IBM System Storage TS1120 Tape Drive Model E05 supports encryption

IBM United States Hardware Announcement 106-655
August 29, 2006

 

 ENUS106-655.PDF (79KB)

Table of contents   Document options  
TOC link At a glance TOC link Reference information
TOC link Overview TOC link Publications
TOC link Key prerequisites TOC link Services
TOC link Planned availability dates TOC link Technical information
TOC link Description TOC link Terms and conditions
TOC link Product positioning TOC link Prices
TOC link Statement of general direction TOC link Order now
 
Printable version Printable version

 
At a glance

IBM System Storage TS1120 Tape Drive encryption capability enhancements include:

  • Drive hardware and microcode additions, and changes for TS1120 Tape Drive encryption
  • A no charge encryption-capable feature number for new TS1120 Tape Drives
  • An optional chargeable encryption feature number upgrade, that may contain refurbished parts, for installed TS1120 Tape Drives
  • Encryption capabilities designed to work with the new Encryption Key Manager component
  • Three encryption management techniques supported: System, Application and Library Managed
  • TS1120 Tape Drive encryption supported for IBM System Storage tape subsystems and libraries
  • A router for out-of-band key management support and Encryption Key Manager connectivity for Tape Controllers, Tape Frames, and Tape Subsystem

For ordering, contact:

Your IBM representative, an IBM Business Partner, or IBM Americas Call Centers at 800-IBM-CALL (Reference: YE001).
 
Back topBack to top
 

Overview

The IBM System Storage™ TS1120 Tape Drive (machine type 3592, Model E05) has been enhanced to provide you the option of using drive based data encryption. This encryption capability is now standard on all new TS1120 Tape Drives and is a chargeable upgrade feature for existing installed TS1120 Tape Drives. The encryption capability includes drive hardware, as well as microcode additions and changes. Also being introduced is a new, separate IBM Encryption Key Manager component for the Java™ Platform (Encryption Key Manager) program that supports the generation and communication of encryption keys for the tape drives across the enterprise. This TS1120 Tape Drive encryption announcement supports the previous storage statements of direction, dated April 27, 2006.

The TS1120-based encryption and associated Encryption Key Manager component are supported in a wide variety of operating system environments including z/OS®, i5/OS™, AIX®, HP, Sun, Linux™, and Windows™. In addition, three different encryption management methods are supported: Application, System, or Library Managed. This encryption capability is supported when the TS1120 Tape Drive is integrated or attaches in the IBM System Storage TS3500 Tape Library, IBM System Storage TS1120 Tape Controller Model C06, IBM TotalStorage® 3592 Tape Controller Model J70, IBM TotalStorage 3494 Tape Libraries, IBM TotalStorage C20 Silo Attach frame, and stand-alone environments.

The TS1120 drive's encryption capability and its subsystem integration support help provide you with a flexible tape data encryption solution that supports encryption and key management across a variety of environments, supporting a single point of control for all encryption keys, and most importantly, can help customers protect tape data in a cost effective way.
 
Back topBack to top
 

Key prerequisites

The TS1120 Tape Drive is supported in a wide range of environments: IBM System z™, System i™, System p™, System x™, and can be used with a wide range of Linux on System z, Sun, and Hewlett Packard servers, and Linux-based servers, as well as Intel®-compatible servers running Linux, Microsoft™ Windows 2000, or Windows Server 2003. A tape controller is required for attachment to ESCON® or FICON™ channels on IBM mainframe servers. Refer to the Technical information section for details.
 
Back topBack to top
 

Planned availability dates
  • September 8, 2006: Open systems TS3500 Library, Application, and System Managed encryption.
  • September 8, 2006: TS1120 Tape Drive Model E05 using System Managed Encryption with supported AIX servers.
  • September 8, 2006: Encryption Key Manager on AIX, z/OS, i5/OS, and Linux.
  • September 29, 2006: Application Managed Encryption support using Tivoli® Storage Manager.
  • October 27, 2006: z/OS System Managed Encryption. This includes support on the TS1120 Tape Controller Model C06 (3592 C06), 3494 Models L10, L12, L14, L22 Tape Library Frames, 3592 Model J70, 3590 Model C10, 3952 Model F05, 3953 Model F05 and TS3500 Tape Library (3584 L23, D23, L22, D22).
  • December 1, 2006: Encryption Key Manager on HP, Sun, and Windows

 
Back topBack to top
 
Description

The TS1120 Tape Drive is a successor to the 3592 Tape Drive Model J1A and the 3590 Enterprise Tape Drive. The TS1120 Tape Drive is machine type 3592 and Model E05. It is designed for high-performance tape applications, including:

  • High-speed data-save operations where backup windows are critical, and large amounts of data are archived to tape.
  • Protection of tape data by high speed encryption for security or regulatory needs.
  • Large-scale automated tape environments where performance and reliability are required.
  • Large-scale mass data archive applications where massive amounts of data need to be quickly saved to tape for storage and later recall (examples include the seismic industry, data warehousing, and record management applications).

