4 Configuring the Library

This this section covers how to change the library configuration at any time after the initial installation configuration. For initial installation configuration, see "Configure the Library After Powering-on for the First Time".

Set the Time, Network Address, Library Settings, and Encryption

Use the configuration wizard to change the library time, network parameters, library settings (such as auto cleaning, mailslots, partitioning, and so on), and encryption.

Run the Configuration Wizard

  1. From the remote interface, select Configuration in the left menu.

  2. Click Configure Configure icon.

  3. Within the Configuration Wizard, select each configuration task that you need to perform, and then click Next. Proceed to the relevant sections:

Note:

You cannot configure the network interfaces and encryption simultaneously.

Configure the Network Interfaces

You can configure the library's two local area network interfaces:

  • Network Port 1 — connects browser-based, remote user interface clients to the interface server on the library.

  • Network Port 2 — a second network connection for service use or for library managed encryption (LME) for OKM communication.

Before deciding on a configuration, review the "Behavior of Port 1 and Port 2" and consult with your network administrator. Support for IPv6 and local addressing requirements can vary from site to site.

Configure Network Interfaces Task 1: Verify Job Activity and Launch the Wizard

  1. Check the activity log for active jobs, such as tape moves or mounts. Never change the network configuration during active jobs, if at all possible.

  2. If any tape jobs are active, wait for them to complete before continuing. You may want to take the library offline before configuring to prevent host activity.

  3. Run the Configuration Wizard. Select Configure Network Settings.

Configure Network Interfaces Task 2: Configure Network Port 1

The library supports either both IPv6 and IPv4 (dual-stack mode) or IPv4-only configuration. In dual-stack mode, the library continues to recognize IPv4 addresses while adding the ability to use hexadecimal IPv6 addresses.

  1. Enter the desired library name in the Host Name field.

    Valid host names contain characters in the ranges [A-Z], [a-z], and [0-9], plus the hyphen (-). A hyphen cannot be the first or last character in the host name. Spaces and underscores (_) are not supported.

  2. From the "Configure Network for" drop-down list select either:
    IPv4 only or IPv4 and IPv6

  3. For IPv4 select either:

    • Static — You must enter the Address, Netmask, and Gateway. In most cases, you will want to choose Static so that library interface clients can always find the server at a stable, well-known network location.

    • DHCP — A DHCP server must be running on your network to use this setting.

  4. For IPv6 select either:

    • Static — You must enter the Address, Prefix Length, and Gateway. In general, if your DNS (Domain Name Service) supports IPv6 addresses, select Static so that library interface clients can always find the server at a stable, well-known network location.

    • Stateless (SLAAC) — If DNS does not support IPv6 addresses, select Stateless (SLAAC). With a stateless address, library interface clients can find the server at an address based on the unique MAC (media access control) address of the network interface card in the robot/controller assembly. A stateless address will not change unless the robot has to be replaced

    • DHCPv6 — If a DHCPv6 server is available on your network, you can select DHCPv6. Be aware the network address of the library user interface will change.

  5. Click Next.

Configure Network Interfaces Task 3: Configure Network Port 2 (optional)

With library code 3.50 and above, you can configure Network Port 2 for library managed encryption (LME). Configuring Port 2 will force LME through Port 2 only. Leaving the Port 2 configuration set to default will force LME through Port 1 only.

IMPORTANT:

Do not configure Port 2 for any other use than with LME, otherwise you may encounter issues. If you are not using LME, Oracle recommends that you leave Port 2 set to the defaults. See "Behavior of Port 1 and Port 2" for more information.

  1. From the Network Port 2 list, select On or Off.

  2. For IPv4 select either: Static or DHCP (see Configure Network Interfaces Task 2: Configure Network Port 1 for a description of these options).

    The library supports Port 2 being on the same subnet as KMA IPv4 addresses. Entering a gateway is not required if Port 2 and the KMA are on the same subnet. You should enter a gateway that can reach all OKM cluster KMA's.

    Note:

    You should configure Port 2 to be on a different network than Port 1 to create a secure and private connection to pass the encryption keys between the library and the OKM cluster.

  3. Click Next.

Set the Library Date and Time

  1. Run the Configuration Wizard. Select Set the Library Date and Time.

  2. Select the Time Zone and Closest City or Region from the drop-down lists. Click Next.

  3. Either set the time Manually or use NTP:

    • Manually — Enter the date using the format mm/dd/yyyy (month/day/year). Enter the time using the format hh:mm:ss (hour:minute:seconds).

    • Network Time Protocol — Enter the addresses of up to three NTP servers.

