1. DL manuals
  2. Quantum
  3. Storage
  4. Scalar i2000
  5. Quick Start Manual

Quantum Scalar i2000 Quick Start Manual

Summary of Scalar i2000

  • Page 1

    Www.Quantum.Com scalar key manager 2.5 scalar key manager 2.5 quick start guide this quick start guide provides basic installation and configuration instructions for the scalar® key manager (skm). Skm can be deployed in one of two ways: • a pair of physical appliances (servers) purchased from quantu...

  • Page 2

    2 installing and configuring the skm appliance servers quantum scalar key manager 2.5 quick start guide installing and configuring the skm appliance servers follow the instructions in this section if you are deploying a pair of physical skm appliance servers. Caution: the skm appliance servers are d...

  • Page 3

    Installing and configuring the skm appliance servers 3 scalar key manager 2.5 • the skm server must have ip connectivity through any firewalls to all quantum libraries using the skm appliance server to obtain encryption keys. • skm uses tcp ports 80, 6000 and 6001 for skm server communication. These...

  • Page 4

    4 installing and configuring the skm appliance servers quantum scalar key manager 2.5 quick start guide figure 1 skm appliance server rear panel the rear of your server looks like one of the drawings below. 4 observe the power-on led on the front panel (see figure 2 ). Wait until the power-on led bl...

  • Page 5

    Installing and configuring the skm appliance servers 5 scalar key manager 2.5 5 power on the skm appliance server by pressing the power button on the front of the server (see figure 2 ). Figure 2 front panel 6 again, observe the power-on led on the front panel. Wait until it is illuminated but not b...

  • Page 6

    6 installing and configuring the skm appliance servers quantum scalar key manager 2.5 quick start guide 1 set the ip address of the laptop or pc you will use to connect to the skm appliance server to 192.168.18.100. 2 connect a cat5e crossover ethernet cable from the laptop or pc to ethernet port 1 ...

  • Page 7: Password!

    Installing and configuring the skm appliance servers 7 scalar key manager 2.5 caution: extremely important: remember your password! if you change the password from the default and forget it, there is no way to retrieve it! each skm server has its own password. If you set them differently, you must...

  • Page 8

    8 installing and configuring the skm appliance servers quantum scalar key manager 2.5 quick start guide note: ports are identified on the back of the server as port 1 and port 2, but when configuring skm through the console the ports are referred to onscreen as ports 0 and 1 respectively. (that is, ...

  • Page 9

    Installing and configuring the skm vmware servers 9 scalar key manager 2.5 16 connect a standard cat5e ethernet cable from ethernet port 2 on the back of the skm appliance server to your network (see figure 1 on page 4). You will connect to this port using the ip address assigned in step 11 above. 1...

  • Page 10

    10 installing and configuring the skm vmware servers quantum scalar key manager 2.5 quick start guide • printed label on the cd case containing a unique serial number, mac id and license key (required for installation) • vmware® vsphere™ client installed on a computer. The computer may be the same a...

  • Page 11

    Installing and configuring the skm vmware servers 11 scalar key manager 2.5 • skm uses tcp ports 80, 6000 and 6001 for skm server communication. These ports must all be open on your network in a bi-directional mode in order for skm communication between the skm servers and libraries to work. Deployi...

  • Page 12

    12 installing and configuring the skm vmware servers quantum scalar key manager 2.5 quick start guide allow 30 minutes per server to complete the configuration. 1 using vsphere client, make sure the skm vm server you just created is powered off (right-click the vm server, select power, then select p...

  • Page 13

    Installing and configuring the skm vmware servers 13 scalar key manager 2.5 figure 6 video card settings 5 power on the skm vm server (right-click the skm vm server in the left panel, select power, then select power on). 6 highlight the skm vm server in the left panel. 7 in the right panel, click th...

  • Page 14: Password!

    14 installing and configuring the skm vmware servers quantum scalar key manager 2.5 quick start guide 8 at the skmserver login prompt, type the following (this is the user login id which will never change): akmadmin 9 at the password prompt, type the default password: password 10 at the akmadmin@skm...

