IBM System Storage TS1120 Tape Drive Model E05 supports encryption
IBM United States
Hardware Announcement 106-655
August 29, 2006
 ENUS106-655.PDF (79KB)
|
IBM System Storage TS1120 Tape Drive encryption capability enhancements include:
-
Drive hardware and microcode additions, and changes for TS1120 Tape Drive encryption
-
A no charge encryption-capable feature number for new TS1120 Tape Drives
-
An optional chargeable encryption feature number upgrade, that may contain refurbished parts, for
installed TS1120 Tape Drives
-
Encryption capabilities designed to work with the new Encryption Key Manager component
-
Three encryption management techniques supported: System, Application and Library Managed
-
TS1120 Tape Drive encryption supported for IBM System Storage tape subsystems and libraries
-
A router for out-of-band key management support and Encryption Key Manager connectivity for Tape
Controllers, Tape Frames, and Tape Subsystem
For ordering, contact:
Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at
800-IBM-CALL
(Reference: YE001).
Back to top
The
IBM System Storage™ TS1120 Tape Drive
(machine type 3592, Model E05) has been enhanced to provide you the option of using drive based
data encryption. This encryption capability is now standard on all new TS1120 Tape Drives and is a
chargeable upgrade feature for existing installed TS1120 Tape Drives. The encryption capability
includes drive hardware, as well as microcode additions and changes. Also being introduced is a
new, separate IBM Encryption Key Manager component for the Java™ Platform (Encryption Key Manager)
program that supports the generation and communication of encryption keys for the tape drives across
the enterprise. This TS1120 Tape Drive encryption announcement supports the previous storage
statements of direction, dated April 27, 2006.
The TS1120-based encryption and associated Encryption Key Manager component are supported in a wide
variety of operating system environments including z/OS®, i5/OS™, AIX®, HP, Sun, Linux™, and
Windows™. In addition, three different encryption management methods are supported: Application,
System, or Library Managed. This encryption capability is supported when the TS1120 Tape Drive is
integrated or attaches in the IBM System Storage TS3500 Tape Library, IBM System Storage TS1120 Tape
Controller Model C06, IBM TotalStorage® 3592 Tape Controller Model J70, IBM TotalStorage
3494 Tape Libraries, IBM TotalStorage C20 Silo Attach frame, and stand-alone environments.
The TS1120 drive's encryption capability and its subsystem integration support help provide you with
a flexible tape data encryption solution that supports encryption and key management across a
variety of environments, supporting a single point of control for all encryption keys, and most
importantly, can help customers protect tape data in a cost effective way.
Back to top
The TS1120 Tape Drive is supported in a wide range of environments: IBM System z™, System i™,
System p™, System x™, and can be used with a wide range of Linux on System z,
Sun, and Hewlett Packard servers, and Linux-based servers, as well as Intel®-compatible servers
running Linux, Microsoft™ Windows 2000, or Windows Server 2003. A tape controller is
required for attachment to ESCON® or FICON™ channels on IBM mainframe servers. Refer to the
Technical information
section for details.
Back to top
-
September 8, 2006: Open systems TS3500 Library, Application, and System Managed
encryption.
-
September 8, 2006: TS1120 Tape Drive Model E05 using System Managed Encryption with
supported AIX servers.
-
September 8, 2006: Encryption Key Manager on AIX, z/OS, i5/OS, and Linux.
-
September 29, 2006: Application Managed Encryption support using Tivoli® Storage
Manager.
-
October 27, 2006: z/OS System Managed Encryption. This includes support on the TS1120
Tape Controller Model C06 (3592 C06), 3494 Models L10, L12, L14, L22 Tape Library Frames,
3592 Model J70, 3590 Model C10, 3952 Model F05, 3953 Model F05 and TS3500 Tape
Library (3584 L23, D23, L22, D22).
-
December 1, 2006: Encryption Key Manager on HP, Sun, and Windows
Back to top
The TS1120 Tape Drive is a successor to the 3592 Tape Drive Model J1A and the 3590 Enterprise
Tape Drive. The TS1120 Tape Drive is machine type 3592 and Model E05. It is designed for
high-performance tape applications, including:
-
High-speed data-save operations where backup windows are critical, and large amounts of data are
archived to tape.
-
Protection of tape data by high speed encryption for security or regulatory needs.
-
Large-scale automated tape environments where performance and reliability are required.
-
Large-scale mass data archive applications where massive amounts of data need to be quickly saved to
tape for storage and later recall (examples include the seismic industry, data warehousing, and
record management applications).
