-to-point usin g a crossover cable ■ Network using a switch or hub and standa rd (straight-through) Ethernet cables Note – The default I P addre ss of the Dione car d is 10.
KMS Operations 10 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 KMS Operations When the tape drive is powered-on, th e Dione card co mmunicates to the dr ive o v e r t h e s er i a l p o r t t o t a k e c o n t r o l of drive encryption and decryption.
316196601 • Revision: A Chapter 2 Dione Card 11 KMS Operations A potential issue: Th a t L TO 4 dr i v e fi r m w are w i l l n o t re qu e s t a write key in the following scenario: Read, Space, W rite-Filemark, W rite. The drive will use the same key obtained for the Read command to encrypt the data pr ovided for the W rite command.
KMS Operations 12 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 At release, the functionality to set a ke y in a compr omised state is not present. This is a low impact issu e due to the syst em assi gning unique encryption keys for e a c h t a p e c a r t r i d g e .
316196601 • Revision: A Chapter 2 Dione Card 13 KMS Operations FIGURE 2-4 prov ides an example of a KMS Manager display sc reen using the elements from and HP L TO4 drive. FIGURE 2-4 K M S M a n a g e r D a t a U n i t L i s t 1. Data Unit ID (data cartridge) 2.
Removal and Replacemen t 14 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Removal and Replacement Encryption-capable HP L TO 4 tape drives contain an Ethernet card, which i s a field repla ceable unit (FRU).
316196601 • Revision: A Chapter 2 Dione Card 15 Removal and Replacement 3. Place the drive and drive tray on a suitable work s urface. 4. Remove the two T9 screws from the top cover and r emove the cover . 5. Remove the connecto rs fr om the HBD card.
Removal and Replacemen t 16 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601.
316196601 • Revision: A 17 CHAPTER 3 V irtual Operator Panel The Sun StorageT ek V irtual Operator Pane l (VOP) is a computer-based application that provides a graphical user interface (GUI) to these tape drives: ■ T10000A ■ T10000B ■ T9840D W ith the VOP at V ersion 1.
18 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 The VOP application uses an Ethernet connec tion to communicate with the tape drives, either: ■ Point-to-point, using a cross-ove.
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 19 Using VOP Using VOP Ther e are two v e rsions of VOP: 1) Customer an d 2) Se rvice. Refer to the VOP documentation for in formation about how to download and install these applications. TA B L E 3-1 is an example of these versions .
Using VOP 20 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Start VOP Importa nt: ■ Remember , the Service Delivery Platform (SDP) does not support th e L TO4 drives. Y ou may need to make adjustments to the netw ork addresses if mixing t a p e d r i v e s o n t h e s a m e K M A a n d / o r S D P n e t w o r k ( L A N 2 ) .
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 21 Using VOP 5. Sel ect the Configure Drive tab and enter the r equired information. Y ou will need customer input for the KMA ID, IP Address, and Passphrase. 6. Click Commit and respond “Y es” to the set drive offline pop-up (if still online).
Using VOP 22 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 During the com mit proces s, the tape d rive goes of fline then IPLs to save th e new settings to the Dione card. Impor tant: When the drive comes back online, it is now using the new IP addr ess.
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 23 Diagnose Drive Tab Diagnose Drive T ab The Dione car d and the VOP Diagnose Driv e tab allow you to perform limit tests, get logs for engine ering review , and to load Dione card firmware.
Diagnose Drive Tab 24 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Run Loopback T est T o run the Loopback diagnostic test: 1. Click on Run Loopb ack T est.
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 25 Diagnose Drive Tab Get Log I f a D i o n e c a r d o r c o n n e c t i o n i s c o n s i s tently having problems, engineer ing may request you retrieve a log of events from the Dione card.
Diagnose Drive Tab 26 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601.
316196601 • Revision: A 27 Index B batch file ,1 9 C cartridge memory ,1 2 comparisons LT O t a p e d r i v e s ,3 media ,4 compatibility , media ,5 compliance regulations ,2 Configure Drive tab ,2 .
28 KMS: L T O4 T echnical Br ief • June 2008 Revision: A • 31 6196601 overview ,1 specifications ,3 LT O 4 i n t e r f a c e s ,1 M manual organization ,v manuals ,v media encryption-capability ,5.
.
SU N™ THE NETWORK IS THE COMPUTER ©2006 Sun Microsystems , Inc. All rights reserved. Sun, Sun Microsystems, and the Sun logo ar e trademarks or registered trademarks of Sun Microsystems , Inc. in the United States and other countries. Sun Microsys tems, Inc.
Een belangrijk punt na aankoop van elk apparaat Sun Microsystems HP LTO4 (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Sun Microsystems HP LTO4 heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Sun Microsystems HP LTO4 vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Sun Microsystems HP LTO4 leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Sun Microsystems HP LTO4 krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Sun Microsystems HP LTO4 bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Sun Microsystems HP LTO4 kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Sun Microsystems HP LTO4 . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