  • Page 15

    Installing and configuring the skm vmware servers 15 scalar key manager 2.5 • if you wish to change the password: a at the (current) unix password prompt, type the default password ( password ) and press . B type the new password and press . C type the new password again and press . D press . Figure...

  • Page 16

    16 installing and configuring the skm vmware servers quantum scalar key manager 2.5 quick start guide figure 8 skm admin commands 20 at the command prompt, type q and press to quit, save your changes, and restart the skm key server. This process takes a few seconds. Note: you must quit at this point...

  • Page 17

    Installing and configuring the skm kvm servers 17 scalar key manager 2.5 installing and configuring the skm kvm servers note: quantum provides support for skm, however quantum does not support the virtual environment hardware or software (vmware or kvm). Follow the instructions in this section if yo...

  • Page 18

    18 installing and configuring the skm kvm servers quantum scalar key manager 2.5 quick start guide • the skm server must have ip connectivity through any firewalls to all quantum libraries using the skm appliance server to obtain encryption keys. • skm uses tcp ports 80, 6000 and 6001 for skm server...

  • Page 19

    Installing and configuring the skm kvm servers 19 scalar key manager 2.5 6 in the name field, type the name of the new virtual machine. 7 select import existing disk image and click forward. 8 click browse and navigate to the .Raw file. 9 for os type select linux and for version select ubuntu [versi...

  • Page 20

    20 installing and configuring the skm kvm servers quantum scalar key manager 2.5 quick start guide 10 for memory (ram) select 1024 and for cpus select 2. Click forward. 11 for advanced options select the host device which corresponds with your virtual network interface..

  • Page 21

    Installing and configuring the skm kvm servers 21 scalar key manager 2.5 12 select set a fixed mac address and enter the mac address provided on the installation cd. Ensure virt type is set to kvm and the architecture is set to the default value. 13 click finish when done. A progress bar displays on...

  • Page 22

    22 installing and configuring the skm kvm servers quantum scalar key manager 2.5 quick start guide note: if you receive the following error message when trying to use the console, follow the workaround steps listed below.  error message: this kernel requires an x86-64 cpu, but only detected an xxxx...

  • Page 23: Password!

    Installing and configuring the skm kvm servers 23 scalar key manager 2.5 caution: extremely important: remember your password! if you change the password from the default and forget it, there is no way to retrieve it! each skm server has its own password. If you set them differently, you must reme...

  • Page 24

    24 installing and configuring the skm kvm servers quantum scalar key manager 2.5 quick start guide note: the default skm vm server ip address is: 192.168.20.4. 14 when finished press . A message lets you know there are no certificates loaded on the skm server. 15 press . The list of skm admin comman...

  • Page 25: (240Q)

    Installing tls certificates on the skm server for pre-skm 2.4 (240q) 25 scalar key manager 2.5 installing tls certificates on the skm server for pre-skm 2.4 (240q) tls certificates are required on the skm server. You can choose to use the quantum- provided tls certificates or install your own, as fo...

  • Page 26

    26 installing tls certificates on the skm server for pre-skm 2.4 (240q) quantum scalar key manager 2.5 quick start guide 7 press to continue. The list of skm admin commands displays. 8 at the command prompt, enter d to display/update tls communication certificates. The display/update tls communicati...

  • Page 27

    Installing tls certificates on the skm server for pre-skm 2.4 (240q) 27 scalar key manager 2.5 note: remember, you must repeat all preceding steps on the secondary skm server. 16 proceed to configuring your library for skm on page 38. Requirements for installing user-provided tls certificates when p...

  • Page 28: (240Q) Or Later

    28 installing tls certificates on the skm server for skm 2.4 (240q) or later quantum scalar key manager 2.5 quick start guide installing tls certificates on the skm server for skm 2.4 (240q) or later beginning with skm 2.4 (240q), it is now possible to self-generate library/skm tls communication cer...

  • Page 29

    Installing tls certificates on the skm server for skm 2.4 (240q) or later 29 scalar key manager 2.5 the following illustration shows the default values (in brackets) used: 2 when prompted, enter and re-enter a password that will be used during the pk12 file generation. Tls certificate generation is ...

