Sun MicrosystemsメーカーHP LTO4の使用説明書/サービス説明書
ページ先へ移動 of 38
Sun StorageTek TM Crypto Key Management System HP LTO4 Encryption-Capable Tape Drives Technical Brief Part Number: 316196601 Revision: A.
.
Sun Microsystems, Inc. www .sun.com Cr ypto K e y Management System V ersion 2.0 HP L T O4 T ape Driv e T echnical Br ief P art Number : 316196601 June 2008 Revision: A.
Copyright © 2008 Su n Microsyste ms, Inc., 4150 Network Cir cle, Santa Clara , California 95 054, U.S.A. All ri ghts rese rved. Sun Microsyste ms, Inc. has intellectual pr operty rights relating to technology embodied in th e product that is described in thi s document.
316196601 • Revision: A iii Contents Preface v Organization v Related Information v Additional Information vi 1. Introduction 1 Drive Tray 2 Specifications 3 Compatibility 5 Order Numbers 6 2.
iv KMS: LTO4 Technical Brief • June 20 08 Revision: A • 316196601 Using VOP 19 Start VOP 20 Diagnose Drive Tab 23 Run LED Diagno stic T est 23 Run Loopback T est 24 Get Log 25 Load Firmware 25.
316196601 • Revision: A v Pr eface This technical brief is intended for Sun StorageT ek TM r epresentatives, customers, and anyone r esponsible for planning the installation of the Cr ypto Key Management System (KMS ) encryption solution.
Preface vi KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Additional Information Sun Microsystems, Inc. (Sun) of fers se veral methods to obtain additional information. Sun’s External W eb Site Sun’s external W eb site pr ovides marketing, product, event, cor porate, and service information.
316196601 • Revision: A 1 CHAPTER 1 Intr oduction Overview The Hewlett Packard (HP) L TO4 is the fourth-generatio n of Ultrium, Linear T ape-Open tape drives. This ge neration offe rs more capac ity and incr eased performance than e arlier versions of L TO tape drives.
Drive Tray 2 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 Installing this tape drive in one of Sun St orageT ek ’s automated tape configurations offe rs customers wi th an even wider ch oice of tape-based storage solutions.
316196601 • Revision: A Chapter 1 Introduction 3 Specific ations Specifications T A BLE 1- 1 provides a comparison of tape drive specifications. T ABLE 1-1 T ape Drive Specifications LT O 2 LT O 3 LT O 4 Physical Specifications Height 8.25 cm (3.25 in.
Specifications 4 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 TA B L E 1-2 provides a comparison of media specifications. T A BLE 1-3 lists the reliabilit y specifications.
316196601 • Revision: A Chapter 1 Introduction 5 Specific ations Compatibility HP L TO Ultrium 4 drives are specified to inter change with un-encrypted data c a r t r i d g es f r o m o t h er t a p.
Order Numbers 6 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 Or der Numbers License Keys Configured E nd Items X-Options (Conversion Bills) Dione Card FIGURE 1-2 License Ke ys L T O 4 Encryp tion Key Marketing Number Description Bundled X-HP-L TO4-EKEY - B One r equir ed per encrypti on enabled dri ve.
316196601 • Revision: A 7 CHAPTER 2 Dione Car d The Dione card—pr onounced (D - O - nee)—i s a custom d esign that provides an Ethernet interface fo r the HP L TO4 tape dr ive. W ith this inte rface, the HP L TO4 tape drive can: ■ Encrypt and decrypt data using the Su n StorageT ek Crypto Key Management System (KMS), V ersion 2.
Dione Card Components 8 KMS: LTO4 Technical Brief • June 2 008 Revision: A • 316196601 Dione Car d Components The Dione card installs in the open ar ea of the drive trays behind the tape drives.
316196601 • Revision: A Chapter 2 Dione Card 9 Dione Card Components Connecting to the Dione Car d FIGURE 2-2 shows two ways to conn ect to the Dione card: ■ Point-to-point usin g a crossover cable ■ Network using a switch or hub and standa rd (straight-through) Ethernet cables Note – The default I P addre ss of the Dione car d is 10.
KMS Operations 10 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 KMS Operations When the tape drive is powered-on, th e Dione card co mmunicates to the dr ive o v e r t h e s er i a l p o r t t o t a k e c o n t r o l of drive encryption and decryption.
316196601 • Revision: A Chapter 2 Dione Card 11 KMS Operations A potential issue: Th a t L TO 4 dr i v e fi r m w are w i l l n o t re qu e s t a write key in the following scenario: Read, Space, W rite-Filemark, W rite. The drive will use the same key obtained for the Read command to encrypt the data pr ovided for the W rite command.