The TS1120 Tape Drive is the second generation of a new family of tape products that are designed to help address the growing needs of both new and existing IBM tape customers across a wide range of environments. The TS1120 Tape Drive now includes:

  • Larger capacity compared to the 3592 Model J1A, to help you reduce the number of cartridges required and floor space needed
  • Smaller form factor compared to the 3590 Tape Drive, which can help reduce the automation foot print
  • Dual-ported native switched fabric interface, designed to enhance the attachment flexibility
  • High reliability, to help improve operations
  • Additional performance and access improvements over the 3592 J1A
  • Hardware tape encryption to protect tape data integration with the new Encryption Key Manager component

Encryption

The TS1120 Tape Drive is being enhanced to support encryption of data on a tape cartridge. New T1120 Tape Drives will be encryption capable and a chargeable upgrade will be available for currently installed TS1120 Tape Drives. The encryption capability is implemented through tape drive hardware as well as microcode additions and changes. All 3592 media, including WORM cartridges, can be encrypted. In addition, a new Encryption Key Manager program is designed to support encryption. The Encryption Key Manager program uses standard key repositories on supported platforms. This software will be required to be installed on a supported server and interface with the tape drive to support encryption in a System or Library Managed Encryption implementation.

Note: With encryption enabled, the access time to data on the tape drive will increase. Also, the tape drive unload time will increase. This is due to the time needed to retrieve, read, and write the encryption key.

Encryption will be available for System z and open systems environments. Three different methods of encryption will be supported as follows.

Application Managed: The TS1120 Tape Drive will support Application Managed Encryption for open systems environments. The application will control the encryption process, and will generate and provide keys to the TS1120 tape drive. Tivoli Storage Manager is being enhanced to support this capability.

Library Managed: Encryption by volume and drive policy will be supported. The user will set up and control the encryption through the library interface. Initially, this will be supported for the TS3500 or 3584 tape library in open systems environments. The Encryption Key Manager program will be required for this support.

System Managed: With Systems Managed Encryption, the encryption policy will be passed between the server and the drives. This is the only vehicle for z/OS environments and will require the Encryption Key Manager program. DFSMS will support the Encryption Key Manager component. Systems managed encryption will also be available for AIX servers. This support will require a new AIX tape device driver, as well as the Encryption Key Manager program.

System Managed Encryption on open systems is "in-band" where tape drive requests to the Encryption Key Manager component travel over the Fibre Channel channels to the server hosting the EKM. Systems Managed Encryption on z/OS has two different configuration options. First is "in-band", where tape drive requests to the Encryption Key Manager component travel over the ESCON/FICON channels to the server proxy that is TCP/IP connected to the Encryption Key Manager. Second is "out-of-band", where the tape controller establishes the communication to the Encryption Key Manager server over TCP/IP connections between the tape controller and the Encryption Key Manager server. A router is required for out-of-band and Encryption Key Management support and Encryption Key Manager connectivity for the TS1120 Tape Controller Model C06, the 3592 J70 Tape Controller, the 3952 F05 and 3953 F05 Tape Frames, the 3494 L10, L12, L14, L22 Tape Library Frame, and IBM TotalStorage 3590 C10 Subsystem.
 
Back topBack to top
 

Product positioning

The TS1120 Tape Drive is the successor to the 3592 Tape Drive Model J1A and the highly successful 3590 Enterprise Tape Drive. The TS1120 Tape Drive is supported in a wide range of environments including selected System z, iSeries™, AS/400®, pSeries®, RS/6000®, xSeries®, Sun, and Hewlett Packard servers, as well as Intel-compatible servers running Linux and Microsoft Windows 2000, or Windows Server 2003. It has significant potential performance and capacity benefits over the IBM 3590, as well as other half-inch tape drives such as the IBM 3480, 3490, or 3490E, and now supports data encryption on a tape cartridge for security and the customers regulatory needs.
 
