Dell PowerVault ML6000 Installation Seite 7

• If Failure appears in the Progress Window, the EKM system settings were not successfully configured.
Follow the instructions listed in the Progress Window to resolve any issues that occurred during the
operation.
6
Save the library configuration (for instructions, see the Dell PowerVault ML6000 User's Guide).
Step 4: Running EKM Path Diagnostics
Run EKM Path Diagnostics to make sure your tape drives and key servers are connected and running properly.
See Using EKM Path Diagnostics on page 7.
Backing Up Keystore Data
Due to the critical nature of the keys in your keystore, it is vital that you back up your keystore data on a non-
encrypted device so that you can recover it as needed and be able to read the tapes that were encrypted using
those encryption keys associated with that tape drive or library.
Using EKM Path Diagnostics
The EKM Path Diagnostics consists of a series of short tests to validate whether the key servers are running,
connected, and able to serve keys as required.
Run the Manual EKM Path Diagnostics any time you change the key server settings or library encryption
settings, and when you replace a tape drive. It is recommended that you test each drive that communicates with
key manager servers.
The diagnostics consists of the following tests:
NOTE:
The tape drive used for the test must be unloaded, ready, and online in order to run any of the tests.
• Ping — Verifies the Ethernet communication link between the library and the key servers. If the partition
in which the selected tape drive resides uses EKM server overrides, then the override IP addresses are tested
(see Setup > Encryption > Partition Configuration). If the partition does not use overrides, the default
system IP addresses are tested (see Setup > Encryption > System Configuration).
• Drive — Verifies the tape drive's path in the library (communication from library to tape drive sled and
from tape drive sled to tape drive). The tape drive must be unloaded, ready, and online in order to run this
test. If this test fails, the Path and Config tests are not performed.
• Path — Verifies that EKM services are running on the key servers. This test cannot run if the Drive test
fails.
•
Config — Verifies that the key servers are capable of serving encryption keys. This test cannot run if the
Drive test fails.
If any of the tests fail, try the following resolutions and run the test again to make sure it passes:
• Ping Test Failure — Verify that the key server host is running and accessible from the network to which
the library is connected.
• Drive Test Failure — Look for any tape drive RAS tickets and follow the resolution instructions in the
ticket.
• Path Test Failure — Verify that the key server is actually running and that the port/SSL settings match
the library configuration settings.
• Config Test Failure — Verify that the EKM server is set up to accept the tape drive you are testing.
There are two ways to perform the diagnostics:
• Manual EKM Path Diagnostics
• Automatic EKM Path Diagnostics
The Manual diagnostics differs from the Automatic diagnostics in the following ways:
7