The TS1120 Tape Drive is the second generation of a new family of tape products that are designed to
help address the growing needs of both new and existing IBM tape customers across a wide range of
environments. The TS1120 Tape Drive now includes:
-
Larger capacity compared to the 3592 Model J1A, to help you reduce the number of cartridges
required and floor space needed
-
Smaller form factor compared to the 3590 Tape Drive, which can help reduce the automation foot print
-
Dual-ported native switched fabric interface, designed to enhance the attachment flexibility
-
High reliability, to help improve operations
-
Additional performance and access improvements over the 3592 J1A
-
Hardware tape encryption to protect tape data integration with the new Encryption Key Manager
component
Encryption
The TS1120 Tape Drive is being enhanced to support encryption of data on a tape cartridge. New
T1120 Tape Drives will be encryption capable and a chargeable upgrade will be available for
currently installed TS1120 Tape Drives. The encryption capability is implemented through tape drive
hardware as well as microcode additions and changes. All 3592 media, including WORM cartridges, can
be encrypted. In addition, a new Encryption Key Manager program is designed to support encryption.
The Encryption Key Manager program uses standard key repositories on supported platforms. This
software will be required to be installed on a supported server and interface with the tape drive to
support encryption in a System or Library Managed Encryption implementation.
Note:
With encryption enabled, the access time to data on the tape drive will increase. Also, the tape
drive unload time will increase. This is due to the time needed to retrieve, read, and write the
encryption key.
Encryption will be available for System z and open systems environments. Three different methods of
encryption will be supported as follows.
Application Managed:
The TS1120 Tape Drive will support Application Managed Encryption for open systems environments.
The application will control the encryption process, and will generate and provide keys to the
TS1120 tape drive. Tivoli Storage Manager is being enhanced to support this capability.
Library Managed:
Encryption by volume and drive policy will be supported. The user will set up and control the
encryption through the library interface. Initially, this will be supported for the TS3500 or 3584
tape library in open systems environments. The Encryption Key Manager program will be required for
this support.
System Managed:
With Systems Managed Encryption, the encryption policy will be passed between the server and the
drives. This is the only vehicle for z/OS environments and will require the Encryption Key Manager
program. DFSMS will support the Encryption Key Manager component. Systems managed encryption will
also be available for AIX servers. This support will require a new AIX tape device driver, as well
as the Encryption Key Manager program.
System Managed Encryption on open systems is "in-band" where tape drive requests to the Encryption
Key Manager component travel over the Fibre Channel channels to the server hosting the EKM. Systems
Managed Encryption on z/OS has two different configuration options. First is "in-band", where tape
drive requests to the Encryption Key Manager component travel over the ESCON/FICON channels to the
server proxy that is TCP/IP connected to the Encryption Key Manager. Second is "out-of-band", where
the tape controller establishes the communication to the Encryption Key Manager server over TCP/IP
connections between the tape controller and the Encryption Key Manager server. A router is required
for out-of-band and Encryption Key Management support and Encryption Key Manager connectivity for
the TS1120 Tape Controller Model C06, the 3592 J70 Tape Controller, the 3952 F05 and 3953 F05
Tape Frames, the 3494 L10, L12, L14, L22 Tape Library Frame, and IBM TotalStorage 3590 C10
Subsystem.
Back to top
The TS1120 Tape Drive is the successor to the 3592 Tape Drive Model J1A and the highly
successful 3590 Enterprise Tape Drive. The TS1120 Tape Drive is supported in a wide range of
environments including selected System z, iSeries™, AS/400®, pSeries®, RS/6000®, xSeries®,
Sun, and Hewlett Packard servers, as well as Intel-compatible servers running Linux and Microsoft
Windows 2000, or Windows Server 2003. It has significant potential performance and capacity
benefits over the IBM 3590, as well as other half-inch tape drives such as the IBM 3480, 3490, or
3490E, and now supports data encryption on a tape cartridge for security and the customers
regulatory needs.
Back to top
It is IBM's intent to support the following Systems Managed Encryption with the TS1120:
-
z/VM® V5.1 and V5.2 support of the TS1120 Tape Drive with encryption is planned for fourth quarter
2006. This includes transparent support for VM guests. z/VM support will require the Encryption
Key Manager component running on another operating system other than z/VM using an out-of-band
connection.
-
z/TPF V1.1 support of the TS1120 Tape Drive with encryption is planned for the first half 2007.
z/TPF support will require the Encryption Key Manager component running on another operating system
other than z/TPF using an out-of-band connection.
-
z/VSE® V3.1 support of the TS1120 Tape Drive with encryption is planned for first half 2007. It
is also IBM's intent to support z/VSE V4.1 (when made available) using Systems Managed Encryption
with the TS1120. z/VSE support will require the Encryption Key Manager component running on another
operating system other than z/VSE using an out-of-band connection.
-
Linux on System z support (source code) for FICON- and ESCON-connected TS1120 Tape Drives is
intended to be provided in first half 2007 on developerWorks™
IBM will work with its Linux distribution partners to provide this
function in future Linux on System z distribution releases or service
updates.
This future development is designed to help customers with these
operating systems utilize the TS1120 Tape Drive to protect tape data.
