IBM System Storage TS1120 Tape Drive Model E05 supports encryption

Transcription

1 Hardware Announcement August 29, 2006 IBM System Storage TS1120 Tape Drive Model E05 supports encryption Overview The IBM System Storage TS1120 Tape Drive (machine type 3592, Model E05) has been enhanced to provide you the option of using drive based data encryption. This encryption capability is now standard on all new TS1120 Tape Drives and is a chargeable upgrade feature for existing installed TS1120 Tape Drives. The encryption capability includes drive hardware, as well as microcode additions and changes. Also being introduced is a new, separate IBM Encryption Key Manager component for the Java Platform (Encryption Key Manager) program that supports the generation and communication of encryption keys for the tape drives across the enterprise. This TS1120 Tape Drive encryption announcement supports the previous storage statements of direction, dated April 27, The TS1120-based encryption and associated Encryption Key Manager component are supported in a wide variety of operating system environments including z/os, i5/os, AIX, HP, Sun, Linux, and Windows. In addition, three different encryption management methods are supported: Application, System, or Library Managed. This encryption capability is supported when the TS1120 Tape Drive is integrated or attaches in the IBM System Storage TS3500 Tape Library, IBM System Storage TS1120 Tape Controller Model C06, IBM TotalStorage 3592 Tape Controller Model J70, IBM TotalStorage 3494 Tape Libraries, IBM TotalStorage C20 Silo Attach frame, and stand-alone environments. The TS1120 drive s encryption capability and its subsystem integration support help provide you with a flexible tape data encryption solution that supports encryption and key management across a variety of environments, supporting a single point of control for all encryption keys, and most importantly, can help customers protect tape data in a cost effective way. Key prerequisites The TS1120 Tape Drive is supported in a wide range of environments: IBM System z, System i, System p, System x, and can be used with a wide range of Linux on System z, Sun, and Hewlett Packard servers, and Linux-based servers, as well as Intel -compatible servers running Linux, Microsoft Windows 2000, or Windows Server A tape controller is required for attachment to ESCON or FICON channels on IBM mainframe servers. Refer to the Technical information section for details. Planned availability dates September 8, 2006: Open systems TS3500 Library, Application, and System Managed encryption. September 8, 2006: TS1120 Tape Drive Model E05 using System Managed Encryption with supported AIX servers. September 8, 2006: Encryption Key Manager on AIX, z/os, i5/os, and Linux. September 29, 2006: Application Managed Encryption support using Tivoli Storage Manager. October 27, 2006: z/os System Managed Encryption. This includes support on the TS1120 Tape Controller Model C06 (3592 C06), 3494 Models L10, L12, L14, L22 Tape Library Frames, 3592 Model J70, 3590 Model C10, 3952 Model F05, 3953 Model F05 and TS3500 Tape Library (3584 L23, D23, L22, D22). December 1, 2006: Encryption Key Manager on HP, Sun, and Windows At a glance IBM System Storage TS1120 Tape Drive encryption capability enhancements include: Drive hardware and microcode additions, and changes for TS1120 Tape Drive encryption A no charge encryption-capable feature number for new TS1120 Tape Drives An optional chargeable encryption feature number upgrade, that may contain refurbished parts, for installed TS1120 Tape Drives Encryption capabilities designed to work with the new Encryption Key Manager component Three encryption management techniques supported: System, Application and Library Managed TS1120 Tape Drive encryption supported for IBM System Storage tape subsystems and libraries A router for out-of-band key management support and Encryption Key Manager connectivity for Tape Controllers, Tape Frames, and Tape Subsystem Product number For details, refer to the Product number section in this announcement. This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM Asia Pacific IBM is a registered trademark of International Business Machines Corporation. AG