  4. Click Next.

Configure Library Settings

  1. Run the Configuration Wizard. Select Configure Library Settings.

  2. Select the Drive Element Addressing Mode. The correct setting for your system depends on your current configuration (for help deciding on a mode, see "Selecting a Drive Element Addressing Mode").

    • Address All Drive Slots (Recommended) — Assigns new SCSI hardware addresses to all drive bays in the library, whether or not drives are actually installed.

    • Address Only Installed Drives — Assigns SCSI address to drive bays that contain an installed drive. Does not address empty drive bays.

  3. Select a Drive Auto Clean mode:

    • On — Enables library auto cleaning. You must have one or two cleaning cartridges in reserve slots to enable this feature. See "Configure Drive Cleaning" for more information.

    • Off — Disables library auto cleaning. You must configure host-managed cleaning or manually clean. See "Configure Drive Cleaning" for more information.

  4. Select the Mailslot Configuration:

    • Standard (4 slots)

    • Expanded (19 slots) — Converts the right magazine of the base module into an additional mailslot. The magazine must be empty before selecting this configuration.

  5. Select the number System Reserve Slots. If you are unsure on the number required, see "Determine the Required Number of Reserved System Slots".

  6. Select whether to partition the library:

  7. Select a Library Bridged Drive. The default bridged drive is Module 1 Top Drive. For more information on bridge drives, see "About Bridged Tape Drives".

  8. Select a Library Volume Label Format. For a description of each type, see "Labeling Cartridges".

Selecting a Drive Element Addressing Mode

Use the following guidelines to help decide which addressing mode to select.

Select Address All Drive Slots if:

  • If you control the library using a version of Oracle StorageTek ACSLS software that supports the Drive Element Addressing option.

  • If you are installing a new library. This means host system drive assignments do not need to be remapped when drives are subsequently added or replaced.

Select Address Only Installed Drives if:

  • If you control the library using a version of Oracle StorageTek ACSLS software that does not support the Drive Element Addressing option.

  • If you are upgrading an SL150 library that does not currently assign addresses to empty drive bays. Entering Address Only Installed Drives retains the current addresses and assigns the next address in sequence to the new drive.

Partition the Library

Partitioning lets multiple host systems access library resources. Each partition behaves as an independent library, but all partitions share the reserved cells, the single robot, and the four-cartridge mailslot.

Requirements: 

  • Maximum of 8 partitions (code versions before 2.0 only support two partitions)

  • Each partition must have it's own bridged drive

  • Each partition must have at least one magazine

Tasks: 

Partition the Library Task 1: Create a New Partition

To access the Configure Library Partitioning screen: Run the Configuration Wizard. Select Configure Library Settings. Select Partitioning On, and then click Next. Use the tasks below to create the partitioning configuration.

If at any point you do not wish to proceed, click Previous or Cancel.

  1. Click Add Partition.

  2. Enter the Partition Name.

  3. Select a Bridged Drive from the list. Each partition must have a bridged drive. For more information on bridge drives, see "About Bridged Tape Drives".

  4. Select a Volume Label Format from the list (see "Labeling Cartridges" for more information).

  5. Assign the partition resources, see .

Partition the Library Task 2: Assign Resources to the Partition

  1. In the left-hand manu, select the partition to modify.

  2. To add resources to the partition, click on an unassigned resource (gray in color). For each partition that you need to add to the current library configuration, create a new partition.

  3. To remove resources from the partition, click on a resource the partition owns.

Partition the Library Task 3: Delete an Existing Partition

IMPORTANT:

Before deleting a partition, make sure that it no longer holds tape volumes that contain valid data. When you reassign the slots, the host application that controls the partition may treat any resident tape cartridges as scratch volumes.

  1. In the left-hand manu, select the partition to delete.

  2. Click Delete Partition, just below the list of partitions.

  3. Click OK. Reassign resources as needed (see Partition the Library Task 2: Assign Resources to the Partition above).

  4. Otherwise, if you are finished, review and apply the configuration changes.

Partition the Library Task 4: Verify the Partitioning Configuration Changes

Once you are finished partitioning, review your changes and then click Next.

Configure Library Managed Encryption (LME)

The library can manage the encryption enrollment and key delivery of all IBM LTO-7 or higher drives. For HP LTO-6 drives and earlier, you must still use the Virtual Op Panel (VOP) software to enroll the drives.