All statements regarding IBM's plans, directions, and intent are subject
to change or withdrawal without notice. Any reliance on these Statements
of general direction is at the relying party's sole risk and will not
create liability or obligation for IBM.
Back to top
Refer to:
-
The IBM TotalStorage 3599 support for the TS1120 Tape Drive format in 3592 Data Cartridges in
Hardware Announcement
105-412
, dated October 11, 2005
-
The IBM TotalStorage 3953 Library Manager Model L05 and Tape Frame Model F05 in Hardware
Announcement
105-176
, dated May 10, 2005
-
VTS support of the 3592 Tape Drive, other functional enhancements, and 3494 Tape Library
enhancements including increased open systems support in Hardware Announcement
104-349
, dated October 5, 2004
-
Support of the 3592 WORM functionality and economy cartridges in the 3494 Tape Library in Hardware
Announcement
104-148
, dated April 27, 2004
-
The IBM TotalStorage Enterprise Tape Drive 3592 attachment in the IBM TotalStorage Enterprise
Automated Tape Library Models L22, D22, and D24 in Hardware Announcement
103-239
, dated September 9, 2003
-
The IBM TotalStorage Enterprise Tape Drive 3592 attachment in the IBM TotalStorage Silo Compatible
Tape Drive Frame 3592 Model C20 in Hardware Announcement
103-233
, dated September 9, 2003
-
The IBM TotalStorage Enterprise Tape Drive 3592 attachment to ESCON/FICON channels through the IBM
System Storage TS1120 Tape Controller 3592 Model C06 in Hardware Announcement
106-339
, dated May 9, 2006
-
The IBM TotalStorage Enterprise Tape Drive 3592 attachment to ESCON/FICON channels through the IBM
TotalStorage Enterprise Tape Controller 3592 Model J70 in Hardware Announcement
103-236
, dated September 9, 2003
-
The IBM TotalStorage Enterprise Tape Cartridge 3592 available with new models of the 3599 in
Hardware Announcement
103-238
, dated September 9, 2003
Business Partner information
If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to
Business Partner information for this announcement. A PartnerWorld ID and password are required
(use IBM ID).
BP Attachment for Announcement Letter 106-655
Trademarks
-
-
System Storage, i5/OS, System i, System z, System p, System x, FICON, iSeries, and developerWorks
are trademarks of International Business Machines Corporation in the United States or other
countries or both.
-
-
AIX, z/OS, TotalStorage, ESCON, Tivoli, AS/400, pSeries, RS/6000, xSeries, z/VM, and z/VSE are
registered trademarks of International Business Machines Corporation in the United States or other
countries or both.
-
-
Intel is a registered trademark of Intel Corporation.
-
-
Windows and Microsoft are trademarks of Microsoft Corporation.
-
-
Java is a trademark of Sun Microsystems, Inc.
-
-
Linux is a trademark of Linus Torvalds in the United States, other countries or both.
-
-
Other company, product, and service names may be trademarks or service marks of others.
Back to top
The following publications, including support of the TS1120 Tape Drive, are available now at
Order
Title number
IBM System Storage(TM) GA32-0555-01
Enterprise Tape
System 3592 Introduction and
Planning Guide
IBM TotalStorage(R) Silo Compatible GA32-0463-05
Tape Frame 3592 Introduction,
Planning, and User's Guide
IBM System Storage Enterprise Tape GA32-0556-01
System 3592 Operator Guide
IBM Encryption Key Manager Component GA76-0418
for the Java(TM) Platform
Introduction, Planning and
User's Guide
The
IBM System Storage Enterprise Tape System 3592 Operator Guide
(GA32-0556) is shipped with the product. Additional copies will be
available with the planned availability of that attachment.
The
IBM System Storage Enterprise Tape System 3592 Hardware Reference
(GA32-0562) will include the TS1120 Tape Drive and will be available
after the planned availability. The Publication Notification System
(PNS) is available by order number and product number. Customers
currently subscribing to PNS will automatically receive notifications by
e-mail. Customers who wish to subscribe, can visit the PNS Web site
location at
The publications listed on the notification can be ordered by calling the
Pubs Support Group in Raleigh at 800-879-2755, option 1.
The IBM Publications Center Portal
The Publications Center is a worldwide central repository for IBM product
publications and marketing material with a catalog of 70,000 items.
Extensive search facilities are provided, as well as payment options via
credit card. Furthermore, a large number of publications are available
online in various file formats, which can currently be downloaded free of
charge.
Note that PNS subscribers most often order their publications via the
Publications Center.
Back to top
IBM Integrated Technology Services
IBM services include business consulting, outsourcing, hosting services, applications, and other
technology management.
These services help you learn about, plan, install, manage, or optimize your IT infrastructure to be
an On Demand Business. They can help you integrate your high-speed networks, storage systems,
application servers, wireless protocols, and an array of platforms, middleware, and communications
software for IBM and many non-IBM offerings. IBM is your one-stop shop for IT support needs.
