SL500 - Enabling Hardware Encryption for Tape Drives

I have a SL500 with seven HP StorageWorks LTO-4 Ultrium 1840 tape drives. These tape drives have hardware encryption capabilities and several ways to configure the encryption settings.
In the white papers for the HP LTO-4 encryption technology (http://h71028.www7.hp.com/ERC/downloads/4AA1-4878ENW.pdf), all possible ways to manage the encryption settings are listed. One possibility, native mode encryption, is mentioned: "This method controls the LTO4 encryption from within the tape drive library. There is one key that is set by way of the library management interface (Web GUO or Operator Control Panel). This method encrypts all tapes with the same key, with the downside of negatively impacting the security level."
Does the SL500 provide any to do this?

We just got an SL500. When the Sun engineer was onsite, he mentioned an encryption capability. The way he explained it, there is an optional chip that needs to be purchased, as well as an encryption server. Once this is in place, encryption is easily done. If you were to have the same setup at a DR site, the encryption server would auto search for the encryption key whenever the tape is read. Seems to be a good system, but I have no experience with as we do not have that policy....yet
HTH

Similar Messages

Finaly. How to enable hardware acceleration for X-

After much discussion on this form and with my friends, I've finally cracked hardware acceleration for X-FI on Vista. It works by using Alchemy on a large scale and gives acceleration for everything you listen to. The breakthrough finally came through thanx to help and info I received from alexs3ds on this thread?http://forums.creative.com/creativel...message.id=645?It started as an emulation concept discussion and evolved in to this. It gives all your 3D audio effects and EAX in games without game by game transmutation and I have noticed a large quality and volume enhancement in normal music and film audio because even that is now accelerated. Here's a step by step guide on how to do it.[color="#ff0033">?[color="#3366ff">Download Alchemy and install. Get it here .[color="#3366ff">http://preview.creativelabs.com/alchemy/default.aspx[color="#3366ff">?[color="#3366ff">Open a?window in explorer and go to [color="#3333ff">Windows\System32.[color="#3366ff">?[color="#3366ff">Locate the file dsound.dll and right click on it then select properties.[color="#3366ff">?[color="#3366ff">Click the security tab then click advanced.[color="#3366ff">?[color="#3366ff">In the advanced security panel?that opens up, click the owner tab then edit.[color="#3366ff">?[color="#3366ff">Use this to set your user account name as owner. Use the other users and groups button if you can't see your account name select your user account name using the select users pane and add it. Make sure your user account name is set as owner.[color="#3366ff">?[color="#3366ff">Next you want to change permissions in the advanced security panel so you would click the permissions tab, click edit, on the panel that pops up click add and add your user account name. On permission entry panel, click full control under the allow line. Then ok everything and close every thing down till your back at the explorer.[color="#3366ff">?[color="#3366ff">Now rename dsound.dll to something like dsound.dll.bak. ( changing owner and permissions allows you to do this ).[color="#3366ff">?[color="#3366ff">Open up another explorer window and navigate to the Alchemy directory ie C:\program files\alchemy, highlight the dsound.dll file and the dsound.ini file and copy them.[color="#3366ff">?[color="#3366ff">Paste them into the system32 folder and that's it. Reboot your computer and you are now using hardware accelerated sound. ?[color="#ff0033">IMPORTANT NOTES YOU MUST KNOW[color="#ff0033">?This only supports 6-Bit samples. You can't use 24-Bit audio samples. You can however reverse the process and regain support. The Alchemy drivers can cause a bit of choppy sound now and then if you don't configure them right. See the Alchemy advanced FAQ for info. Plus, remember they are Beta. You can however update your system as and when alchemy updates. It's not known if every game will work with EAX or 3Dsound with this. To my knowledge?all, if not?most do.You can still edit and add game settings to the dsound.ini file. For help and info in getting the best quality out of your X-FI and a list of what XP software you can install off your driver disk that came with your card refer to this thread. http://forums.creative.com/creativel...essage.id=6029?Enjoy. Edit:- IMPORTANT UPDATE?This will only work if your card is set in game mode. It will not work properly in any other mode. See my post further down this thread for more details.Also important is that I have only been able to test this on Vista 32 ultimate. It is untested in any other version of Vista. Perhaps people who have it running on other versions of Vista could post this info and help put together a list. ?
Message Edited by Sensi on 05-09-200705:20 AM
Message Edited by Sensi on 05-09-200705:20 AM