Configure LME Task 1: Obtain Information from OKM

Have the OKM administrator use the OKM GUI to create an SL150 library agent and then record the following information to use in the SL150 configuration:

  • Agent Name

  • Passphrase

Configure LME Task 2: Configure the SL150 to Manage Encryption

IMPORTANT:

Library encryption must be configured separately and after all other library configuration options. Make sure you have completed the network configuration and completed a library reboot before configuring encryption. If not, see "Configure the Network Interfaces".

  1. In the SL150 GUI, Run the Configuration Wizard. Select Configure Library Encryption.

  2. Set "Library Encryption Status" to Encrypting.

    This globally enables library managed encryption for all IBM LTO-7+ drives within the library regardless of the partitioning configuration.

  3. Enter the following information:

    • OKM Cluster IP address

    • Agent ID

    • Agent Passphrase

  4. Note the port that will be used for OKM communication.

    If you altered the Port 2 configuration, all LME traffic will go through Port 2. If you left the Port 2 configuration set to default values, LME traffic will go through Port 1.

  5. Leave the OKM tuning parameters at their default setting unless instructed to change them by your OKM administrator.

  6. Click Next, then review and apply the changes.

Configure LME Task 3: Verify the SL150 Agent is Enrolled

After confirming the changes within the Configuration Wizard, have the OKM administrator go to the OKM GUI and verify that the SL150 agent now shows "Enrolled: True".

See the OKM documentation for more information.

Review and Apply Configuration Changes

  1. Review the Summary of Configuration Changes screen. Altered settings are indicated by "changed" in the changes column.

  2. Note any alerts Alert icon at the bottom of the screen.

  3. If you see a problem, click Previous to return to an earlier screen or Cancel to quit.

  4. Otherwise, select the Accept all changes check box, and then click Apply.

Update Library and Drive Firmware

You should check and update firmware after you first install the library. Oracle recommends that you regularly check for firmware updates.

Identify Current Firmware Versions

  1. From the remote interface, select Firmware in the left menu.

  2. Click the Library Firmware tab. Note the Current Firmware Version field

  3. Click the Drive Firmware tab. For each drive in the list, note the values:

    • Firmware Version — contains an alphanumeric string

    • Type — a vendor identifier plus an LTO Generation number

    • Interface Type — Fibre (for Fibre Channel) or SAS (for Serial Attached Small Computer System Interface)

Download Firmware from My Oracle Support

  1. Log in to My Oracle Support: https://support.oracle.com.

  2. Click the Patches & Updates tab.

  3. Within the Patch Search area, click on the Product or Family (Advanced) link.

  4. In the Product is field, enter:

    • For library firmware: Enter SL150, and then select StorageTek SL150 Modular Tape Library from the list of results.

    • For drive firmware: Enter LTO, and then select the drive model (for example, IBM LTO7 Tape Drive).

  5. From the Release drop-down list, select the release version you want to download (for example 3.20 for library firmware, or HH-FC or HH-SAS for drive firmware).

  6. Click Search.

  7. In the Patch Search Results table, click a row. A button bar displays.

  8. Click Read Me to confirm the firmware version.

    For drive firmware, make sure it is intended for the SL150 library. Note the firmware release level. Scan the drive firmware Read Me file for lines like the following:

    Unbundled Product: StorageTek LTO-6hh FC Tape Drive for the SL150 library
Unbundled Release: 23DS

  9. Click Download, and then within the download dialog click the file name to begin the download.

    Library firmware is named p12345678_xyz0_Generic.zip, where p12345678 represents a part number, x represents the major release number, and yz represents the minor release number.

    Drive firmware is named 123456_01.zip, where 123456_01 represents a part number.

Verify the Download

  1. At the bottom of the File Download dialog, click on the View Digest Details link.

  2. Copy the MD5 and SHA checksums and paste them into a text file.

  3. Verify the integrity of the downloaded ZIP file. Using a suitable checksum utility, calculate the MD5 or SHA-1 digest value of the downloaded file, and compare the result to the corresponding MD5 or SHA-1 value saved in your text file.

    You can use digest (Oracle Solaris) and dgst (Linux). Microsoft offers a commandline File Checksum Integrity Verifier utility (fciv.exe) as a free download from http://support.microsoft.com/kb/841290.

  4. If the digest value that you calculated for the file does not match the value displayed in the dialog, the file is corrupt and cannot be installed successfully. Stop here, and re-download the firmware zip.

Upgrade the Library Firmware

  1. Download the library firmware (see "Download Firmware from My Oracle Support").

  2. Extract the firmware ZIP (the extracted file should contain a .tar file and release notes).

  3. Log in to the remote interface as an administrator.

  4. Select Firmware in the left menu.

  5. Select the Library Firmware tab, and then click Upgrade Upgrade icon.

  6. Browse to the folder that contains the firmware, and select the SL150_xyz0.tar file, where xyz0 is the four-digit form of the release number.