2 AP distribution: To all Asia Pacific countries for release. CTRY/Region Announced ASEAN * -- Yes Australia -- Yes Hong Kong -- Yes PRC -- Yes Macao -- Yes Taiwan -- Yes Korea -- Yes Japan -- Yes New Zealand -- Yes * Bangladesh, Brunei, Myanmar, Sri Lanka, India, Nepal, Indonesia, Malaysia, Philippines, Singapore, Thailand, Laos, Cambodia, Vietnam Description The TS1120 Tape Drive is a successor to the 3592 Tape Drive Model J1A and the 3590 Enterprise Tape Drive. The TS1120 Tape Drive is machine type 3592 and Model E05. It is designed for high-performance tape applications, including: High-speed data-save operations where backup windows are critical, and large amounts of data are archived to tape. Protection of tape data by high speed encryption for security or regulatory needs. Large-scale automated tape environments where performance and reliability are required. Large-scale mass data archive applications where massive amounts of data need to be quickly saved to tape for storage and later recall (examples include the seismic industry, data warehousing, and record management applications). The TS1120 Tape Drive is the second generation of a new family of tape products that are designed to help address the growing needs of both new and existing IBM tape customers across a wide range of environments. The TS1120 Tape Drive now includes: Larger capacity compared to the 3592 Model J1A, to help you reduce the number of cartridges required and floor space needed Smaller form factor compared to the 3590 Tape Drive, which can help reduce the automation foot print Dual-ported native switched fabric interface, designed to enhance the attachment flexibility High reliability, to help improve operations Additional performance and access improvements over the 3592 J1A Hardware tape encryption to protect tape data integration with the new Encryption Key Manager component Encryption The TS1120 Tape Drive is being enhanced to support encryption of data on a tape cartridge. New T1120 Tape Drives will be encryption capable and a chargeable upgrade will be available for currently installed TS1120 Tape Drives. The encryption capability is implemented through tape drive hardware as well as microcode additions and changes. All 3592 media, including WORM cartridges, can be encrypted. In addition, a new Encryption Key Manager program is designed to support encryption. The Encryption Key Manager program uses standard key repositories on supported platforms. This software will be required to be installed on a supported server and interface with the tape drive to support encryption in a System or Library Managed Encryption implementation. Note: With encryption enabled, the access time to data on the tape drive will increase. Also, the tape drive unload time will increase. This is due to the time needed to retrieve, read, and write the encryption key. Encryption will be available for System z and open systems environments. Three different methods of encryption will be supported as follows. Application Managed: The TS1120 Tape Drive will support Application Managed Encryption for open systems environments. The application will control the encryption process, and will generate and provide keys to the TS1120 tape drive. Tivoli Storage Manager is being enhanced to support this capability. Library Managed: Encryption by volume and drive policy will be supported. The user will set up and control the encryption through the library interface. Initially, this will be supported for or 3584 tape library in open systems environments. The Encryption Key Manager program will be required for this support. System Managed: With Systems Managed Encryption, the encryption policy will be passed between the server and the drives. This is the only vehicle for z/os environments and will require the Encryption Key Manager program. DFSMS will support the Encryption Key Manager component. Systems managed encryption will also be available for AIX servers. This support will require a new AIX tape device driver, as well as the Encryption Key Manager program. System Managed Encryption on open systems is in-band where tape drive requests to the Encryption Key Manager component travel over the Fibre Channel channels to the server hosting the EKM. Systems Managed Encryption on z/os has two different configuration options. First is in-band, where tape drive requests to the Encryption Key Manager component travel over the ESCON/FICON channels to the server proxy that is TCP/IP connected to the Encryption Key Manager. Second is out-of-band, where the tape controller establishes the communication to the Encryption Key Manager server over TCP/IP connections between the tape controller and the Encryption Key Manager server. A router is required for out-of-band and Encryption Key Management support and Encryption Key Manager connectivity for the TS1120 Tape Controller Model C06, the 3592 J70 Tape Controller, the 3952 F05 and 3953 F05 Tape Frames, the 3494 L10, L12, L14, L22 Tape Library Frame, and IBM TotalStorage 3590 C10 Subsystem. Product positioning The TS1120 Tape Drive is the successor to the 3592 Tape Drive Model J1A and the highly successful 3590 Enterprise Tape Drive. The TS1120 Tape Drive is supported in a wide range of environments including selected System z, iseries, AS/400, pseries, RS/6000, xseries, Sun, and Hewlett Packard servers, as well as Intel-compatible servers running Linux and Microsoft Windows 2000, or Windows Server It has significant potential performance and capacity benefits over the IBM 3590, as well as other half-inch tape drives such as the IBM 3480, 3490, or 3490E, and now supports data encryption on a tape cartridge for security and the customers regulatory needs. AG