Back topBack to top
 

Statement of general direction

It is IBM's intent to support the following Systems Managed Encryption with the TS1120:

  • z/VM® V5.1 and V5.2 support of the TS1120 Tape Drive with encryption is planned for fourth quarter 2006. This includes transparent support for VM guests. z/VM support will require the Encryption Key Manager component running on another operating system other than z/VM using an out-of-band connection.
  • z/TPF V1.1 support of the TS1120 Tape Drive with encryption is planned for the first half 2007. z/TPF support will require the Encryption Key Manager component running on another operating system other than z/TPF using an out-of-band connection.
  • z/VSE® V3.1 support of the TS1120 Tape Drive with encryption is planned for first half 2007. It is also IBM's intent to support z/VSE V4.1 (when made available) using Systems Managed Encryption with the TS1120. z/VSE support will require the Encryption Key Manager component running on another operating system other than z/VSE using an out-of-band connection.
  • Linux on System z support (source code) for FICON- and ESCON-connected TS1120 Tape Drives is intended to be provided in first half 2007 on developerWorks™

    IBM will work with its Linux distribution partners to provide this function in future Linux on System z distribution releases or service updates.

    This future development is designed to help customers with these operating systems utilize the TS1120 Tape Drive to protect tape data.

All statements regarding IBM's plans, directions, and intent are subject to change or withdrawal without notice. Any reliance on these Statements of general direction is at the relying party's sole risk and will not create liability or obligation for IBM.
 
Back topBack to top
 

Reference information

Refer to:

  • The IBM TotalStorage 3599 support for the TS1120 Tape Drive format in 3592 Data Cartridges in Hardware Announcement 105-412 , dated October 11, 2005
  • The IBM TotalStorage 3953 Library Manager Model L05 and Tape Frame Model F05 in Hardware Announcement 105-176 , dated May 10, 2005
  • VTS support of the 3592 Tape Drive, other functional enhancements, and 3494 Tape Library enhancements including increased open systems support in Hardware Announcement 104-349 , dated October 5, 2004
  • Support of the 3592 WORM functionality and economy cartridges in the 3494 Tape Library in Hardware Announcement 104-148 , dated April 27, 2004
  • The IBM TotalStorage Enterprise Tape Drive 3592 attachment in the IBM TotalStorage Enterprise Automated Tape Library Models L22, D22, and D24 in Hardware Announcement 103-239 , dated September 9, 2003
  • The IBM TotalStorage Enterprise Tape Drive 3592 attachment in the IBM TotalStorage Silo Compatible Tape Drive Frame 3592 Model C20 in Hardware Announcement 103-233 , dated September 9, 2003
  • The IBM TotalStorage Enterprise Tape Drive 3592 attachment to ESCON/FICON channels through the IBM System Storage TS1120 Tape Controller 3592 Model C06 in Hardware Announcement 106-339 , dated May 9, 2006
  • The IBM TotalStorage Enterprise Tape Drive 3592 attachment to ESCON/FICON channels through the IBM TotalStorage Enterprise Tape Controller 3592 Model J70 in Hardware Announcement 103-236 , dated September 9, 2003
  • The IBM TotalStorage Enterprise Tape Cartridge 3592 available with new models of the 3599 in Hardware Announcement 103-238 , dated September 9, 2003

Business Partner information

If you are a Direct Reseller - System Reseller acquiring products from IBM, you may link directly to Business Partner information for this announcement. A PartnerWorld ID and password are required (use IBM ID).

BP Attachment for Announcement Letter 106-655

Trademarks

 
System Storage, i5/OS, System i, System z, System p, System x, FICON, iSeries, and developerWorks are trademarks of International Business Machines Corporation in the United States or other countries or both.
 
AIX, z/OS, TotalStorage, ESCON, Tivoli, AS/400, pSeries, RS/6000, xSeries, z/VM, and z/VSE are registered trademarks of International Business Machines Corporation in the United States or other countries or both.
 
Intel is a registered trademark of Intel Corporation.
 
Windows and Microsoft are trademarks of Microsoft Corporation.
 
Java is a trademark of Sun Microsystems, Inc.
 
Linux is a trademark of Linus Torvalds in the United States, other countries or both.
 
Other company, product, and service names may be trademarks or service marks of others.

 
Back topBack to top
 
Publications

The following publications, including support of the TS1120 Tape Drive, are available now at

                                        Order
Title                                   number
 
IBM System Storage(TM)                  GA32-0555-01
 Enterprise Tape
 System 3592 Introduction and
 Planning Guide
 
IBM TotalStorage(R) Silo Compatible     GA32-0463-05
 Tape Frame 3592 Introduction,
 Planning, and User's Guide
 
IBM System Storage Enterprise Tape      GA32-0556-01
 System 3592 Operator Guide
 
IBM Encryption Key Manager Component    GA76-0418
 for the Java(TM) Platform
 Introduction, Planning and
 User's Guide

The IBM System Storage Enterprise Tape System 3592 Operator Guide (GA32-0556) is shipped with the product. Additional copies will be available with the planned availability of that attachment.

