Quantum Q-EKM Betriebsanweisung PDF herunterladen (Seite 60)

Sharing Encrypted Tapes – Import/Export Operations

Exporting Data Encryption Keys

Quantum Encryption Key Manager User’s Guide 47

The keystore file is called EKMKeys.jck and is located in the QEKM

directory of the Q-EKM server:

Exporting Data Encryption Keys

In order for another Q-EKM server (i.e., the “destination server”) to read

tapes encrypted by your Q-EKM server, you need to export the

encryption keys used to encrypt those tapes and send them to the

destination server.

Currently, Q-EKM does not support exporting individual encryption

keys. Instead, you must export complete sets of 1024 encryption keys.

You can do the following types of exports:

• Exporting Your Native Keys

— Exports your Q-EKM server’s set of

1024 “native” encryption keys to enable other sites to read from or

write to tapes encrypted by you.

• Exporting Imported Keys

— Exports a set of keys that you previously

imported. You might want to do this if an encrypted tape sent to you

by another site (along with its encryption keys, which you imported)

needs to be accessed by still another site.

In either case, the keys are exported as a single file.

Exporting Your Native

Keys 6

To export your Q-EKM server’s set of 1024 data encryption keys:

1 Make sure you have imported the public certificate of the destination

Q-EKM server (see Importing a Public Certificate

on page 45).

2 Log on to Q-EKM Commands (see Logging On to Q-EKM

Commands on page 27).

3 At the Command Prompt, enter

i (for the Import/export keys option).

The Key Import/Export menu displays (see Figure 7

on page44).

4 From the Key Import/Export menu, enter

4 (for Export native keys).

Windows

c:\Program Files\Quantum\QEKM

Linux

/opt/Quantum/QEKM

1 2 ... 55 56 57 58 59 60 61 62 63 64 65 ... 92 93

Keine Kommentare

Quantum Q-EKM Betriebsanweisung Seite 60