3 Statement of general direction It is IBM s intent to support the following Systems Managed Encryption with the TS1120: z/vm V5.1 and V5.2 support of the TS1120 Tape Drive with encryption is planned for fourth quarter This includes transparent support for VM guests. z/vm support will require the Encryption Key Manager component running on another operating system other than z/vm using an out-of-band connection. z/tpf V1.1 support of the TS1120 Tape Drive with encryption is planned for the first half z/tpf support will require the Encryption Key Manager component running on another operating system other than z/tpf using an out-of-band connection. z/vse V3.1 support of the TS1120 Tape Drive with encryption is planned for first half It is also IBM s intent to support z/vse V4.1 (when made available) using Systems Managed Encryption with the TS1120. z/vse support will require the Encryption Key Manager component running on another operating system other than z/vse using an out-of-band connection. Linux on System z support (source code) for FICONand ESCON-connected TS1120 Tape Drives is intended to be provided in first half 2007 on developerworks linux390/index.html IBM will work with its Linux distribution partners to provide this function in future Linux on System z distribution releases or service updates. This future development is designed to help customers with these operating systems utilize the TS1120 Tape Drive to protect tape data. All statements regarding IBM s plans, directions, and intent are subject to change or withdrawal without notice. Any reliance on these Statements of general direction is at the relying party s sole risk and will not create liability or obligation for IBM. Product number Description Machine Model Feature Encryption Capable Refurb -- Field 3592 E Encryption Configuration -- Field 5596 Encryption Capable -- Plant 9592 Encryption Configuration -- Plant 9596 Router for EKM Attach 3592 J CU Encryption Configuration/Field 5595 CU Encryption Configuration/Plant 9595 Field Install J70 in 3952-F Router for EKM Attach 3592 C CU Encryption Configuration/Field 5595 CU Encryption Configuration/Plant 9595 Field Install C06 into 3952 F * Plant Install C06 in 3952 F * for Silo Field Install C06 in 3953 F * Plant Install C06 in 3952 F for 3494 Router for EKM Attach 3952 F Attach Additional CU to Router 5594 Router for EKM Attach 3953 F Router for EKM Attach 3494 L L12 L14 L22 Router for EKM Attach 3590 C Attach Additional CU to Router 5594 Encryption Configuration 3584 L L23 D22 D23 * This feature is already announced but the description has changed. Refer to: Reference information The IBM TotalStorage 3599 support for the TS1120 Tape Drive format in 3592 Data Cartridges in Hardware Announcement AG , dated October 11, 2005 The IBM TotalStorage 3953 Library Manager Model L05 and Tape Frame Model F05 in Hardware Announcement AG , dated May 10, 2005 VTS support of the 3592 Tape Drive, other functional enhancements, and 3494 Tape Library enhancements including increased open systems support in Hardware Announcement AG , dated October 5, 2004 Support of the 3592 WORM functionality and economy cartridges in the 3494 Tape Library in Hardware Announcement AG , dated April 27, 2004 The IBM TotalStorage Enterprise Tape Drive 3592 attachment in the IBM TotalStorage Enterprise Automated Tape Library Models L22, D22, and D24 in Hardware Announcement AG , dated September 9, 2003 The IBM TotalStorage Enterprise Tape Drive 3592 attachment in the IBM TotalStorage Silo Compatible Tape Drive Frame 3592 Model C20 in Hardware Announcement AG , dated September 9, 2003 The IBM TotalStorage Enterprise Tape Drive 3592 attachment to ESCON/FICON channels through the IBM System Storage TS1120 Tape Controller 3592 Model C06 in Hardware Announcement AG , dated May 9, 2006 The IBM TotalStorage Enterprise Tape Drive 3592 attachment to ESCON/FICON channels through the IBM TotalStorage Enterprise Tape Controller 3592 Model J70 in Hardware Announcement AG , dated September 9, 2003 The IBM TotalStorage Enterprise Tape Cartridge 3592 available with new models of the 3599 in Hardware Announcement AG , dated September 9, 2003 Trademarks System Storage, i5/os, System i, System z, System p, System x, FICON, iseries, and developerworks are trademarks of International Business Machines Corporation in the United States or other countries or both. AIX, z/os, TotalStorage, ESCON, Tivoli, AS/400, pseries, RS/6000, xseries, z/vm, and z/vse are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Intel is a registered trademark of Intel Corporation. Windows and Microsoft are trademarks of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. Linux is a trademark of Linus Torvalds in the United States, other countries or both. Other company, product, and service names may be trademarks or service marks of others. -3- AG

