T10000/9840D - How to Enable, Disable, Reset, Remove Encryption on Tape Drive

Asset ID:	1-71-1366350.1
Update Date:	2011-10-18
Keywords:

Solution Type Technical Instruction Sure

Solution 1366350.1 : T10000/9840D - How to Enable, Disable, Reset, Remove Encryption on Tape Drive

Applies to:

Sun StorageTek 9840D Tape Drive - Version: Not Applicable and later   [Release: N/A and later ]
Sun StorageTek T10000 Tape Drive - Version: Not Applicable and later    [Release: N/A and later]
Sun StorageTek T10000A Tape Drive - Version: Not Applicable and later    [Release: N/A and later]
Sun StorageTek T10000B Tape Drive - Version: Not Applicable and later    [Release: N/A and later]
StorageTek T10000C Tape Drive - Version: Not Applicable and later    [Release: N/A and later]
Information in this document applies to any platform.

Goal

How to Enable, Disable, Reset, Remove Encryption on Tape Drive.

Solution

If you do not set permanent encryption on in the drive then you can change the drive to be a non-encrypted drive later on.

To RESET the drive:
1. Connect to the drive with VOP and issue the reset command to the drive.
2. The drive will show RESET in the display.

To reuse a RESET drive:

If you want to remove encryption from the drive follow these steps. You will only be allowed to remove encryption from a drive if it is not set for permanent encryption.

Un-enroll the drive using VOP. (this will remove RESET from the display) he need to do the following:

To un-enroll the drive do the following:
1. Take the drive offline - select Drive Operations>Set Offline
2. Click Configure>Drive Data>Encrypt
3. It should have an option that says "Turn Encryption Off. Set it for yes.

Note:
If you do not get this option then check if the drive is set for permanent encrypting on this same screen. If it is set for yes then you cannot remove encryption from the drive. You will be able to enroll the drive again.

4. Click Commit.
5. IPL the drive.
You should now have a * on the display.
This drive can now be used as a non-encrypting drive.

Note:
Reset is only required when you need to remove encryption or re-enroll a drive, if drive is in a hung state and no longer requesting keys only a reboot is needed.

To re-enable the drive as an encrypting drive or to re-enroll a drive:
Once the drive is RESET, you can re-enroll the drive for encryption.
1. Take the drive offline - select Drive Operations>Set Offline
2. Click Configure>Drive Data>Encrypt.
3. Verify the correct KMA IP address is set in the drive.
4. Delete the Agent ID and press Commit.
5. Add the agent back into the KMA using a new phase phrase.

To Check for Permanently Encrypted drives:
You can view Encryption Status under VOP.
1. Connect to the drive with VOP
2. Click Retrieve>View Drive Data>Encryption

Permanently Encrypting:
If it says yes then you will not be able to reset the drive.

Attachments

This solution has no attachment