IBM System Storage Tape Encryption Solutions

Readers' comments

Readers' comments (5) 

lockedThis discussion is now locked

Posted by Mr. Hans Staal on 21 September 2009 at 6:45

In section 4.6.4 (part TS3200 and TS3100) FC9900 is mentioned as a prerequisite.
This feature is no Longer Available as of December 26, 2008.
This could be the same for other libraries.

Posted by Clayton Buck on 25 September 2009 at 10:01

The following is from the EKM download page:

EKM should no longer be downloaded for new tape encryption installations. EKM can still be downloaded by existing EKM customers that have previously implemented EKM, or by i5OS customers who want to run their key manager on i5OS.

Tivoli Key Lifecycle Manager (TKLM) is IBM’s strategic new platform for storage and delivery of encryption keys to encrypting storage end-point devices.

Posted by Clayton Buck on 25 September 2009 at 10:02

IBM® Tivoli® Key Lifecycle Manager for z/OS® was announced February 10, 2009 with planned availability March 6, 2009

Posted by Mr. Emmanuel Wittenberg on 4 February 2011 at 11:14

There is a known issue with the TKLM key rollover feature.

Key rollovers are ignored by System i tape hardware - the tape hardware will always request the key used to initialize the loaded tape volume, regardless of the current active key group.

Although this issue could easily result in customers losing access to their data stored on encrypted tapes, there seems to be no effort on the part of IBM to a) alert customers to this issue or b) come up with a fix.

Posted by Alex Osuna on 15 February 2011 at 14:16

A update has been submitted for TS3200, TS3100 encryption requirments.


Publish Date
14 May 2009

Last Update
15 February 2011

(based on 3 reviews)



IBM Form Number