No further action is required to decrypt a tape that was encrypted on the local system.
To decrypt a tape on a destination system other than the local system, you must first export the tape encryption keys from the local system and then import them to the destination system.
For information about importing and exporting tape encryption keys, refer to the Security Center Help.
|
Transport the tape encryption keys in a secure manner because access to these keys allows access to all the encrypted tapes. |
CautionTo export the tape encryption keys from the local system, the security administrator must first back up the tape encryption keys as previously described.
After the keys have been imported to the destination system, encrypted tapes from the source system can be decrypted on the destination system by using a simple COPY command. Library maintenance, together with the McpCryptoApi interface, determines the original key that was used to encrypt the tape, searches for that key among the installed tape encryption keys, and then uses the key to decrypt the tape.
| Note: | You can only encrypt tapes with the tape encryption keys that were created for your local system. Imported keys cannot be used to encrypt a tape. |
