Sun StorageTek Crypto Key Management System
 
Oracle Key Manager
 

PLA-Support>Sun Systems>Sun_Other>Sun Collections>SN-OTH: TAPE-CAP VCAP
 

In this Document

Goal

Solution

Oracle Confidential PARTNER - Available to partners (SUN).
Reason: Procedure is intended to be performed by Oracle Field Engineer

Applies to:

Goal

 How to enroll LTO Tape Drives in Oracle Key Manager

Solution

 DISPATCH INSTRUCTIONS
   WHAT SKILLS DOES THE FIELD ENGINEER/ADMINISTRATOR NEED?: Knowledge of Oracle Key Manager and LTO tape drives
   TIME ESTIMATE: 60 minutes
   TASK COMPLEXITY: 3

FIELD ENGINEER/ADMINISTRATOR INSTRUCTIONS: Enroll LTO tape drive for use with Oracle Key Manager
   PROBLEM OVERVIEW: How to enroll LTO Tape Drives in Oracle Key Manager
   WHAT STATE SHOULD THE SYSTEM BE IN TO BE READY TO PERFORM THE RESOLUTION ACTIVITY?: LTO tape drive should be powered on
   WHAT ACTION DOES THE FIELD ENGINEER/ADMINISTRATOR NEED TO TAKE?:

Enable and Enroll LTO Tape Drives

For the Installers:
1.Configure and connect a laptop to an LTO tape drive.
2. Start the executable ltoVOP file.
3. Enter the default IP address (10.0.0.1) and click Connect (A).

Remember:
When enrolling HP LTO4 and IBM LTO tape drives into the OKM, you are actually enrolling the adapter card, not the actual tape drive.

Note: For HP LTO5 tape drives the ethernet port is integrated into the drive so the drive does get enrolled.
Therefore replacing the drive does not require re-enrollment, but replacing the adapter card or drive tray with a new adapter card does require re-enrollment

4. Set the drive Offline.
5. Select the Configure Drive tab.
This tab allows you to configure the drive to use settings other than the default settings currently in the drive.
6. Enter the new IP address, netmask, and gateway information for the drive.
7. Click Commit and respond “Yes” to the Set Drive Offline pop-up (if still online).
Be patient. The commit process may take from 30 seconds to 2 minutes to complete.
8. Click on the Service Drive tab to observe the commit process in the open display.
■During the commit process, the tape drive goes offline then IPLs to save the new settings to the adapter card.
■When the drive comes back online, it is now using the new IP address entered in Step 6.
■Depending on the IP address of the tape drive, you may also need to change the IP address of the laptop to connect to the network.

For the customer:

9. Enroll the tape drive with the OKM (Refer to step 9a if pass-phrase reset is needed):
■The tape drive and/or adapter card must be connected to the OKM network.
■The OKM must be able to communicate with the adapter card and tape drive.
Note – The Agent must already be created with a pass phrase assigned in the OKM before you can enroll the drive.
If you were to unenroll the Agent in situations—such as when turning encryption off—then you need to re-enroll the agent to turn encryption back on.
That same pass phrase must be re-entered or the agent must be recreated in the OKM before re-enrollment.
9a. Log onto OKM GUI, select Agents, Agent List.  Select Agent that needs to be re-enrolled. Click Details, Select Passphrase Tab, enter a Passphrase that will be used with VOP to enroll the drive. This passphrase can be same passphrase as used before or whatever Passphrase customer would like.
10. Enter the KMA Agent ID, KMA Service IP Address, and Passphrase.
11. Click the Enroll button. Be patient. The enroll process may take 30 seconds to 2 minutes to complete.
12. Click on the Service Drive tab to observe the enroll process in the open display.
13. Click Yes to place the drive online.
Click No if there is more you need to do, for example: upload firmware or run diagnostics.
14. Proceed to the next drive.

OBTAIN CUSTOMER ACCEPTANCE
   WHAT ACTION DOES THE FIELD ENGINEER/ADMINISTRATOR NEED TO TAKE TO RETURN THE SYSTEM TO AN OPERATIONAL STATE?: See above action plan

PARTS NOTE: N/A

REFERENCE INFORMATION: OKM Service Manual

This solution has no attachment