Encryption Capable Tape Drives
Only specific tape drive models and types support encryption with OKM.
- StorageTek T10000A
- StorageTek T10000B
- StorageTek T10000C
- StorageTek T10000D
- StorageTek T9840D
- HP LTO-4 (requires HP Dione card)
- HP LTO-5 and 6
- IBM LTO-4, 5, 6, 7, 8 and 9 (all require an encryption card)
See also: Enroll Tape Drives.
Table 1-1 FIPS 140-2 Compliant Tape Drives
| Tape Drive | FIPS 140-2 Level |
|---|---|
|
T10000A |
1 |
|
T10000B |
2 |
|
T10000C |
1 |
|
T10000D |
1 |
|
T9840D |
1 |
|
LTO4 (HP and IBM) |
No plans for FIPS |
|
LTO5 (HP and IBM) |
No plans for FIPS |
|
LTO6 (HP and IBM) |
No plans for FIPS |
|
LTO7 (IBM) |
No plans for FIPS |
|
LTO8 (IBM) |
No plans for FIPS |
|
LTO9 (IBM) |
No plans for FIPS |
Note:
LTO drives alone may be FIPS-validated, but not necessarily in specific encryption applications.FIPS 140-2 levels of security for the above tape drives include:
- Level 1 – The basic level with production-grade requirements.
- Level 2 – Adds requirements for physical tamper evidence and role-based authentication. Built on a validated operating platform. This selection provides a higher level of security for the KMAs and tape drives.