
Chapter 3 Operation
LTO-5 Tape Drives and Encryption
LTO-5 Tape Drive User’s Guide 33
and use. LTO-5 tape drives use the strongest version of the industry-
standard AES encrypting algorithm to protect your data.
To make use of this feature you need:
• A backup application that supports hardware encryption
• Ultrium 3TB media or Ultrium 1.6TB media; no encryption will be
performed when writing earlier generations of tape
When should I use
encryption?
Your company policy will determine when you need to use encryption.
For example, it may be mandatory for company confidential and
financial data, but not for personal data. Company policy will also
define how encryption keys should be generated and managed. Backup
applications that support encryption will generate a key for you or allow
you to enter a key manually.
Note: Encryption with keys that are generated directly from
passwords or passphrases may be less secure than encryption
using truly random keys. Your application should explain the
options and methods that are available. Please refer to your
application's user documentation for more information.
How do I enable
encryption?
Hardware encryption is turned off by default and is switched on by
settings in your backup application, where you also generate and supply
the encryption key. Your backup application must support hardware
encryption for this feature to work.
When will I be asked to
enter the key?
Encryption is primarily designed to protect the media once it is offline
and to prevent it being accessed from another machine. You will be able
to read and append the encrypted media without being prompted for a
key as long as it is being accessed by the machine and application that
first encrypted it.
There are two main instances when you will need to know the key:
• If you try to import the media to another machine or another
instance of the backup application
• If you are recovering your system after a disaster
Comentários a estes Manuais