Sun StorageTek Crypto Key Management System
 
Oracle Key Manager
 

PLA-Support>Sun Systems>Sun_Other>Sun Collections>SN-OTH: TAPE-CAP VCAP
 

In this Document

Goal

Solution

Oracle Confidential PARTNER - Available to partners (SUN).
Reason: Procedure is intended to be performed by Oracle Field Engineer

Applies to:

Goal

 How to enroll T-Series Tape drive in Oracle Key Manager

Solution

 DISPATCH INSTRUCTIONS
   WHAT SKILLS DOES THE FIELD ENGINEER/ADMINISTRATOR NEED?: Knowledge of Oracle Key Manager and T-Series tape drives
   TIME ESTIMATE: 60 minutes
   TASK COMPLEXITY: 3

FIELD ENGINEER/ADMINISTRATOR INSTRUCTIONS: Enroll T-Series tape drive
   PROBLEM OVERVIEW:  How to enroll T-Series Tape drive in Oracle Key Manager
   WHAT STATE SHOULD THE SYSTEM BE IN TO BE READY TO PERFORM THE RESOLUTION ACTIVITY?: T-Series Tape drive should be powered on
   WHAT ACTION DOES THE FIELD ENGINEER/ADMINISTRATOR NEED TO TAKE?:

How to enroll T-Series Tape drive in Oracle Key Manager

To obtain the drive data for each tape drive:

1.Using the VOP, connect to and power-on each tape drive.
2. Record the last eight digits of the tape drive serial number.
■Select: File ➪ Connect to Drive
■Select: Retrieve ➪ View Drive Data ➪ Manufacturing
3. Request an Encryption Key File:
a.Log in to the Applications Web site at: https://crcapplications.us.oracle.com/keyswebapp/
b. Select Request an Encryption key.
4. Complete the Encryption Request form.
a.First name, last name, and e-mail address are automatically included.
b. Provide a site ID and order number.
c. Select the tape drive type (T10000A, T10000B, or T9840D).
d. Complete the serial number for the selected tape drive.
e. Add any optional remarks and click Request Key File.
After submitting the Encryption File Request a prompt displays to download the file. This file contains the drive data you need to enable and enroll the drive.

Activate and Enroll the Tape Drives

For the installer:
1.Configure and connect the laptop with the drive data file structure to the:
■Tape drive—private network—using an Ethernet switch and standard cable
(use the assigned IP addresses for the tape drives)
■Tape drive—direct connect—using a cross-over Ethernet cable
(use the default IP address 10.0.0.1)
2. Launch VOP and connect to a specific tape drive.
3. On the VOP main screen:
■Take the drive offline.
■Pull down the Configure menu.
■Select Drive Data.
4. Click the button and a File Open screen appears.
a. Navigate to the drive data file
structure and select the folder for that
tape drive.
b. Click the button. 
The tape drive reboots.
c. After the drive reboots, take the drive
offline from the VOP.

Enroll the Tape Drives

For the customer:
1.After the drive reboots:
■Take the drive offline.
■Pull down the Configure menu.
■Select Drive Data.
2. Complete the Configure Drive Parameters, notice the button is gone.
Enter the OKM values for:
Agent ID:
Pass Phrase:
IP address of a KMA in the same site as the drive
3. Click on the Commit button. The tape drive will reboot again.
4. After the drive reboots, select the Configuration menu.
Drive Settings screen shows the drive is enrolled and needs media keys.

OBTAIN CUSTOMER ACCEPTANCE
   WHAT ACTION DOES THE FIELD ENGINEER/ADMINISTRATOR NEED TO TAKE TO RETURN THE SYSTEM TO AN OPERATIONAL STATE?: See above action plan

PARTS NOTE: N/A

REFERENCE INFORMATION: OKM Service Manual
   

This solution has no attachment