HP Lto 5 Manual

01234567
DataEncryptionStatusPageCode(0020h)14
15
NextBlockEncryptionStatusPageCode(0021h)16
17
TapeDataEncryptionOutSupportpage
01234567
PageCode(0001h)0
1
PageLength(02h)2
3
TapeDataEncryptionInSupportPageCode(0010h)4
5
DataEncryptionCapabilitiespage
01234567
PageCode(0010h)0
1
PageLength(28h)2
3
CFG_PEXTDECC(10b)Reserved(0)4
Reserved(0)5
19
AlgorithmIndex(01h)20
Reserved(0)21
DescriptorLength(0014h)22
23
Encrypt_CDecrypt_CDED_C(1)MAC_C(1)SDK_C(0)AVFMV24...

01234567
Reserved(0)33
39
EncryptionAlgorithmIdentifier(AES-CGM)(00010014h)40
43
Thedeviceisexternaldataencryptioncapable.10bEXTDECC
ConfigurationPreventedCFG_P
Dataencryptionparameterscanbeestablishedorchanged.01b
Dataencryptionparameterscannotbeestablishedorchanged.10b
AlgorithmValidForMountedVolume.Setto1ifthereisatapethreadedanditisencryption-capable
usingthesuppliedalgorithmindex.
AVFMV
Thedevicecandecryptdatausingthisalgorithminhardware.10bDecrypt_C...

DataEncryptionManagementCapabilitiespage
01234567
PageCode(0012h)0
1
PageLength(0Ch)2
3
LOCK_C(1)Reserved(0)4
CKORL_C(1)CKORP_(1)CKOD_C(1)Reserved(0)5
Reserved(0)6
Public_C(1)Local_C(1)AITN_C(1)Reserved(0)7
Reserved(0)8
15
DataEncryptionStatuspage
01234567
PageCode(0020h)0
1
PageLength(n−3)2
3
KeyScopeReserved(0)I_TNexusScope4
EncryptionMode5
DecryptionMode6
AlgorithmIndex(01h)7
KeyInstanceCounter8
11
RDMDCEEMSVCELBParametersControlRsvd(0)12
Reserved(0)13
23
Key-AssociatedDataDescriptorsList24
n...

Dataencryptionparametersareexclusivelycontrolledbyamanagementinterface.100b
TheVolumeContainsEncryptedMogicalBlocksfieldissettoonewhenatapeisloadedandcontains
atleastoneencryptedlogicalblock.Otherwisesettozero.
VCELB
TheCheckExternalEncryptionModeStatusfieldcontainsthevaluefromthecheckexternalencryption
modeparametervaluesavedfortheI_Tnexusonwhichthecommandwasreceived.
CEEMS
TheRAWDecryptionModeDisabledbitissettooneifthedriveisconfiguredtomarkeachencrypted...

SECURITYPROTOCOLOUTB5h
TheSECURITYPROTOCOLOUTcommandisusedtoconfigurethedatasecurityparametersfor
theI_Tnexusinthedeviceserverandonthetape.
Pre-executionchecks
UnitAttentionDeferredErrorReservationIllegalField
Commanddescriptorblock
01234567
OperationCode(B5h)0
SecurityProtocol1
SecurityProtocolSpecific2
3
Reserved(0)Inc_512(0)4
Reserved(0)5
AllocationLength6
9
Reserved(0)10
Control11
CDBfields
TapeDataEncryptionsecurityprotocol20hSecurityProtocol...

NOTE:EncryptionisonlyperformedonLTO-4andLTO-5tapes.Onothertapes,anattemptto
writewhenencryptionisenabledorreadwhendecryption(orRAWmode)isenabledwillterminate
withCHECKCONDITIONstatus,withsenseofDATAPROTECTandadditionalsenseof3000h
(incompatiblemediuminstalled).AttemptstoenableencryptionordecryptionwhenotherLTO
formattapesareloadedwillterminatewithCHECKCONDITIONstatus,withsenseofILLEGAL
REQUESTandadditionalsenseof2600h(invalidfieldinparameterlist).
SetDataEncryptionpage
01234567
PageCode(0010h)0
1...

Donotchecktheencryptionmodeusedtowritetheblock.01b
Onreadandverifycommands,checktheencryptionmodeusedtowritetheblock.
DecryptionModeissettoDECRYPTorMIXED.Reportanerroriftheblockwaswritten
inEXTERNALmode.ThesensekeyissettoDATAPROTECTwithadditionalsenseof
7409h(encryptionmodemismatchonread).
10b
Onreadandverifycommands,checktheencryptionmodeusedtowritetheblock.
DecryptionModeissettoDECRYPTorMIXED.Reportanerroriftheblockwaswritten
inENCRYPTmode.ThesensekeyissettoDATAPROTECTwithadditionalsenseof...

IftheEncryptionModeissettoEncrypt,thedrivewillsavetheKADdescriptors.Theyare
associatedwitheveryblockthatisencryptedwiththespecifiedkey.Thedescriptorsarespecified
inincreasingnumericorder.Seebelowfortheformatofthedescriptors.
Key-AssociatedData
Descriptors
Unauthenticatedkey-associateddata0hKeyDescriptorType
Authenticatedkey-associateddata1h
Noncevalue(notsupported)2h
Securitymeta-datakey-associateddata3h
Reserved.ThisisalwaysthecaseifKADdescriptorsareincluded.0hAuthenticated...

•IftheEncryptionModeissettoEncryptandtheKeyLengthiszero,thecommandwillterminate
withCHECKCONDITION,asensekeyofILLEGALREQUESTandadditionalsenseof2600h
(invalidfieldinparameterlist).
•IftheDecryptionModeissettoDecryptorMixedandtheKeyLengthiszero,thecommand
willterminatewithCHECKCONDITION,asensekeyofILLEGALREQUESTandadditional
senseof2600h(invalidfieldinparameterlist).
SEEK(CD-ROMmode)2Bh
SEEKisexecutedfor2BhwhenthedriveisinCD-ROMmode.WhenoutofCD-ROM,theLOCATE
command,whichsharestheopcode,isexecuted....

Commanddescriptorblock
01234567
OperationCode(1Dh)0
UnitOffLDevOffL(0)Self-TestRsvd(0)PF(1)Reserved(0)1
Reserved(0)2
ParameterListLength(MSB)3
(LSB)4
Control5
CDBfields
PageFormat.SpecifiesthattheaccompanyingdatafollowstheSCSI-3DiagnosticPageformat.It
mustbesetto1.
PF
Performthediagnosticsspecifiedintheparameterlist.TheUnitOffLbitmustbeset,otherwise
CHECKCONDITIONisreported.Thedrivereportsstatuswhenthecommandhasbeen
completed.
0Self-Test...