
Troubleshooting
Frequently Asked Questions
Quantum Encryption Key Manager User’s Guide 62
Frequently Asked Questions
Question Answer
How can I tell if the Q-EKM server is
running?
Do one of the following:
• Issue the Q-EKM “status: command (see Displaying the
Q-EKM Server On/Off Status on page 30).
•Check the
native_stdout.log (see Standard Out Messages
Log on page 66).
What is the difference between
Application-Managed Encryption (AME)
and Library-Managed Encryption (LME)
and how do they work?
AME is not part of Q-EKM. In AME, the ISV application
manages the interaction with the encryption-capable
drive. AME requires an ISV application that supports it.
With LME, the library (and the Q-EKM server) manages
the interaction with the encryption-capable tape drive.
LME does not require any ISV support and is transparent
to the application.
When is media encrypted? Media (either new or re-labeled) is encrypted when it is
initially written to at the beginning of the tape (BOT).
What state must the media be in to be
encrypted using Q-EKM?
The media must be either blank or erased (re-labeled). If
any unencrypted data is on the media, no encryption will
occur.
If the media contains anything other than LME-encrypted
data, the data must be erased. Interleaving LME data with
non-encrypted or AME-encrypted data is not supported.
How can I verify that tapes are being
encrypted using Q-EKM?
• The library interface provides several reports that
indicate which tapes are encrypted. See your library
user’s guide for details.
• You can check the Q-EKM audit log for key retrieval
traffic (see Audit Log
on page 65).
How can I tell which tapes are encrypted
and which are not encrypted?
The library interface provides several reports that indicate
which tapes are encrypted. See your library user’s guide
for details
Comentarios a estos manuales