4 IBM Asia Pacific Announcement Supplemental Information August 29, 2006 Publications The following publications, including support of the TS1120 Tape Drive, are available now at Title IBM System Storage(TM) Enterprise Tape System 3592 Introduction and Planning Guide IBM TotalStorage(R) Silo Compatible Tape Frame 3592 Introduction, Planning, and User s Guide IBM System Storage Enterprise Tape System 3592 Operator Guide IBM Encryption Key Manager Component for the Java(TM) Platform Introduction, Planning and User s Guide Order number GA GA GA GA The IBM System Storage Enterprise Tape System 3592 Operator Guide (GA ) is shipped with the product. Additional copies will be available with the planned availability of that attachment. The IBM System Storage Enterprise Tape System 3592 Hardware Reference (GA ) will include the TS1120 Tape Drive and will be available after the planned availability. The Publication Notification System (PNS) is available by order number and product number. Customers currently subscribing to PNS will automatically receive notifications by . Customers who wish to subscribe, can visit the PNS Web site location at messages/welcome The publications listed on the notification can be ordered by calling the Pubs Support Group in Raleigh at , option 1. The IBM Publications Center Portal The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided, as well as payment options via credit card. Furthermore, a large number of publications are available online in various file formats, which can currently be downloaded free of charge. Note that PNS subscribers most often order their publications via the Publications Center. The following publications are available in the languages indicated. If they are updated to include the announced features, those updates will be available by September, Order Title number Language IBM System Storage GA English Enterprise Tape G Chinese -- Simplified System 3592 GA Japanese Introduction and Planning Guide IBM TotalStorage GA English Enterprise AA Japanese Tape System 3592 Operator Guide IBM TotalStorage Silo Compatible GA English Tape Frame 3592 GA Japanese Introduction, Planning, and User s Guide IBM Encryption GA English Key Manager Component for the Java Platform Introduction, Planning, and User s Guide Services IBM Integrated Technology Services IBM services include business consulting, outsourcing, hosting services, applications, and other technology management. These services help you learn about, plan, install, manage, or optimize your IT infrastructure to be an On Demand Business. They can help you integrate your high-speed networks, storage systems, application servers, wireless protocols, and an array of platforms, middleware, and communications software for IBM and many non-ibm offerings. IBM is your one-stop shop for IT support needs. For details on available services, contact your IBM representative or visit For details on available IBM Business Continuity and Recovery Services, contact your IBM representative or visit For details on education offerings related to specific products, visit This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM Asia Pacific IBM is a registered trademark of International Business Machines Corporation. AG

5 index.html Select your country, and then select the product as the category. Technical information EMC conformance Taiwan BSMI CNS13438 (Taiwan EMC Standard) ACA C-Tick (Australia and New Zealand) Specified operating environment Physical specifications TS1120 Tape Drive canister: Width: mm (7.75 in) Depth: 464 mm (18.26 in) Height: 92.7 mm (3.65 in) Weight: 5.7 kg (12 lb 7 oz) 1 1 When mounted in a rack, up to four drive canisters can be mounted in two cradles on a shelf that requires 10 EIA of rack space. The weight of the rack-mount slides and shelf, two cradles, power supplies, and four tape drives is 69.2 kg (152 lb 7 oz). To assure installability and serviceability in non-ibm industry-standard racks, review the installation planning information for any product specific installation requirements. Operating environment Temperature: 16 to 32 C (60 to 90 F) in operation (media in use) Relative humidity: 20% to 80% non-condensing (limited by media) Maximum wet bulb temperature: 23 C (73.4 F) Individual drive: Heat output: 46 W (157 Btu/Hour) Electrical power: 4.8 amps at +5 volts; 1.6 amps at +12 volts In a cradle with ac power