  • Page 30

    30 installing tls certificates on the skm server for skm 2.4 (240q) or later quantum scalar key manager 2.5 quick start guide 3 complete the process by loading the certificates onto the skm servers and tape libraries using the procedures described in the user’s guide for the applicable libraries. • ...

  • Page 31

    Installing tls certificates on the skm server for skm 2.4 (240q) or later 31 scalar key manager 2.5 executing the script without using the -d option use the following procedure to generate certificates without using the -d option. This method requires you to enter certificate values. If desired, you...

  • Page 32

    32 installing tls certificates on the skm server for skm 2.4 (240q) or later quantum scalar key manager 2.5 quick start guide 4 at this time the only valid certificate digest is “sha1”, so press enter to accept the default value and continue. 5 enter your two-character country identifier. 6 enter yo...

  • Page 33

    Installing tls certificates on the skm server for skm 2.4 (240q) or later 33 scalar key manager 2.5 8 enter your company or organization name. 9 enter your organizational unit or section name. 10 the next three entries are common names for the tape libraries, skm primary server and skm secondary ser...

  • Page 34

    34 installing tls certificates on the skm server for skm 2.4 (240q) or later quantum scalar key manager 2.5 quick start guide 11 the last entry is optional: an email address that will be included with the certificate information. 12 when prompted, confirm that the displayed information is correct. •...

  • Page 35

    Installing tls certificates on the skm server for skm 2.4 (240q) or later 35 scalar key manager 2.5 13 when prompted, enter and re-enter a password that will be used during the pk12 file generation. A message informs you when certificate generation is complete. The location of the certificates ( /ho...

  • Page 36

    36 installing tls certificates on the skm server for skm 2.4 (240q) or later quantum scalar key manager 2.5 quick start guide names of the files to copy are listed on the final screen that informs you that certificate generation is complete. After you finish loading the certificates onto the skm ser...

  • Page 37

    Installing tls certificates on the skm server for skm 2.4 (240q) or later 37 scalar key manager 2.5 2 onscreen messages provide status as the quantum certificate bundles are generated using the default values, so no user input is required. (the generated bundle files are saved at /home/akmadmin/gene...

  • Page 38

    38 configuring your library for skm quantum scalar key manager 2.5 quick start guide configuring your library for skm all of the steps that follow deal with configuring your library for skm and generating data encryption keys. Depending on the size of your library, it may take up to 2.5 hours to com...

  • Page 39

    Configuring your library for skm 39 scalar key manager 2.5 4 configure the skm server ip addresses on the library. A from the library’s web client, navigate to the encryption system configuration screen. B enter the primary and secondary skm server ip addresses or host names in the fields provided. ...

  • Page 40

    40 configuring your library for skm quantum scalar key manager 2.5 quick start guide configuring the scalar i2000/i6000 tape library perform these steps, in order, on the scalar i2000/i6000 library only. See the library user’s guide or online help for detailed instructions on how to complete each of...

  • Page 41

    Configuring your library for skm 41 scalar key manager 2.5 6 save the library configuration. 7 proceed to backing up the servers on page 43. Configuring the scalar i3/i6 tape library perform these steps, in order, on the scalar i3 or i6 library only. Refer to the i3 or i6 documentation center for de...

  • Page 42

    42 configuring multiple libraries quantum scalar key manager 2.5 quick start guide data encryption keys are generated.As soon as you apply the skm server ip addresses, the library automatically triggers each skm server to generate a set of unique data encryption keys. The key generation process shou...

  • Page 43: Backing Up The Servers

    Backing up the servers 43 scalar key manager 2.5 backing up the servers every time you generate new data encryption keys, you must back up both servers before you begin using the keys to encrypt data. You must back up each server separately because each contains different data. If a server fails and...

  • Page 44

    For assistance, contact the quantum customer support center: usa: 1-800-284-5101 (toll free) or +1-720-249-5700 emea: +800-7826-8888 (toll free) or +49-6131-3241-1164 apac: +800-7826-8887 (toll free) or +603-7953-3010 worldwide: http://www.Quantum.Com/serviceandsupport about quantum quantum is a pro...