It does work, however I discovered more?important conditions. You MUST have your audio card in game mode BEFORE you do this. The reason is that the alchemy file passes the audio to OpenAL in game mode only. IF YOU TRY TO RUN GAMES IN ANY OTHER MODE YOUR SYSTEM WILL CRASH WITH BSD. IF YOU TRY TO RUN MEDIA PLAYER IT WILL HANG. IF YOU RUN DIRECTX DIAGNOSTIC YOUR SYSTEM WILL CRASH WITH BSD. YOUR?CARD MUST BE IN GAME MODE. IF YOU TRY TO CHANGE TO GAME MODE AFTER THE SWITCH, YOU WILL NOT BE ABLE TO AS THE AUDIO PANEL WON'T LOAD. DO IT BEFORE YOU SWITCH. As for windows replacing files after reboot, that aint happening to me. I've looked everywhere and can't find any sign of?were replacement files would come form either. Not that I'm saying it isn't happening, Vista is supposed to have a security system that stops you from replacing core system files. It just ain't happening in my system. However, I do have various system hacks in place and one of them may be stopping this. Need to look in to this. Fact:- I'm sitting with this in system now ( got no intentions of going back cause the audio's great ). I've tested 0 up-to date games and all give EAX etc. Without transmutation. Audio sounds amazing compared to what it was before and video audio finely plays in sync ( hurray). Maybay I should add a warning to this mod that you must only try it if you know what you are?doing.BTW in case this has anything to do with it, my system is :-
Asus?am2 with nforce 4, amd am2 x2 dual core cpu, 2 gig dual channel ddr2 800, oem?SB X-FI and Vista 32 ultimate.
Message Edited by Sensi on 05-09-200705:04 AM

Media Manager for tape drive

Where can I get the media manager for an HP 1533C DAT tape drive in an external case to work with Rman?

I have the same problem. Media manager worked fine and then it crashed everytime I tried to bring it up. It may have something to to with the latest update to Snow Leopard.

Recommendation for Tape drives/library connected to DPM on virtual machine

Hi,
we are running DPM as a virtual machine in an hyper-v environment. Now we want to add long term storage -> tape. I looked at virtual tape libraries (firestreamer) but as I want to store the "tapes" externally for DR scenario I thought that this might
not be the best way to go.
We would prefere to use a "traditional" tape library. The best option I found would be iSCSI tape libraries but the only ones I found started at around 6000 US$. As I will be backing up only up to 1.5 TB/night I don't want to spend that much money. In addition
I don't know if they are really going to work.
The other option I saw was to use a SCSI to iSCSI Bridge and connect a SCSI tape library that way. I found solutations for around 3000 US$. Which is still a lot but better then the iSCSI Tape drives.
Does someone else have recommendations or some other ideas what works best? The only entries I found so far were from 2008 and I am quite sure that things have changed since then.

I looked at virtual tape libraries (firestreamer) but as I want to store the "tapes" externally for DR scenario I thought that this might not be the best way to go.
Actually, it might, you can use removable media to host the virtual tape files created by firestreamer and take the removable media offsite. So instead of rotating physical tapes, you rotate physical removable media.
Closing for housekeeping.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Not use tape drive in solaris

os=solaris developer 9/07
tape= HP Storage Works DAT 72 Internal Tape Drive-SCSI
card=Adaptec 2916 ON SCSI CARD
please help me where to download driver for tape drive and card SCSI
command to install driver
command to configure hardware
thank you for any answer

after i use command reboot -- -r
then i log in again
login as: suchat
Using keyboard-interactive authentication.
Password:
Last login: Tue Nov 20 14:35:06 2007 from 172.16.20.2
Sun Microsystems Inc. SunOS 5.11 snv_70b October 2007
-bash-3.00$ cd /dev/rmt
-bash-3.00$ ls -l
total 0
-bash-3.00$ ls -l
total 0
-bash-3.00$
no node in /dev/rmt
tape drive is powered on and connected to the card
i can insert tape in tape drive and i can eject it by press button on tape drive
is it need to config /kernel/drv/st.conf

Tape drive Configuration

Hi,
I am unable to take archivelog backup from DB13. From OS level we are able to take backup. Please give me an idea to set any parameters for tape drive in SAP level.
Thanks,
Nagesh

hi,
check this link will help u.
http://help.sap.com/saphelp_nw04/helpdata/en/df/455e19747111d6b25100508b6b8a93/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/d1/a9f7524b8a11d189510000e829fbbd/frameset.htm
regards
ajai

I forgot my macbook hardware encryption

how to crack hardware encryption for macbook?