For details on available services, contact your IBM representative or visit
For details on available IBM Business Continuity and Recovery Services,
contact your IBM representative or visit
For details on education offerings related to specific products, visit
Select your country, and then select the product as the category.
Back to top
Specified operating environment
Physical specifications
TS1120 Tape Drive canister:
-
Width: 197.0 mm (7.75 in)
-
Depth: 464 mm (18.26 in)
-
Height: 92.7 mm (3.65 in)
-
Weight: 5.7 kg (12 lb 7 oz)1
-
1
-
When mounted in a rack, up to four drive canisters can be mounted in two cradles on a shelf that
requires 10 EIA of rack space. The weight of the rack-mount slides and shelf, two cradles, power
supplies, and four tape drives is 69.2 kg (152 lb 7 oz).
To assure installability and serviceability in non-IBM industry-standard racks, review the
installation planning information for any product specific installation requirements.
Operating environment
-
Temperature: 16° to 32°C (60° to 90°F) in operation (media in use)
-
Relative humidity: 20% to 80% non-condensing (limited by media)
-
Maximum wet bulb temperature: 23°C (73.4°F)
-
Individual drive:
-
Heat output: 46 W (157 Btu/Hour)
-
Electrical power: 4.8 amps at +5 volts; 1.6 amps at +12 volts
-
In a cradle with ac power supply:
-
Caloric value: 307 Btu/Hour per drive
-
Electrical power: 0.1 kVA per drive
-
Leakage current: 0.63 ma per drive power supply
-
Inrush current: 30 amps per drive power supply
-
Operating current:
-
0.5 amps per drive at 200 V ac
-
1.0 amps per drive at 100 V ac
-
Capacity of exhaust: 0.34 Cubic meter/min (12 CFM) per drive
-
Noise level:
-
6.2 Bels idle
-
6.3 Bels operating
Hardware requirements
TS1120 Tape Drive
Each TS1120 Tape Drive comes with dual-ported switched fabric 4-Gbps Fibre Channel attachments, for
attachment to multiple servers or a single server with redundancy. It can be attached to IBM System
i™, i5 and IBM eServer® iSeries™, AS/400®, System p™, p5 and pSeries®, RS/6000®,
RS/6000 SP™ systems, System z9™ and zSeries® servers, System x™ and xSeries®,
Netfinity®, and non-IBM servers, workstations, and personal computers that support Fibre Channel
interfaces. It can also attach to the TS1120 Tape Controller Model C06, 3592 Tape Controller
Model J70, TS7700 Virtualization Engine™, or 3494 VTS Models B10 or B20 for attachment
to ESCON® or FICON™ channels on IBM System z9, zSeries, or S/390®. For the latest details on
specific hardware, software, and Fibre Channel support for the TS1120 Tape Drive, refer to the
following Web site
TS3500 or 3584 Tape Library installations
The TS1120 Tape Drive may be installed and is supported in the IBM System
Storage TS3500 Tape Library Models L23, D53, L22, and D52. Support
for TS1120 encryption function requires a minimum level of microcode
firmware level and is a customer's responsibility to load, configure, and
maintain on the TS3500 Tape Library. Feature number 9900 (Encryption
Configuration) should be ordered on the TS3500 Tape Library.
Customers will need to download the latest version of library firmware.
3494 Tape Library and 3953 Library Manager support
TS1120 encryption support for tape drives in an Enterprise Tape Library
3494 or drives attached via a 3953 Library Manager requires a minimum
level of microcode firmware in the library manager. The level of
microcode firmware required will be shipped the first time the customer
orders FC5595 or when they order feature number 9595 and the 3592 Tape
Controller is not located in a customer-owned rack (feature number 4641).
Installation of this firmware can also update the drive microcode
firmware on any installed open-system attached 3592 Model J1A Tape
Drive, or TS1120 Tape Drive. With this support, encryption, WORM, and
standard tape cartridges in both sizes can be intermixed within the same
tape library or a common tape cartridge scratch pool.
The minimum level of microcode firmware will be the LM534.xx code.
Media Interchange Toleration support
Non-IBM 3494 or 3584 open systems installations
Support for the TS1120 encryption function installed in either a 3592 C20
Silo Compact Frame or a 19-inch rack open systems attached, require a
minimum level of microcode firmware for any 3592 J1A Enterprise Tape
Drive and/or TS1120 Tape Drive where the customer intends to use tape
cartridges from a common tape cartridge scratch pool.
