I am having issues with a new EKM installation and need to reinstall.
How can I determine if the EKM ever provided keys?
1 Open a command prompt and navigate to the audit log file directory
(cd C:\ekm\gui\audit).
2 Copy the current audit log file to a temporary file so it can be opened.
The current audit log file is active and cannot be opened while being updated.
3 Open the temporary copy in WordPad. Search for Drive Serial Number.
If there is an entry, a key has been provided. If the volser is blank, this is the
result of key path diagnostics and the file should be searched for additional
entries associated with the drive serial number to be certain.
4 If keys have been provided, the data on the affected media should be
restored in clear text if possible prior to the EKM uninstall and re-
installation.
How do I reuse previously encrypted media as non-encrypted media or
as encrypted media with a different encryption key?
Reusing previously encrypted media requires the use of a working EKM
configuration containing the keys for the tapes to be reused and a PowerVault
TL2000 or TL4000. Tapes cannot be overwritten in this manner in the
PowerVault ML6000. Tapes can be migrated from an ML6000 to a TL2000 or
TL4000 for this purpose. The TL2000 or TL4000 then needs to be pointed to
the appropriate EKM.
1 Ensure that the EKM server is running, and configured properly.
2 Login to the RMU GUI for the TL2000/TL4000 (admin/service
login required).
3 Navigate to Configure Library.
4 Navigate to Encryption.
5 Change the Encryption Policy settings to Internal Label - Selective
Encryption.
6 Submit a write job (For example, quick erase, long erase, backup) to the
media to be reused.
Dell Encryption Key Manager and Library Managed Encryption
21
Seite drucken