Mac OS 9000 wrote:
If you mean firmware, you can't...
When you lock the firmware, it says that you cannot crack it if you forget it.
Rubbish: - http://support.apple.com/kb/TS3554
"Only Apple retail stores or Apple Authorized Service Providers can unlock a MacBook Air (Late 2010), MacBook Pro (Early 2011), or iMac (Mid 2011) computer protected by a firmware password."
Now what model do you have ahmetkadirbulan?

Can anyone recommend a portable USB 3.0 drive with hardware encryption, compatible with OSX and Windows 7. I need it for my MacBook Pro 13", 2012, running Mountain Lion

Can anyone recommend a portable USB 3.0 drive with hardware encryption, compatible with OSX Mountain Lion and Windows 7. I need it for my MacBook Pro 13”, 2012, running Mountain Lion & Windows 7 Ultimate - BootCamp. I’ve heard that the Buffalo MiniStation Encryption does not work with OSX, is that true..? I'd like it to work with both operating systems, using the built in hardware encryption. Thanks

This article may help: A flashing question mark appears when you start your Mac.

System Requirements for Hardware Encryption on Crucial SEDs

The majority of current Crucial SSDs are Self-Encrypting Drives (SEDs) which means all data is always encrypted by the controller when written to the NAND and decrypted when read. Windows 8 BitLocker can work with this built-in hardware encryption ability when you apply a password in Windows, provided the following requirements are met:
•   BitLocker only supports TPM version 1.2 and 2.0 (or newer). In addition, you must use a Microsoft-provided TPM driver (Please note, BitLocker can also work without a TPM, but it will need a USB flash drive to set the password instead)
•   The system needs to support UEFI 2.3.1
•   Make sure UEFI boot is enabled and you have a UEFI enabled Windows 8 installed
•   The computer must boot natively from UEFI.
•   The boot order must be set to start first from the SSD (not the USB or CD drives)
•   Dynamic discs are not supported by BitLocker
•   The SSD must have two partitions (drives with Windows installed generally do anyway) and the main partition to be encrypted must be NTFS
•   Ensure ATA Security features, for example Secure Boot, are disabled in the BIOS. The M500 supports either ATA Security or TCG Opal (which is needed for SED) but not both.
•   The system needs to support Opal 2.0 The Opal 2.0 standard is not backwards compatible; Crucial SEDs are not compatible with Opal 1.0
•   The computer must have the Compatibility Support Module (CSM) disabled in UEFI.
Looking for more information on Crucial SSDs? Learn more here!
Looking for Customer Service? Contact Crucial Support for your region.

i'm very glad to read, from the article you referenced, that there's no performance hit. but that's only 1 of 2½ issues. i have some follow-up questions. perhaps we should take this to a forum instead of the knowledge base?
-what about prior issue #2 (securely wiping the drive)? is this easily and instantly doable? we'll ignore #3 (relying on microsoft gets ½ a point).
-with the encryption keys stored on the controller, doesn't using third-party encryption software mean the keys themselves aren't encrypted by a user pw, making it that much easier for someone with physical access to the drive to extract them from the firmware?
-if the controller is doing the encryption, why bother with bitlocker? is it so slightly-more-savvy-than-average joe can easily enable it, or so you don't have to write it into the firmware? (i'm being serious, not snarky--i'm a software developer myself.) personally, i'm dual-booting win7* and ubuntu 14, which means i need 2 separate encryption methods instead of just supplying my credentials at boot to decrypt the hd and then choosing which os to load.
-also, if i upgrade the windows os, ms requires the os volume to be decrypted first. this would obviously not be the case if windows was unaware that it was encrypted.
*last, what about those poor silly saps who are running win7 (or earlier)? i just read that win7 bitlocker doesn't support self-encrypting drives--it was an update as of win8. we're just out of luck? i realize you can't support everything, but win7 is still a ms-supported os, and it seems like a better service to (more of) your customers to enable full-disk encryption all the time.
thank you!