The minimum level of microcode firmware will be the D3I0_851 for the
3592 J1A Enterprise Tape Drive and D3I1_919 for the TS1120 Tape Drive
(3592 E05), or may be ordered as follows:
-
3592 J1A Enterprise Tape Drive support: Feature number 0500 Drive
Microcode Update
-
TS1120 Tape Drive (3592 E05) support: Feature number 0500 Drive
Microcode Update
IBM Tape Controller installations
Support for the TS1120 encryption function, installed in any IBM
controller attachment, requires a minimum level of microcode firmware for
any 3592 J70 Enterprise Tape Controller, TS1120 Tape Controller (3592
C06), or 3590 A60 Enterprise Tape Controller where you intend to use tape
cartridges from a common tape cartridge scratch pool.
The minimum level of microcode firmware will be the 1.19.5.x for the
3592 J70 Enterprise Tape Controller or 1.21.x.x for the TS1120 Tape
Controller (3592 C06), and/or 1.16.1.11 for the 3590 A60 Enterprise Tape
Controller.
The level of microcode firmware required for the TS1120 Tape Controller
(3592 C06) and the 3592 J70 Enterprise Tape Controller will be shipped
the first time the customer orders FC5595 or when they order FC9595. To
obtain the microcode required for the 3590 A60 Enterprise Tape Controller
feature number 0520 Function Enhancement Field should be ordered.
Software requirements
Support for the TS1120 Tape Drive with encryption is provided in i5/OS™, AIX®, HP-UX, Linux™,
Sun, and Microsoft™ Windows™ 2000, or 2003 operating system environments. Support for the
z/OS® and operating system environments is available through the 3592 Model J70 Controller or
TS1120 Tape Controller.
The installation of a TS1120 Tape Drive with encryption may require code updates for System z™,
System i, System p and supported open systems device drivers or storage management software. Per
the
Solutions Assurance Product Review (SAPR) Guide
, the account team or Business Partner should confirm that the customer checks the appropriate PSP
buckets for System z environments or the equivalent support levels required for their particular
software environment prior to the installation of the TS1120 Tape Drive with encryption. A
Solutions Assurance call is required at a minimum for the installation of the first new TS1120 Tape
Drive with encryption activated in an account.
An update of the open systems device drivers can be obtained via anonymous FTP from
Look under the directory storage/devdrvr.
For details on supported software versions and release levels for the
TS1120 Tape Drive, as well as hardware support information, refer to the
following Web site
Three modes of encryption management are supported: System Managed
(available for z/OS and AIX only), Library Managed (available for AIX,
i5/OS, Linux, Linux on System z FCP connected tape drives, HP, Sun and
Windows) and Application Managed (IBM Tivoli® Storage Manager only).
System z
The TS1120 Tape Drive with encryption enabled is supported for attachment
to ESCON and FICON channels on System z servers.
z/OS support of System Managed Encryption requires:
-
z/OS and z/OS.e V1R5, or later
-
z/OS V1R4 with z/OS V1R4 z990 Exploitation Support feature
-
z/OS.e V1R4 with z/OS.e V1R4 z990 Coexistence Update feature
-
An Encryption Key Manager component available to the z/OS system
z/OS support of the TS1120 Tape Drive with encryption is planned for
October 27, 2006 (z/OS V1R6 and V1R7),
November 17, 2006 (z/OS V1R8), and February 2007 (z/OS
V1R4 and V1R5). For z/OS V1R6 and V1R7, refer to enabling APAR OA15685,
and for z/OS V1R8, refer to enabling APAR OA17562. An enabling APAR will
also be available for z/OS V1R4 and V1R5. For additional information on
the support being provided, refer to the 3592 PSP bucket.
If the Encryption Key Manager is run on the z/OS system, then one of the
following IBM SDK for Java 2 must be installed:
-
IBM SDK for z/OS, Java 2 Technology Edition, V1.4, 5655-I56 (at the
SDK1.4.2 SR6, or later level)
-
IBM 31-bit SDK for z/OS, Java 2 Technology Edition, V5.0, 5655-I98 (at
the SDK5 SR3, or later level)
In addition, it is IBM's intent to support the following Systems Managed
Encryption with the TS1120:
-
z/VM® V5.1 and V5.2 support of the TS1120 Tape Drive with encryption is
planned for fourth quarter 2006. This includes transparent support for
VM guests. The z/VM support will require the Encryption Key Manager
component running on another operating system other than z/VM using an
out-of-band connection.
-
z/TPF V1.1 support of the TS1120 Tape Drive with encryption is planned
for first half 2007. The z/TPF support will require the Encryption Key
Manager component running on another operating system other than z/TPF
using an out-of-band connection.
-
z/VSE® V3.1 support of the TS1120 Tape Drive with encryption is planned
for first half 2007. It is also IBM's intent to support z/VSE V4.1
(when made available) using Systems Managed Encryption with the TS1120.
The z/VSE support will require the Encryption Key Manager component
running on another operating system other than z/VSE using an out-of-band
connection.
System i
System i supports Library Managed Encryption in conjunction with the
TS3500 tape library.
