******************************************************************* * IBM System Storage™ TKLM proxy code * * Version 1.1.0 * ******************************************************************* NOTE TO SERVICE – Reference RETAIN # N/A (C) Copyright International Business Machines Corporation 1999, 2010. All rights reserved. US Government Users Restricted Rights - Use, duplication, or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Note: Before using this information and the product it supports, read the general information in section 6.0 "Trademarks and Notices" in this document. Last Update: 10/16/2013 Please refer to corresponding Change History document for more information on new features and modifications. 1.0 Overview 2.0 Installation and Setup Instructions 3.0 Configuration Information 4.0 Unattended Mode 5.0 Web Sites and Support Phone Number 6.0 Trademarks and Notices 7.0 Disclaimer 1.0 Overview _____________ 1.1 Overview of this code This package contains the IBM DS TKLM proxy code for use in the DS3500, DS5020, DS5100 and DS5300 storage subsystems with Full Disk Encryption premium feature enabled. The proxy code is needed for the DS storage subsystem to contact the IBM Tivoli Key Life-cycle Manager (TKLM) for external disk encryption key management. The DS subsystem controller fw must be at version 7.70.38.00 and higher. 1.2 Limitations The minimum DS3500, DS5100, DS5300 and DS5020 controller firmware levels for this update is 7.70.38.xx. 1.3 Enhancements See corresponding Change History document for more information. 1.4 Level of Recommendation IBM considers this update to be required for all customers who want to use the IBM TKLM to manage the disk encryption key in the DS3500, DS5020, DS5100 and Ds5300 with Full Disk Encryption premium feature enabled. Please see the information about working with full disk encryption and using the DS TKLM Proxy Code security certificate key file in Version 10 or later of the IBM System Storage DS Storage Manager Installation and Host Support Guide for instructions on how to configure the IBM DS TKLM proxy code. 1.5 Dependencies This proxy code only support IBM TLKM V2. A valid installation of IBM TKLM v2 must be exist for this proxy code to work. In addition, the External key management feature of the IBM DS Full Disk Encryption (FDE) must also be enabled. Please see the information about working with full disk encryption and using the DS TKLM Proxy Code security certificate key file in Version 10 or later of the IBM System Storage DS Storage Manager Installation and Host Support Guide. IBM TKLM V2.0.1 is required for DS3500. ___________________________ 2.0 Installation and Setup ___________________________ Please see the information about working with full disk encryption and using the DS TKLM Proxy Code security certificate key file in Version 10 or later of the IBM System Storage DS Storage Manager Installation and Host Support Guide for instructions on how to configure the IBM DS TKLM proxy code ______________________________ 3.0 Configuration Information ______________________________ 3.1 There is no special configuration required. _____________________ 4.0 Unattended Mode _____________________ See the appropriate application tools for any possible unattended mode operations. _______________________________________ 5.0 WEB Sites and Support Phone Number _______________________________________ 5.1 IBM System Storage™ Disk Storage Systems Technical Support web site: http://www.ibm.com/systems/support/storage/disk 5.2 IBM System Storage™ Marketing Web Site: http://www.ibm.com/systems/support/storage/disk 5.3 IBM System Storage™ Interoperation Center (SSIC) web site: http://www.ibm.com/systems/support/storage/ssic/ 5.4 You can receive hardware service through IBM Services or through your IBM reseller, if your reseller is authorized by IBM to provide warranty service. See http://www.ibm.com/planetwide/ for support telephone numbers, or in the U.S. and Canada, call 1-800-IBM-SERV (1-800-426- 7378). __________________________ 6.0 Trademarks and Notices __________________________ The following terms are trademarks of the IBM Corporation in the United States or other countries or both: IBM DS3000 DS3500 DS4000 DS5000 FAStT System Storage™ the e-business logo xSeries pSeries HelpCenter Microsoft, Windows, and Windows NT are trademarks of Microsoft Corporation in the United States, other countries, or both. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the United states, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Linux is a registered trademark of Linus Torvalds. Other company, product, and service names may be trademarks or service marks of others. ________________ 7.0 Disclaimer ________________ 7.1 THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IBM DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE AND MERCHANTABILITY WITH RESPECT TO THE INFORMATION IN THIS DOCUMENT. BY FURNISHING THIS DOCUMENT, IBM GRANTS NO LICENSES TO ANY PATENTS OR COPYRIGHTS. 7.2 Note to U.S. Government Users -- Documentation related to restricted rights -- Use, duplication or disclosure is subject to restrictions set forth in GSA ADP Schedule Contract with IBM Corporation.