I have the EKM set up doing library managed encryption. It works well once it is set up and takes any TSM dependencies out of the picture. It also allows me to push off most of the encryption maintenance to our security group. IBM's encryption expertise for open systems has been underwhelming. I am using EKM on AIX. It should work on Windows if you get the correct java and configurations.
Neil Strand Storage Engineer - Legg Mason Baltimore, MD. (410) 580-7491 Whatever you can do or believe you can, begin it. Boldness has genius, power and magic. -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of William Boyer Sent: Wednesday, December 05, 2007 9:56 AM To: ADSM-L@VM.MARIST.EDU Subject: [ADSM-L] Anyone doing TSM Encryption on TS1120's in a 3494 tape library?? Looking for help...TSM 5.4.1.1 on WIndows2003 running the latest IBM tape driver. The library and drives are at the latest firmware as of about 2-weeks ago. The drives have application encryption enabled. This was done through the CE interface on the back of the drives. A query of the drive VPD data from the library console shows application encryption is enabled. When we enable encryption in TSM UPD DEVC 3592 DRIVEENCRYPTION=ON, we get ANR8985E message when mounting scratch tapes. Using the NTUTIL command and specifying that you want 59: Get encryption State it shows: Encryption capable: True Encryption method: None (0) Encryption state: Off (0) We rebooted the TSM server after making the encryption changes to the drives. Could really use some help on this....calling IBM and trying to figure out where to start ....is it a TSM issue...driver....hardware configuraiton......??? Bill Boyer >Select * from USERS where CLUE>0 0 rows returned IMPORTANT: E-mail sent through the Internet is not secure. Legg Mason therefore recommends that you do not send any confidential or sensitive information to us via electronic mail, including social security numbers, account numbers, or personal identification numbers. Delivery, and or timely delivery of Internet mail is not guaranteed. Legg Mason therefore recommends that you do not send time sensitive or action-oriented messages to us via electronic mail. This message is intended for the addressee only and may contain privileged or confidential information. Unless you are the intended recipient, you may not use, copy or disclose to anyone any information contained in this message. If you have received this message in error, please notify the author by replying to this message and then kindly delete the message. Thank you.