System i support of Library Managed Encryption on the TS3500 requires:
-
i5/OS V5.2, or later
-
An Encryption Key Manager component available to the TS3500 tape library
-
A TS3500 Tape Library
The Encryption Key Manager is supported on i5/OS V5.3, or later. If the
Encryption Key Manager component is run on i5/OS, then IBM Developer Kit
for Java — Java Developer Kit 5.0 (5722-JV1) is required.
i5/OS Library Managed Encryption support is planned for
September 8, 2006.
System p
System p supports System Managed Encryption and Library Managed
Encryption in conjunction with the TS3500 tape library, and Application
Managed encryption with Tivoli Storage Manager.
AIX V5.2, or later is required for Application Managed, System Managed,
and Library Managed Encryption.
System Managed Encryption with AIX requires:
-
An Encryption Key Manager component available to the AIX system
-
The ATAPE device drivers must be installed, updated and utilized. It may
be downloaded from the following Web site
ftp://ftp.software.ibm.com/storage/devdrvr/AIX/
AIX System Managed encryption support is planned for
September 8, 2006.
Library Managed Encryption with AIX requires:
-
An Encryption Key Manager component available to the TS3500
-
A TS3500 Tape Library
AIX Library Managed Encryption support is planned for
September 8, 2006.
If the Encryption Key Manager is run on a System p server with AIX:
-
AIX V5.2, or later is required
-
One of the following two IBM Java SDK's should be updated to include the
latest version of the Encryption Key Manager:
-
Java SDK 5 (31 and 64 bit)
-
Java SDK 1.4.2 (31 and 64 bit)
-
Updates to the AIX Java SDK may be obtained at the following Web site
Linux on System z
Library Managed Encryption is available for System z servers connected to
the TS3500 via FCP, running one of the following Linux on System z
distributions:
-
SUSE Linux Enterprise Server 9 (SLES 9)
-
Red Hat Enterprise Linux (RHEL 4)
Library Managed Encryption with Linux on System z requires:
-
An Encryption Key Manager component available to the TS3500
-
A TS3500 Tape Library
If the Encryption Key Manager is run on a Linux on System z partition,
then one of the following Java 2 SDKs should be installed and updated:
-
Java 2 Standard Edition SDK 5
-
Java 2 Standard Edition SDK 1.4.2
-
Updates to the Linux Java SDK may be obtained at the following Web site
Library Managed Encryption support of the TS1120 Tape Drive attached via
FCP to a Linux on System z partition is planned to be available
September 8, 2006.
In addition, it is IBM's intent to support Systems Managed Encryption for
Linux on System z (source code) for FICON-connected and ESCON-connected
TS1120 Tape Drives. This is intended to be provided in the first half of
2007 on developerWorks
IBM will work with its Linux distribution partners to provide this
function in future Linux on System z distribution releases or service
updates.
HP systems
HP-UX supports Library Managed Encryption with the TS3500.
Library Managed Encryption with HP-UX requires:
-
HP-UX 11.0, 11i, 11.23Pl
-
An Encryption Key Manager component available to the TS3500
-
A TS3500 Tape Library
Library Managed Encryption of HP servers is planned for
September 8, 2006.
To run the Encryption Key Manager on HP-UX, the IBM TotalStorage
Productivity Center — Limited Edition (TPC-LE), licensed program
product 5608-VC6 is required and is planned for
December 1, 2006.
Sun systems
Sun Solaris supports Application Managed and Library Managed Encryption
with the TS3500.
Library Managed Encryption with Sun Solaris requires:
-
Sun Solaris 8, 9 and 10
-
An Encryption Key Manager component available to the TS3500
-
A TS3500 Tape Library
Library Managed Encryption of Sun servers is planned for
September 8, 2006.
To run the Encryption Key Manager on Sun Solaris, the IBM TotalStorage
Productivity Center — Limited Edition (TPC-LE), licensed program
product 5608-VC6 is required and is planned for
December 1, 2006.
Linux
System x and other Intel®-based or AMD Opteron-based Linux servers and
System p servers support Application Managed and Library Managed
Encryption on the TS3500. Library Managed Encryption requires:
-
Red Hat Enterprise Linux 4 (REHL 4)
-
SUSE Linux Enterprise Server 9 (SLES 9)
-
Asianux 2.0
-
An Encryption Key Manager component available to the TS3500
-
A TS3500 Tape Library
If the Encryption Key Manager component is run on Linux, then one of the
following two Java 2 SDKs should be installed and updated
-
Java 2 Standard Edition SDK 5
-
Java 2 Standard Edition SDK 1.4.2
Updates to the Linux Java SDK may be obtained at the following Web site
Library Managed Encryption is planned for September 8, 2006.
Windows systems
Application Managed and Library Managed Encryption is supported on
Windows with the TS3500 Tape Library. Library Managed Encryption
requires:
-
Windows 2000 or 2003
-
An Encryption Key Manager component available to the TS3500
-
A TS3500 Tape library
Library Managed Encryption of Windows servers is planned for
September 8, 2006.
