Tape Library encrypts data autonomously - LTO Ultrium tape systems provide a hardware encryption function

With LTO Ultrium 4 and later tape drives installed, the tape library supports the tape drive hardware data encryption function. Tape drives are encrypted by hardware-based 256-bit Advanced Encryption Standard (AES) encryption. Backup data is encrypted after being compressed in the tape drive and recorded on the magnetic tape.

LTO Ultrium 4 and newer tape drives have encryption circuites.

To write encrypted data onto tape cartridges, the host first transmits encryption keys (*Note 3) to the tape library devices. The tape devices then issue "Write commands" and the encrypted data is written.

For decryption, the host transmits the same encryption key used at encryption to the tape library devices. The data is then decrypted and can be read as simple plain text.

This hardware controlled encryption generates almost no transmission performance degradation because LTO Ultrium tape drive encrypts data after compression.

In order to use the hardware encryption function of the tape drive, the Key Management Function Option (supported by ETERNUS LT140, LT260, LT270 S2) must be purchased separately or backup software that supports hardware encryption is necessary.

Product Requirements

Supported tape drivesETERNUS LT20 S2/LT20
ETERNUS LT40 S2/LT40
ETERNUS LT60 S2/LT60
ETERNUS LT140
ETERNUS LT260, LT250
ETERNUS LT270 S2/LT270
Required softwareBackup software that supports hardware encryption
Key Management Function Option
(supported by ETERNUS LT140, LT260, LT270 S2)
  • Note:
    Products/features/support content introduced on this page, are subject to subject without notice.

Further Information

Top of Page