Encryption Concepts (218 Views)
Reply
Regular Advisor
L1nklight
Posts: 158
Registered: ‎01-30-2012
Message 1 of 5 (218 Views)

Encryption Concepts

I am currently working on trying to understand the tape encryption process. I have purchased a pair of tokens (one for my production site and one for my DR site). After reading some of the documentation, I am kind of confused about how the encryption process should work. My original intention, was to create a token and leave encryption always on. I would then create a backup token and send it to my DR site for storage and I would do the reverse process at the DR site.

What's confusing me right now, is that I had intended on only using a single key and leaving encryption always on. The tapes in question are in a protected rack and they will only ever be in the tape loader or at the IronMountain facility. The documentation however, seems to indicate that I am supposed to rotate keys on some sort of annual process. My question is if in year 1 I am using key set A and at the end of year 1 I rotate to key set B, how do I restore data from year 1 with key set A if I am no longer using that key set?

Thanks for assisting. I appreciate any and all help.

Acclaimed Contributor
Dennis Handly
Posts: 25,274
Registered: ‎03-06-2006
Message 2 of 5 (199 Views)

Re: Encryption Concepts

>how do I restore data from year 1 with key set A if I am no longer using that key set?

 

In general, you would need to keep all of the keys.

Unless by rekey (key rotation) they want you to decrypt with key A and encrypt with key B, each year.

Regular Advisor
L1nklight
Posts: 158
Registered: ‎01-30-2012
Message 3 of 5 (196 Views)

Re: Encryption Concepts

Thanks, I have a follow up question. How would I remove encryption from a tape? Let's say I wanted to format a tape (blank it) and just make it look like a brand new piece of media?

Acclaimed Contributor
Dennis Handly
Posts: 25,274
Registered: ‎03-06-2006
Message 4 of 5 (192 Views)

Re: Encryption Concepts

>I wanted to format a tape (blank it) and just make it look like a brand new piece of media?

 

I assume there is no difference if it was encrypted or not.

Regular Advisor
L1nklight
Posts: 158
Registered: ‎01-30-2012
Message 5 of 5 (177 Views)

Re: Encryption Concepts

Say I want to use it in a Tape drive that did not have my hardware encryption keys. I basically want to get it as reasonably close to factory default as I can. 

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.