KMS Operations 12 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 At release, the functionality to set a ke y in a compr omised state is not present. This is a low impact issu e due to the syst em assi gning unique encryption keys for e a c h t a p e c a r t r i d g e .
316196601 • Revision: A Chapter 2 Dione Card 13 KMS Operations FIGURE 2-4 prov ides an example of a KMS Manager display sc reen using the elements from and HP L TO4 drive. FIGURE 2-4 K M S M a n a g e r D a t a U n i t L i s t 1. Data Unit ID (data cartridge) 2.
Removal and Replacemen t 14 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Removal and Replacement Encryption-capable HP L TO 4 tape drives contain an Ethernet card, which i s a field repla ceable unit (FRU).
316196601 • Revision: A Chapter 2 Dione Card 15 Removal and Replacement 3. Place the drive and drive tray on a suitable work s urface. 4. Remove the two T9 screws from the top cover and r emove the cover . 5. Remove the connecto rs fr om the HBD card.
Removal and Replacemen t 16 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601.
316196601 • Revision: A 17 CHAPTER 3 V irtual Operator Panel The Sun StorageT ek V irtual Operator Pane l (VOP) is a computer-based application that provides a graphical user interface (GUI) to these tape drives: ■ T10000A ■ T10000B ■ T9840D W ith the VOP at V ersion 1.
18 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 The VOP application uses an Ethernet connec tion to communicate with the tape drives, either: ■ Point-to-point, using a cross-ove.
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 19 Using VOP Using VOP Ther e are two v e rsions of VOP: 1) Customer an d 2) Se rvice. Refer to the VOP documentation for in formation about how to download and install these applications. TA B L E 3-1 is an example of these versions .
Using VOP 20 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Start VOP Importa nt: ■ Remember , the Service Delivery Platform (SDP) does not support th e L TO4 drives. Y ou may need to make adjustments to the netw ork addresses if mixing t a p e d r i v e s o n t h e s a m e K M A a n d / o r S D P n e t w o r k ( L A N 2 ) .
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 21 Using VOP 5. Sel ect the Configure Drive tab and enter the r equired information. Y ou will need customer input for the KMA ID, IP Address, and Passphrase. 6. Click Commit and respond “Y es” to the set drive offline pop-up (if still online).
Using VOP 22 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 During the com mit proces s, the tape d rive goes of fline then IPLs to save th e new settings to the Dione card. Impor tant: When the drive comes back online, it is now using the new IP addr ess.
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 23 Diagnose Drive Tab Diagnose Drive T ab The Dione car d and the VOP Diagnose Driv e tab allow you to perform limit tests, get logs for engine ering review , and to load Dione card firmware.
Diagnose Drive Tab 24 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601 Run Loopback T est T o run the Loopback diagnostic test: 1. Click on Run Loopb ack T est.
316196601 • Revision: A Chapter 3 Virtual Operator Pan el 25 Diagnose Drive Tab Get Log I f a D i o n e c a r d o r c o n n e c t i o n i s c o n s i s tently having problems, engineer ing may request you retrieve a log of events from the Dione card.
Diagnose Drive Tab 26 KMS: LTO4 Technical Brief • June 2008 Revision: A • 316196601.
316196601 • Revision: A 27 Index B batch file ,1 9 C cartridge memory ,1 2 comparisons LT O t a p e d r i v e s ,3 media ,4 compatibility , media ,5 compliance regulations ,2 Configure Drive tab ,2 .
28 KMS: L T O4 T echnical Br ief • June 2008 Revision: A • 31 6196601 overview ,1 specifications ,3 LT O 4 i n t e r f a c e s ,1 M manual organization ,v manuals ,v media encryption-capability ,5.
.
SU N™ THE NETWORK IS THE COMPUTER ©2006 Sun Microsystems , Inc. All rights reserved. Sun, Sun Microsystems, and the Sun logo ar e trademarks or registered trademarks of Sun Microsystems , Inc. in the United States and other countries. Sun Microsys tems, Inc.
デバイスSun Microsystems HP LTO4の購入後に(又は購入する前であっても)重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります:
Sun Microsystems HP LTO4をまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはSun Microsystems HP LTO4の技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。Sun Microsystems HP LTO4の取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。Sun Microsystems HP LTO4で得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
Sun Microsystems HP LTO4を既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はSun Microsystems HP LTO4の不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、Sun Microsystems HP LTO4に関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちSun Microsystems HP LTO4デバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。