Looking for ideas regarding encrypting a network drive used by 2 OSX Macs

I was thinking of getting a networked HD (connected by Ethernet to my wireless router) to enable my two Macs (wife's tower running 10.3.9, my Powerbook running 10.5.8) to store each of our iPhotos, iMovies, iTunes, etc. libraries on one network drive (rather than on each Mac's HD.)
Since the Powerbook is so portable, and equipped with Airport, it would be the logical CPU to position next to our living room HDTV - using one Audio cable and one DVD-to-HDMI cable. Then, either user could log into their own account on the Powerbook and wirelessly access the networked HD to display their personal iPhoto, iMovie, etc. library contents over the TV.
But I wonder... if wife normally maintains her iPhoto library by logging into her G4 tower, maybe OSX's permissions will thwart her from accessing it when she logged into her account on the Powerbook because she would appear to be a different user.
I also wonder if It would also be wise...or even possible... to encrypt the networked drive, somehow, to add another level of security to the files, since anyone who managed to hack thru my Router might potentially be able to read all the files on the HD. The router companies lead us to believe WEP and other protocols are totally secure, but I've also read that these can be hacked by some individuals. This being a 1TB networked drive, I expect some other data might get backed up to it, too, making the security issue a bit more of a concern.
The security and encryption issues in this scenario are muddy to me....but it seems like this is could be a great way to securely consolidate both users' iPhotos and other media on one network drive, accessible from either computer with appropriate logins....or would there be some show-stopping 'gotcha'? What do you think?

instead of having to boot up both Macs, initiate file sharing, fumble to get things mounted, etc. each time ...
You can leave the desktop Mac to time out and go to sleep. and set "wake on Ethernet Administrator Access", which should allow you to wake it up and get files.
the Powerbook uses OSX 5.8 while the G4 tower is on Panther.
That does not present a problem or File Sharing, which can be made compatible across a wide \[but not infinite] range or Mac Operating Systems.
So they aren't using the same version of iPhoto...the G4 uses iPhoto6, and the Powerbook uses iPhoto 9.
Our household runs a mix of 10.4 and 10.5, having just upgraded the faster Macs to 10.5. We have our entire iPhoto library in iPhoto 8 \[iLife '08], which supports the range of Mac OS we are using, and many features including ordering prints (but not face-recognition). If you want to combine your libraries, perhaps you could drop back to iPhoto 8 and re-import the iPhoto9 stuff, and upgrade to iPhoto 8 on the G4/400. \[You CAN run 10.5.8 on a G4/400, but you have to use some hacks to install it, and it may be a little sluggish at times. Then you could simply upgrade to iPhoto 9 all around.
Encrypting an entire drive makes me really queasy. I have spent too many hours digging out after drive failures and software errors have clobbered a drive, and no matter how hard you work at recovery, at least a few files always get lost. When you encrypt an entire drive, the Operating System sees the whole drive as one big file -- and errors in that file may make that file (your entire drive) unrecoverable. A friend of mine had just such a disaster at home when a drive space enhancer called "Stacker" blew up on him.
If you put Quicken or other financial data on your home Server or shared drive, I would still not worry about it, but if it keeps you up at night, you could encrypt just the financial data file (and keep it backed up religiously).
Because I do support for schools, I have also implemented Mac OS X Server at home. With a school-like setup, ALL users files are on the Server, and any user can use any Mac, their files just "appear" when they log in. File Sharing underlies everything, but it is all done without thinking about it -- the Server just does it. But Server is a US$500 package (down from $1000) that requires a dedicated Mac and a lot of fiddling, so I do not recommend it for your situation.
One thing I do recommend, if you are going to store files on your network, is to try to upgrade/add an Ethernet Switch at Gigabit Ethernet speed, if possible. The Router does not need that speed, but Mac-to-Mac (if you go the File Sharing route) or Mac-to-Network_Drive (if you go that route) will be much more responsive. If your G4/400 does not have Gigabit Ethernet, you can get a PCI slot card for it. Or maybe upgrade it to a newer old Mac that can run 10.5.8 without hacks.
Message was edited by: Grant Bennet-Alder

SL500 tape library and IBM LT0 5 tape drive Firmware locations

Hi All,
I need the locations or the url to download the latest firmware for SL500 Tape Library and IBM LT0 5 Tape Drives.
Regards,
Joseph

However, IBM LTO5 firmware is available for download by customer via support.oracle.com / patches and updates. Just search for 145784-08.
Product Family
Drive Supplier
Drive Firmware
Drive Patch
LTO-5 (FC 8Gb)
IBM
D8D4
145784-08

StorageTek LTO5 Tape Drive - Encryption question

Hello All,
Just want to get some information on StorageTek LTO5 Tape Drive. my company bought them a while ago.
We want to start encryption on these LTO 5 backup tapes.
Just wondering if you guys have any information about....
do we need extra equipments, licences to do encryption ?
How to install or any usefull information ?
I am thinking to talk to oracle sales but before that I need some information on this. if you guys help me in this.
Regards.