supply: Caloric value: 307 Btu/Hour per drive Electrical power: 0.1 kva per drive Leakage current: 0.63 ma per drive power supply Inrush current: 30 amps per drive power supply Operating current: amps per drive at 200 V ac amps per drive at 100 V ac Capacity of exhaust: 0.34 Cubic meter/min (12 CFM) per drive Noise level: Bels idle Bels operating Hardware requirements TS1120 Tape Drive Each TS1120 Tape Drive comes with dual-ported switched fabric 4-Gbps Fibre Channel attachments, for attachment to multiple servers or a single server with redundancy. It can be attached to IBM System i, i5 and IBM eserver iseries, AS/400, System p, p5 and pseries, RS/6000, RS/6000 SP systems, System z9 and zseries servers, System x and xseries, Netfinity, and non-ibm servers, workstations, and personal computers that support Fibre Channel interfaces. It can also attach to the TS1120 Tape Controller Model C06, 3592 Tape Controller Model J70, TS7700 Virtualization Engine, or 3494 VTS Models B10 or B20 for attachment to ESCON or FICON channels on IBM System z9, zseries, or S/390. For the latest details on specific hardware, software, and Fibre Channel support for the TS1120 Tape Drive, refer to the following Web site /interop.html TS3500 or 3584 Tape Library installations The TS1120 Tape Drive may be installed and is supported in the IBM System Storage TS3500 Tape Library Models L23, D53, L22, and D52. Support for TS1120 encryption function requires a minimum level of microcode firmware level and is a customer s responsibility to load, configure, and maintain on the TS3500 Tape Library. Feature number 9900 (Encryption Configuration) should be ordered on Tape Library. Customers will need to download the latest version of library firmware Tape Library and 3953 Library Manager support TS1120 encryption support for tape drives in an Enterprise Tape Library 3494 or drives attached via a 3953 Library Manager requires a minimum level of microcode firmware in the library manager. The level of microcode firmware required will be shipped the first time the customer orders FC5595 or when they order feature number 9595 and the 3592 Tape Controller is not located in a customer-owned rack (feature number 4641). Installation of this firmware can also update the drive microcode firmware on any installed open-system attached 3592 Model J1A Tape Drive, or TS1120 Tape Drive. With this support, encryption, WORM, and standard tape cartridges in both sizes can be intermixed within the same tape library or a common tape cartridge scratch pool. The minimum level of microcode firmware will be the LM534.xx code. Media Interchange Toleration support Non-IBM 3494 or 3584 open systems installations Support for the TS1120 encryption function installed in either a 3592 C20 Silo Compact Frame or a 19-inch rack open systems attached, require a minimum level of microcode firmware for any 3592 J1A Enterprise Tape Drive and/or TS1120 Tape Drive where the customer intends to use tape cartridges from a common tape cartridge scratch pool. The minimum level of microcode firmware will be the D3I0_851 for the 3592 J1A Enterprise Tape Drive and D3I1_919 for the TS1120 Tape Drive (3592 E05), or may be ordered as follows: 3592 J1A Enterprise Tape Drive support: Feature number 0500 Drive Microcode Update TS1120 Tape Drive (3592 E05) support: Feature number 0500 Drive Microcode Update AG

6 IBM Tape Controller installations Support for the TS1120 encryption function, installed in any IBM controller attachment, requires a minimum level of microcode firmware for any 3592 J70 Enterprise Tape Controller, TS1120 Tape Controller (3592 C06), or 3590 A60 Enterprise Tape Controller where you intend to use tape cartridges from a common tape cartridge scratch pool. The minimum level of microcode firmware will be the x for the 3592 J70 Enterprise Tape Controller or 1.21.x.x for the TS1120 Tape Controller (3592 C06), and/or for the 3590 A60 Enterprise Tape Controller. The level of microcode firmware required for the TS1120 Tape Controller (3592 C06) and the 3592 J70 Enterprise Tape Controller will be shipped the first time the customer orders FC5595 or when they order FC9595. To obtain the microcode required for the 3590 A60 Enterprise Tape Controller feature number 0520 Function Enhancement Field should be ordered. Software requirements: Support for the TS1120 Tape Drive with encryption is provided in i5/os, AIX, HP-UX, Linux, Sun, and Microsoft Windows 2000, or 2003 operating system environments. Support for the z/os and operating system environments is available through the 3592 Model J70 Controller or TS1120 Tape Controller. The installation of a TS1120 Tape Drive with encryption may require code updates for System z, System i, System p and supported open systems device drivers or storage management software. Per