To run the Encryption Key Manager component on Windows, the IBM
TotalStorage Productivity Center — Limited Edition (TPC-LE), licensed
program product 5608-VC6 is required and is planned for
December 1, 2006.
Application software
Tivoli Storage Manager supports Application Managed Encryption on
September 29, 2006.
Compatibility
-
The TS1120 Tape Drive is read and write compatible with the 3592
Model J1A Tape Drive.
-
The TS1120 Tape Drive can read and append to cartridges written by the
3592 Model J1A Tape Drive.
-
The TS1120 Tape Drive can write cartridges in a 3592 Model J1A
format that can be read and appended to by the 3592 Model J1A Tape
Drive.
-
The TS1120 Tape Drive cannot read cartridges written by the 3590 or 3490.
Cartridges written by the TS1120 Tape Drive cannot be read by the 3590 or
3490. Even though the cartridges are similar in size, they contain
different media, and thus are not interchangeable.
-
The TS1120 Tape Drive can be attached to the same 3592 Model J70 or
C06 Controller, TS7700 Virtualization Engine, or 3494 VTS Models B10
or B20 with 3592 Model J1A Tape Drives.
Limitations
-
Although multiple systems may be attached to a TS1120 Tape Drive, the
systems cannot use the drive simultaneously. The TS1120 Tape Drive can
only be varied online to one system at a time.
-
TS1120 Tape Drives cannot be attached to the same 3592 Model J70
Controller with 3590 Tape Drives.
-
TS1120 Tape Drives are not supported for attachment to a 3590 Controller
Model A60, A50, or A00.
-
TS1120 Tape Drives will operate in J1A emulation mode when they are
attached to the same 3592 J70 or C06 Controller with 3592 Model J1A
Tape Drives. This mode is set automatically by the microcode. In this
mode, the TS1120 Tape Drives will read and write only in the J1A format
at the J1A capacity and approximate performance ratings. This
configuration requires J70 code level 1.19.1.xx, or later and Library
Manager 532.xx, or later.
-
Under z/OS, with system-managed tape support, TS1120 Tape Drives that are
encryption enabled are not supported under the same 3592 J70 or C06
Controller with TS1120 Tape Drives that are not encryption enabled. With
our system-managed tape support, though a mix of TS1120 Tape Drives can
exist in the library, under the same control unit, the TS1120 Tape Drives
need to be homogeneous and support the same capabilities.
-
TS1120 Tape Drives attached to a TS7700 Virtualization Engine or 3494 VTS
Model B10 or B20 will operate in J1A emulation mode. This mode is
set automatically by the microcode. In this mode, the TS1120 Tape Drives
will read and write only in the J1A format at the J1A capacity and
approximate performance ratings. This configuration requires VTS code
2.32.745.x, or later, and Library Manager 532.xx or higher.
-
3592 J1A Drives attached to the 3494 VTS Models B10 or B20 cannot be
replaced by TS1120 Tape Drives.
-
The VTS and TS7700 do not support Capacity Scaling of cartridges.
-
The VTS and TS7700 do not support the enabled TS1120 Tape Drive
encryption feature.
-
Currently, the TS1120 Tape Drives, running under OS/400® applications,
can read J1A format but can not write J1A format.
-
TS1120 Tape Drives attached to z/TPF are in J1A mode.
Planning information
Customer responsibilities:
Installation of the Encryption Key Manager component is a customer responsibility. Detailed
installation and configuration information is contained in the
IBM Encryption Key Manager Component for the Java Platform Introduction, Planning and User's Guide
(GA76-0418).
Physical planning is a customer responsibility. Current levels of the open systems device drivers
should be obtained to ensure the TS1120 Tape Drive is supported. The 3592 Tape Controller
Model J70, TS1120 Tape Controller, TS3500 Tape Library, and 3494 Tape Library may require
subsystem microcode updates by the IBM service representative for the proper installation and
operation of attached TS1120 Tape Drive with encryption. Inform your IBM representative to refer to
TS1120 Tape Drive maintenance information for information on these requirements so they may be
incorporated into your installation planning. Detailed physical planning information for the TS1120
Tape Drives is in the
IBM System Storage TS1120 Tape Drive and Controller Introduction and Planning Guide
(GA32-0555).
Cable orders:
Appropriate Fibre Channel cables should be ordered for each tape drive. Also refer to the
Fibre Channel Cables
section of the
Special Feature Codes
in the
3592 Model E05 Sales Manual
for Fibre Channel cable information.