  7. To install the new firmware and restart the library, click OK.

    The upgrade dialog displays a progress meter and the estimated time required for the upgrade. Do not close this window until the installation process finishes.

  8. If a library firmware upgrade fails, create a service request. For more information, see "Create a Service Request".

Upgrade the Drive Firmware

If possible, update drive firmware during periods when host applications are not making heavy use of the library. The library cannot respond to host commands during the updates, which may take up to 20 minutes per tape drive.

For each drive model and interface type that requires new firmware, proceed as follows:

  1. Download the drive firmware (see "Download Firmware from My Oracle Support")

  2. Extract the drive firmware ZIP (the extracted folder should contain HTML and text release notes, a LEGAL_LICENSE.TXT file, a tload.tar file, and two versions of the firmware file).

  3. Log in to the remote user interface as an administrator.

  4. Take the library offline (see "Place the Library Online and Offline").

  5. Select Firmware in the left menu. Click the Drive Firmware tab.

  6. Click Upgrade Drive Firmware Upgrade Drive Firmware icon.

  7. Click on the table entries to select the drive(s) that you want to update (hold down the Shift key to select multiple drives). Click Next.

  8. Browse to the folder that contains the drive firmware, and select the file with the .E extension (such as Z5BD.E).

  9. Verify you have selected the correct file, and then click Upgrade. The update begins immediately.

    If you are updating multiple drives, you can click Cancel to skip the upgrade for any drives that have not yet been processed. However, the upgrade that is currently underway will continue.

  10. If a firmware upgrade fails, make sure that the chosen firmware is correct for the LTO generation and interface specification of the drive. If it is not, repeat this procedure to download a copy of the correct firmware.

  11. When all firmware is up to date, bring the library back online.

Revert to the Previous Library Firmware

If you ever have problems with a library firmware update, you can roll the library back to the most recent, previously installed version using the following procedure.

  1. Log in to the remote user interface as an administrator.

  2. Click Firmware in the left menu.

  3. To roll back the library firmware, click Revert Revert icon.

  4. If the library has been operating normally and if its contents have not changed, check the Bypass audit for a faster restart ... check box.

  5. Click OK to restart the library and activate the old firmware.

Manage the Library's SSL/TLS Certificate for HTTPS

A certificate encrypts SSL/TLS traffic to and from the library. At initial installation, the library has a default certificate. At a minimum, you should replace the default certificate with a new self-signed certificate. Then, optionally, you can installed a certificate signed by a certifying authority (CA).

Generate a Self-Signed Certificate

A self-signed certificate is secure, but will require you to manually tell the browser to trust the certificate before you can view the login screen. To eliminate this browser security exception, you can install a certificate signed by a certifying authority (CA) (see "Install a Third-Party Signed Certificate").

  1. Click Configuration in the left navigation area of the GUI.

  2. Click the Certificate tab, and then click New Certificate New Certificate icon.

  3. Enter in the certificate information.

Install a Third-Party Signed Certificate

Installing a third-party certificate is a multistep process of submitting a certificate signing request (CSR) to the CA, obtaining the certificate from the CA, and then importing the certificate file to the library.

Install a Certificate Task 1: Verify the Library Has a Self-Signed Certificate

The library must have a self-signed certificate before installing a third-party signed certificate. You cannot go directly from the default certificate to a third-party certificate. To install the self-signed certificate, see "Generate a Self-Signed Certificate".

Install a Certificate Task 2: Export Certificate Signing Request (CSR) File

  1. Click Configuration in the left navigation area of the GUI.

  2. Click the Certificate tab, and then click Export CSR Export CSR icon.

  3. Click Download.

  4. Submit the CSR to the third-party certifying authority (CA).

Install a Certificate Task 3: Obtain Required Certificates

Verify that you have obtained the following before importing:

  • Primary certificate of the trust anchor CA (such as VeriSign's public primary root CA)

  • Intermediate certificate of the issuing SSL CA (optional). In cases where there is no intermediate issuer, you can omit the intermediate certificate. This is highly site-specific, so check with your company's security experts for requirements.

  • Your newly issued SSL certificate

Install a Certificate Task 4: Import the Certificate File

  1. Click Configuration in the left navigation area of the GUI.

  2. Click the Certificate tab, and then click Import Certificate Export CSR icon.

  3. Copy and paste each certificate file (as noted above in task 3) into the text box and click Next. To skip the intermediate certificate, leave the box blank and click Next.