the Solutions Assurance Product Review (SAPR) Guide, the account team or Business Partner should confirm that the customer checks the appropriate PSP buckets for System z environments or the equivalent support levels required for their particular software environment prior to the installation of the TS1120 Tape Drive with encryption. A Solutions Assurance call is required at a minimum for the installation of the first new TS1120 Tape Drive with encryption activated in an account. An update of the open systems device drivers can be obtained via anonymous FTP from Look under the directory storage/devdrvr. For details on supported software versions and release levels for the TS1120 Tape Drive, as well as hardware support information, refer to the following Web site /interop.html Three modes of encryption management are supported: System Managed (available for z/os and AIX only), Library Managed (available for AIX, i5/os, Linux, Linux on System z FCP connected tape drives, HP, Sun and Windows) and Application Managed (IBM Tivoli Storage Manager only). System z The TS1120 Tape Drive with encryption enabled is supported for attachment to ESCON and FICON channels on System z servers. z/os support of System Managed Encryption requires: z/os and z/os.e V1R5, or later z/os V1R4 with z/os V1R4 z990 Exploitation Support feature z/os.e V1R4 with z/os.e V1R4 z990 Coexistence Update feature the z/os system z/os support of the TS1120 Tape Drive with encryption is planned for October 27, 2006 (z/os V1R6 and V1R7), November 17, 2006 (z/os V1R8), and February 2007 (z/os V1R4 and V1R5). For z/os V1R6 and V1R7, refer to enabling APAR OA15685, and for z/os V1R8, refer to enabling APAR OA An enabling APAR will also be available for z/os V1R4 and V1R5. For additional information on the support being provided, refer to the 3592 PSP bucket. If the Encryption Key Manager is run on the z/os system, then one of the following IBM SDK for Java 2 must be installed: IBM SDK for z/os, Java 2 Technology Edition, V1.4, 5655-I56 (at the SDK1.4.2 SR6, or later level) IBM 31-bit SDK for z/os, Java 2 Technology Edition, V5.0, 5655-I98 (at the SDK5 SR3, or later level) In addition, it is IBM s intent to support the following Systems Managed Encryption with the TS1120: z/vm V5.1 and V5.2 support of the TS1120 Tape Drive with encryption is planned for fourth quarter This includes transparent support for VM guests. The z/vm support will require the Encryption Key Manager component running on another operating system other than z/vm using an out-of-band connection. z/tpf V1.1 support of the TS1120 Tape Drive with encryption is planned for first half The z/tpf support will require the Encryption Key Manager component running on another operating system other than z/tpf using an out-of-band connection. z/vse V3.1 support of the TS1120 Tape Drive with encryption is planned for first half It is also IBM s intent to support z/vse V4.1 (when made available) using Systems Managed Encryption with the TS1120. The z/vse support will require the Encryption Key Manager component running on another operating system other than z/vse using an out-of-band connection. System i System i supports Library Managed Encryption in conjunction with tape library. System i support of Library Managed Encryption on the TS3500 requires: i5/os V5.2, or later tape library The Encryption Key Manager is supported on i5/os V5.3, or later. If the Encryption Key Manager component is run on i5/os, then IBM Developer Kit for Java Java Developer Kit 5.0 (5722-JV1) is required. i5/os Library Managed Encryption support is planned for System p System p supports System Managed Encryption and Library Managed Encryption in conjunction with the -3- AG

7 TS3500 tape library, and Application Managed encryption with Tivoli Storage Manager. AIX V5.2, or later is required for Application Managed, System Managed, and Library Managed Encryption. System Managed Encryption with AIX requires: the AIX system The ATAPE device drivers must be installed, updated and utilized. It may be downloaded from the following Web site ftp://ftp.software.ibm.com/storage/devdrvr/aix/ AIX System Managed encryption support is planned for Library Managed Encryption with AIX requires: AIX Library Managed Encryption support is planned for If the Encryption Key Manager is run on a System p server with AIX: AIX V5.2, or later is required One of the following two IBM Java SDK s should be updated to include the latest version of the Encryption Key Manager: Java SDK 5 (31 and 64 bit) Java SDK (31 and 64 bit) Updates to the AIX Java SDK may be obtained at the following Web site jdk/aix/index.html Linux on System z Library Managed Encryption is available for System z servers connected to via FCP, running one of the following Linux on System z distributions: SUSE Linux Enterprise Server 9 (SLES 9) Red Hat Enterprise Linux (RHEL 4) Library Managed Encryption with Linux on System z requires: If the Encryption Key Manager is run on a Linux on System z partition, then one of the following Java 2 SDKs should be installed and updated: Java 2 Standard Edition SDK 5 Java 2 Standard Edition SDK Updates to the Linux Java SDK may be obtained at the following Web site jdk/linux/download.html Library Managed Encryption support of the TS1120 Tape Drive attached via FCP to a Linux on System z partition is planned to be available In addition, it is IBM s intent to support Systems Managed Encryption for Linux on System z (source code) for FICON-connected and ESCON-connected TS1120 Tape Drives. This is intended to be provided in the first half of 2007 on developerworks linux390/index.html IBM will work with its Linux distribution partners to provide this function in future Linux on System z distribution releases or service updates. HP systems HP-UX supports Library Managed Encryption with the TS3500. Library Managed Encryption with HP-UX requires: HP-UX 11.0, 11i, 11.23Pl Library Managed Encryption of HP servers is planned for To run the Encryption Key Manager on HP-UX, the IBM TotalStorage Productivity Center Limited Edition (TPC-LE), licensed program product 5608-VC6 is required and is planned for December 1, Sun systems Sun Solaris supports Application Managed and Library Managed Encryption with. Library Managed Encryption with Sun Solaris requires: Sun Solaris 8, 9 and 10 Library Managed Encryption of Sun servers is planned for To run the Encryption Key Manager on Sun Solaris, the IBM TotalStorage Productivity Center Limited Edition (TPC-LE), licensed program product 5608-VC6 is required and is planned for December 1, Linux System x and other Intel -based or AMD Opteron-based Linux servers and System p servers support Application Managed and Library Managed Encryption on. Library Managed Encryption requires: Red Hat Enterprise Linux 4 (REHL 4) SUSE Linux Enterprise Server 9 (SLES 9) Asianux 2.0 If the Encryption Key Manager component is run on Linux, then one of the following two Java 2 SDKs should be installed and updated Java 2 Standard Edition SDK 5 Java 2 Standard Edition SDK AG

8 Updates to the Linux Java SDK may be obtained at the following Web site linux/download.html Library Managed Encryption is planned for Windows systems Application Managed and Library Managed Encryption is supported on Windows with Tape Library. Library Managed Encryption requires: Windows 2000 or 2003 A TS3500 Tape library Library Managed Encryption of Windows servers is planned for To run the Encryption Key Manager component on Windows, the IBM TotalStorage Productivity Center Limited Edition (TPC-LE), licensed program product 5608-VC6 is required and is planned for December 1, Application software Tivoli Storage Manager supports Application Managed Encryption on September 29, Compatibility The TS1120 Tape Drive is read and write compatible with the 3592 Model J1A Tape Drive. The TS1120 Tape Drive can read and append to cartridges written by the 3592 Model J1A Tape Drive. The TS1120 Tape Drive can write cartridges in a 3592 Model J1A format that can be read and appended to by the 3592 Model J1A Tape Drive. The TS1120 Tape Drive cannot read cartridges written by the 3590 or Cartridges written by the TS1120 Tape Drive cannot be read by the 3590 or Even though the cartridges are similar in size, they contain different media, and thus are not interchangeable. The TS1120 Tape Drive can be attached to the same 3592 Model J70 or C06 Controller, TS7700 Virtualization Engine, or 3494 VTS Models B10 or B20 with 3592 Model J1A Tape Drives. Limitations Although multiple systems may be attached to a TS1120 Tape Drive, the systems cannot use the drive simultaneously. The TS1120 Tape Drive can only be varied online to one system at a time. TS1120 Tape Drives cannot be attached to the same 3592 Model J70 Controller with 3590 Tape Drives. TS1120 Tape Drives are not supported for attachment to a 3590 Controller Model A60, A50, or A00. TS1120 Tape Drives will operate in J1A emulation mode when they are attached to the same 3592 J70 or C06 Controller with 3592 Model J1A Tape Drives. This mode is set automatically by the microcode. In this mode, the TS1120 Tape Drives will read and write only in the J1A format at the J1A capacity and approximate performance ratings. This configuration requires J70 code level xx, or later and Library Manager 532.xx, or later. Under z/os, with system-managed tape support, TS1120 Tape Drives that are encryption enabled are not supported under the same 3592 J70 or C06 Controller with TS1120 Tape Drives that are not encryption enabled. With our system-managed tape support, though a mix of TS1120 Tape Drives