Hi.
You should deploy "Oracle Key Manager". Every drive required additiona Oracle Key Managerl licene for turn on this feature.
Docs:
http://docs.oracle.com/cd/E26076_02/index.html
http://docs.oracle.com/cd/E21419_03/index.html
Regards.

All drives busy, how to free one for tape labeling?

Our backups are currently wedged because of a media shortfall.
We have a dedicated mediafamily for full backups and all of the tapes for that pool have
been exhausted. All of the drives are have backups running (paused, really) and waiting
for tapes.
It should simply be a matter of labeling more tapes, but here is the problem:
catxcr allows you to examine the transcript and choose what to do. Selecting "help"
offers the choice to label a tape
1955.1: Error: couldn't perform auto-swap - can't find usable volume in library (OB device mgr)
1955.1: : help
1955.1: tape and library manipulation commands:
1955.1: labelvol [--force/-f] <vol_spec> <se_spec> -- label volume(s)but this yields
1955.1: : labelvol -b F26091 203
1955.1: Connection reset by peerAttempts to label a tape directly fail because they are reserved by OSB processes:
[root]# obtool labelvol -f -o -Xfamily:CR-MEDIA-DUP-ARCH4 -D obt8 -b A26001
Error: unable to open qlm connection - requested drive is in useas do attempts to cancel the job and either reserve or borrow the drive for a labeling operation:
[root]# obtool canceljob 1923; while obtool resdev obt8 | grep Error; do sleep 2; done
Info: cancelled job 1923.1.
Info: cancelled job 1923.
Error: drive obt8 is in use by:
OB component Host Process
obacslibd crbkpms1-sca 7630
obtar crbkpms1-sca 13626
observiced crbkpms1-sca 7509
[root]# obtool resdev obt8
Error: drive obt8 is in use by obacslibd on host crbkpms1-sca, process 20018.
[root]# obtool borrowdev obt8
Error: unable to borrow drive obt8 - drive cannot be borrowed.Taking the drive out of service doesn't help with any of the above.
Any suggestions how we can free up a tape drive long enough to label more tapes
into this mediafamily so backups can continue?
Restarting services is one possibility but this should be considered as a last resort.
Thanks,
-pc
Edited by: pcondran on Apr 22, 2011 4:04 PM
Edited by: pcondran on Apr 22, 2011 4:05 PM

If the other tapes are expired then they will be automatically relabelled for use with this media family, so you should never need to manually label tapes unless you're trying to expire tapes that still have valid backups on them.
The borrowdev commands are applicable to a single obtool session, so you have to just type "obtool" to get into that prompt and then do the borrowdev commands in that one session.
Thanks
Rich

Is there a way to get full hard drive encryption for the iPad?

This is a requirement before I start a new job and Is urgent as I really don't want to have to purchase a laptop instead of using my iPad.

iPad doesn't have a hard drive it uses flash memory. iOS devices already support hardware encryption of data:
http://support.apple.com/kb/HT4175
And read Page 7 onwards of: http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf

Tape drive selection for SAP r/3 Landscape

Dear frinds,
We are presently in the process of selection of Tape drive for our sap r/3 landscape. I.e, in the process of sap sizing.
My backup requirements are upto 1 TB. We have development QA and PRD servers in our landscape. We are planning for SAN based storage solution.
What I would like to know are as follows...
1. We are planning for SAN Based Tepe library.
With SAN Based tape library is it manditory to use Backup manager to initiate backup and restore operations.
My question is b'cos i need to upgrade skillset
Is it possible to mount the Single SAN Based Tape drive on my Development, QA and PRD as if they appear as local drives (file system )on the servers. If this is not possible i need to know about the tape drive which can be mounted as local tape drive.
I want only one tape drive in my landscap and I must be able to use sap r/3 tools to backup and restore.
Keeping presice my expectation what i want to know is : I want to conduct backup and restore operations in my SAP r/3 landscape with single tape drive and using SAP BRtools only( i.e. using DB13/ BRtools from command mode ).
It would be great suggested and participated in discussion.
Thanks and Regards,
Sree Ramam SNV

Hi Nirav,
the maintenace cost will be the same as before.
the maintanance cost include the possibility
that if you pay the maintenace fee regularly you can always get the
newest software releadse and the support packages and kernel for it.
please also look at this link.
http://service.sap.com/maintenance
Kind regards
Imre Takácsi-Nagy
Senior Support Consultant II.
SAP Global Support Center Austria
Netweaver WEB Application Server ABAP / JAVA

SL500 - Enabling Hardware Encryption for Tape Drives

Similar Messages

Maybe you are looking for