Packaging
Number
Product Shipment group of boxes
TS1120 E05 TS1120 Tape Drive 1
Maintenance Manual
Power cord (for rack
or frame attachment)
Fibre Channel cables
as ordered
One data cartridge per
subsystem
One cleaning cartridge
per subsystem
Supplies
For end users and remarketers
Labeled, initialized, or bulk data media for the TS1120 Tape Drive can be ordered directly through
AAS using machine type 3599. Refer to the
3599 Sales Manual
.
For information about IBM branded media, call 888-IBM Media (426-6334) in the U.S. and Canada, or
visit
The part numbers for additional supplies are:
IBM part Supply
number item
18P7534 IBM TotalStorage Enterprise
Tape Cartridge 3592 (Data)
18P7535 IBM TotalStorage Enterprise
Tape Cartridge 3592 (Cleaning)
Note:
The 3592 data cartridge has servo tracks written on it. These tracks
enable the tape drive to accurately position the read/write head with
respect to the media while the tape is in motion. If these servo tracks
are damaged or removed (such as by Degausing), the cartridge is no longer
useable.
Security, auditability, and control
This product uses the security and auditability features of host hardware, host software, and/or
application software to which it is attached.
The customer is responsible for evaluation, selection, and implementation of security features,
administrative procedures, and appropriate controls in application systems and communications
facilities.
Back to top
Feature section
Feature number 5592 for this machine is manufactured from parts that are new or refurbished by IBM.
MES discount applicable:
Equal to the volume commitment discount
Field installable feature:
Yes
Warranty period:
One year
Feature 5592 is manufactured from parts that are refurbished. Regardless, IBM's standard warranty
terms apply.
Customer setup:
No
Machine code:
Same license terms and conditions as base machine.
Back to top
The prices provided in this announcement are suggested retail prices for the U.S. only and are
provided for your information only. Dealer prices may vary, and prices may also vary by country.
Prices are subject to change without notice. For additional information and current prices, contact
your local IBM representative.
Field Plant
Machine Feature Purchase install install
Description type Model number price MMMC only only
Encrypt 3592 E05 5592 $5,000 NC Y N*
Capable
Refurb Field
Encryption 5596 500 NC Y N
Configuration
-- Field
Encryption 9592 NC NC N Y
Capable Plant
Encryption 9596 NC NC N Y
Configuration
-- Plant
Router for 3592 J70 5593 1,280 NC N N
EKM Attach
CU Encryption 5595 500 NC Y N
Configuration
CU Encryption 9595 NC NC N Y
Configuration
Plant
Field Install 9877 NC NC N N
J70 in
3952-F05
Router for 3592 C06 5593 1,280 NC N N
EKM Attach
CU Encryption 5595 500 NC Y N
Configuration
Field
CU Encryption 9595 NC NC N Y
Configuration
Plant
Field Install F05 9885 NC NC N N
C06 in 3952
Plant Install F05 9886 NC NC N Y
C06 in 3952
Silo
Field Install F05 9887 NC NC N N
C06 in 3953
Plant Install F05 9889 NC NC N Y
C06 in 3952
for 3494
Router for 3952 F05 5593 1,280 NC N N
EKM Attach
Attach 5594 980 NC N N
Additional
CU to
Router
Router for 3953 F05 5593 1,280 NC N N
EKM Attach
Router for 3494 L10 5593 1,280 NC N N
EKM Attach L12
L14
L22
Router for 3590 C10 5593 1,280 NC N N
EKM Attach
Attach 5594 980 NC N N
Additional
CU to
Router
Encryption 3584 L22 9900 NC NC N N
Configuration L23
D22
D23
NC = No charge
N = No
Y = Yes
-
*
-
If field installed on a purchased machine, parts removed or replaced become the property of IBM and
must be returned.
Back to top
To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business
Partner.
To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).
Phone: 800-IBM-CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
Internet: callserv@ca.ibm.com
Mail: IBM Americas Call Centers
Dept. Teleweb Customer Support, 9th floor
105 Moatfield Drive
North York, Ontario
Canada M3B 3R1
Reference: YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the
mailing list for catalogs of IBM products.
Note:
Shipments will begin after the planned availability date.
Trademarks
-
-
System Storage, iSeries, System i, SP, System p, System x, System z9, Virtualization Engine, FICON,
i5/OS, System z, and developerWorks are trademarks of International Business Machines Corporation in
the United States or other countries or both.
-
-
TotalStorage, AS/400, pSeries, RS/6000, xSeries, zSeries, Netfinity, ESCON, eServer, S/390, AIX,
z/OS, Tivoli, z/VM, z/VSE, and OS/400 are registered trademarks of International Business Machines
Corporation in the United States or other countries or both.
-
-
Intel is a registered trademark of Intel Corporation.
-
-
Microsoft and Windows are trademarks of Microsoft Corporation.
-
-
Java is a trademark of Sun Microsystems, Inc.
-
-
Linux is a trademark of Linus Torvalds in the United States, other countries or both.
-
-
Other company, product, and service names may be trademarks or service marks of others.
At a glance