can exist in the library, under the same control unit, the TS1120 Tape Drives need to be homogeneous and support the same capabilities. TS1120 Tape Drives attached to a TS7700 Virtualization Engine or 3494 VTS Model B10 or B20 will operate in J1A emulation mode. This mode is set automatically by the microcode. In this mode, the TS1120 Tape Drives will read and write only in the J1A format at the J1A capacity and approximate performance ratings. This configuration requires VTS code x, or later, and Library Manager 532.xx or higher J1A Drives attached to the 3494 VTS Models B10 or B20 cannot be replaced by TS1120 Tape Drives. The VTS and TS7700 do not support Capacity Scaling of cartridges. The VTS and TS7700 do not support the enabled TS1120 Tape Drive encryption feature. Currently, the TS1120 Tape Drives, running under OS/400 applications, can read J1A format but can not write J1A format. TS1120 Tape Drives attached to z/tpf are in J1A mode. Planning information Customer responsibilities: Installation of the Encryption Key Manager component is a customer responsibility. Detailed installation and configuration information is contained in the IBM Encryption Key Manager Component for the Java Platform Introduction, Planning and User s Guide (GA ). Physical planning is a customer responsibility. Current levels of the open systems device drivers should be obtained to ensure the TS1120 Tape Drive is supported. The 3592 Tape Controller Model J70, TS1120 Tape Controller, TS3500 Tape Library, and 3494 Tape Library may require subsystem microcode updates by the IBM service representative for the proper installation and operation of attached TS1120 Tape Drive with encryption. Inform your IBM representative to refer to TS1120 Tape Drive maintenance information for information on these requirements so they may be incorporated into your installation planning. Detailed physical planning information for the TS1120 Tape Drives is in the IBM System Storage TS1120 Tape Drive and Controller Introduction and Planning Guide (GA ). Cable orders: Appropriate Fibre Channel cables should be ordered for each tape drive. Also refer to the Fibre Channel Cables section of the Special Feature Codes in the 3592 Model E05 Sales Manual for Fibre Channel cable information. Packaging Number Product Shipment group of boxes TS1120 E05 TS1120 Tape Drive 1 Maintenance Manual Power cord (for rack -5- AG

9 Supplies or frame attachment) Fibre Channel cables as ordered One data cartridge per subsystem One cleaning cartridge per subsystem For end users and remarketers Labeled, initialized, or bulk data media for the TS1120 Tape Drive can be ordered directly through AAS using machine type Refer to the 3599 Sales Manual. For information about IBM branded media, refer to The part numbers for additional supplies are: IBM part number 18P P7535 Supply item IBM TotalStorage Enterprise Tape Cartridge 3592 (Data) IBM TotalStorage Enterprise Tape Cartridge 3592 (Cleaning) System Storage, iseries, System i, SP, System p, System x, System z9, Virtualization Engine, FICON, i5/os, System z, and developerworks are trademarks of International Business Machines Corporation in the United States or other countries or both. TotalStorage, AS/400, pseries, RS/6000, xseries, zseries, Netfinity, ESCON, eserver, S/390, AIX, z/os, Tivoli, z/vm, z/vse, and OS/400 are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Intel is a registered trademark of Intel Corporation. Microsoft and Windows are trademarks of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. Linux is a trademark of Linus Torvalds in the United States, other countries or both. Other company, product, and service names may be trademarks or service marks of others. Note: The 3592 data cartridge has servo tracks written on it. These tracks enable the tape drive to accurately position the read/write head with respect to the media while the tape is in motion. If these servo tracks are damaged or removed (such as by Degausing), the cartridge is no longer useable. Security, auditability, and control This product uses the security and auditability features of host hardware, host software, and/or application software to which it is attached. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communications facilities. Terms and conditions Feature section: Feature number 5592 for this machine is manufactured from parts that are new or refurbished by IBM. MES discount applicable: Equal to the volume commitment discount Field installable feature: Yes Warranty period: One year Feature 5592 is manufactured from parts that are refurbished. Regardless, IBM s standard warranty terms apply. Customer setup: No Machine code: base machine. Same license terms and conditions as Prices For all local charges, contact your IBM representative. Trademarks AG