Enabling Tape Encryption

To enable tape encryption, perform the following steps:

  1. Create a tape encryption keyset through the MCP Cryptographic Services Manager module of Security Center.

    For information about creating tape encryption keys, refer to the Security Center Help.

  2. Set the LMENCRYPT system option to AESGCM, AES256, or TDES to encrypt all tapes using Media Encryption Version 2. Alternatively, you can modify the appropriate COPY statements to include the ENCRYPT keyword.

     Caution

    Immediately after creating the tape encryption keys, create a backup copy of the tape encryption keys. For more information about backing up the tape encryption keys, refer to the Security Center Help.

Prev  Up  Next
Best Practices  Home  Enabling Tape Decryption