Skip to main content

Tape Library encrypts data autonomously - LTO Ultrium tape systems provide a hardware encryption function

LTO Ultirium4, and later LTO tape cartridges support a function which will encrypt data using the AES -256 bit encryption method (*Note 1). It then writes the encrypted data onto the tape cartridges (*Note 2). This function keeps data secure from media theft, loss and unauthorized access.

*Note 1 : Encryption technology standard of the U.S. National Institute of Standards and Technology (NIST).
*Note 2 : Ultrium 4 and newer tape cartridges can be encrypted.

Hardware encryption function

LTO Ultrium 4 and newer tape drives have encryption circuites.

To write encrypted data onto tape cartridges, the host first transmits encryption keys (*Note 3) to the tape library devices. The tape devices then issue "Write commands" and the encrypted data is written.

For decryption, the host transmits the same encryption key used at encryption to the tape library devices. The data is then decrypted and can be read as simple plain text.

This hardware controlled encryption generates almost no transmission performance degradation because LTO Ultrium tape drive encrypts data after compression. As a result, near-native performance of 160Mbit/s (uncompressed) is achieved when using LTO Ultrium 6 tape drives.

No extra software or external encryption devices are required.

A robust AES-256 bit algorithm is used (The encryption key is a 256bit (32Byte) pass phrase).

*Note 3: An Encryption Key is assigned to each volume pool, VOL, or backup job. Assignment units will differ depending on the backup software used.

ETERNUS LT260 and LT270 S2 have an "Encryption Key Management Option" to manage the encryption key directly on the tape library.

Product Requirements

Supported Tape Libraries LT20 S2, LT40 S2, LT60 S2, LT260, LT270 S2, LT250, LT270

Note: Products/features/support content introduced on this page, are subject to subject without notice.