OKM/KMS / IBM LTO - How To Set IBM LTO4/5 Drive Encryption Timeout Value on Belisarius Card, EMC RKM Solution

Asset ID:	1-71-1496557.1
Update Date:	2012-10-08
Keywords:

Solution Type Technical Instruction Sure

Solution 1496557.1 : OKM/KMS / IBM LTO - How To Set IBM LTO4/5 Drive Encryption Timeout Value on Belisarius Card, EMC RKM Solution

Applies to:

Sun StorageTek Crypto Key Management System - Version Not Applicable and later
Oracle Key Manager - Version 2.3 and later
IBM LTO4 Tape Drive - Version Not Applicable and later
IBM LTO5 Tape Drive - Version Not Applicable and later
Information in this document applies to any platform.

Goal

How to set an IBM LTO4/5 drives encryption timeouts on Belisarius cards.

Some accounts may required an extended transaction timeout for a drive to get a key if drives are accessing remote KMA's on the network.
This setting should be increased to 60 seconds for most encryption customers using EMC's RKM solution and not Oracle OKM.
The maximum timeout that can be set is 60 seconds.

This setting was introduced in Bel code 2.35.23 so bel code will need to be at this level or higher.

Fix

Procedure:
VOP to the Bel card IP address.
Put drive offline

Telnet to the drive IP address.
Login with user admin and password admin

query agentparameters

This will display the current transaction timeout

If you need to change this value.

set transactionTimeout 60

commit

exit

Note: commit needs to be done to commit change to drive memory.

VOP to drive and put drive online.

Note: To find out the firmware level of the Belisarius card, use VOP and select the 'Monitor Tab'. This will show the Encryption Adapter Card Firmware Version.

Provided by Stephen Patching.

Attachments

This solution has no attachment