The IBM System Storage Enterprise Tape System 3592 Hardware Reference (GA32-0562) will include the TS1120 Tape Drive and will be available after the planned availability. The Publication Notification System (PNS) is available by order number and product number. Customers currently subscribing to PNS will automatically receive notifications by e-mail. Customers who wish to subscribe, can visit the PNS Web site location at

The publications listed on the notification can be ordered by calling the Pubs Support Group in Raleigh at 800-879-2755, option 1.

The IBM Publications Center Portal

The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided, as well as payment options via credit card. Furthermore, a large number of publications are available online in various file formats, which can currently be downloaded free of charge.

Note that PNS subscribers most often order their publications via the Publications Center.
 
Back topBack to top
 

Services

IBM Integrated Technology Services

IBM services include business consulting, outsourcing, hosting services, applications, and other technology management.

These services help you learn about, plan, install, manage, or optimize your IT infrastructure to be an On Demand Business. They can help you integrate your high-speed networks, storage systems, application servers, wireless protocols, and an array of platforms, middleware, and communications software for IBM and many non-IBM offerings. IBM is your one-stop shop for IT support needs.

For details on available services, contact your IBM representative or visit

For details on available IBM Business Continuity and Recovery Services, contact your IBM representative or visit

For details on education offerings related to specific products, visit

Select your country, and then select the product as the category.
 
Back topBack to top
 

Technical information

Specified operating environment

Physical specifications

TS1120 Tape Drive canister:

  • Width: 197.0 mm (7.75 in)
  • Depth: 464 mm (18.26 in)
  • Height: 92.7 mm (3.65 in)
  • Weight: 5.7 kg (12 lb 7 oz)1
1
When mounted in a rack, up to four drive canisters can be mounted in two cradles on a shelf that requires 10 EIA of rack space. The weight of the rack-mount slides and shelf, two cradles, power supplies, and four tape drives is 69.2 kg (152 lb 7 oz).

To assure installability and serviceability in non-IBM industry-standard racks, review the installation planning information for any product specific installation requirements.

Operating environment

  • Temperature: 16° to 32°C (60° to 90°F) in operation (media in use)
  • Relative humidity: 20% to 80% non-condensing (limited by media)
  • Maximum wet bulb temperature: 23°C (73.4°F)
  • Individual drive:
    • Heat output: 46 W (157 Btu/Hour)
    • Electrical power: 4.8 amps at +5 volts; 1.6 amps at +12 volts
  • In a cradle with ac power supply:
    • Caloric value: 307 Btu/Hour per drive
    • Electrical power: 0.1 kVA per drive
    • Leakage current: 0.63 ma per drive power supply
    • Inrush current: 30 amps per drive power supply
    • Operating current:
      • 0.5 amps per drive at 200 V ac
      • 1.0 amps per drive at 100 V ac
    • Capacity of exhaust: 0.34 Cubic meter/min (12 CFM) per drive
    • Noise level:
      • 6.2 Bels idle
      • 6.3 Bels operating

Hardware requirements

TS1120 Tape Drive

Each TS1120 Tape Drive comes with dual-ported switched fabric 4-Gbps Fibre Channel attachments, for attachment to multiple servers or a single server with redundancy. It can be attached to IBM System i™, i5 and IBM eServer® iSeries™, AS/400®, System p™, p5 and pSeries®, RS/6000®, RS/6000 SP™ systems, System z9™ and zSeries® servers, System x™ and xSeries®, Netfinity®, and non-IBM servers, workstations, and personal computers that support Fibre Channel interfaces. It can also attach to the TS1120 Tape Controller Model C06, 3592 Tape Controller Model J70, TS7700 Virtualization Engine™, or 3494 VTS Models  B10 or B20 for attachment to ESCON® or FICON™ channels on IBM System z9, zSeries, or S/390®. For the latest details on specific hardware, software, and Fibre Channel support for the TS1120 Tape Drive, refer to the following Web site

TS3500 or 3584 Tape Library installations

The TS1120 Tape Drive may be installed and is supported in the IBM System Storage TS3500 Tape Library Models L23, D53, L22, and D52. Support for TS1120 encryption function requires a minimum level of microcode firmware level and is a customer's responsibility to load, configure, and maintain on the TS3500 Tape Library. Feature number 9900 (Encryption Configuration) should be ordered on the TS3500 Tape Library.

Customers will need to download the latest version of library firmware.

3494 Tape Library and 3953 Library Manager support

TS1120 encryption support for tape drives in an Enterprise Tape Library 3494 or drives attached via a 3953 Library Manager requires a minimum level of microcode firmware in the library manager. The level of microcode firmware required will be shipped the first time the customer orders FC5595 or when they order feature number 9595 and the 3592 Tape Controller is not located in a customer-owned rack (feature number 4641). Installation of this firmware can also update the drive microcode firmware on any installed open-system attached 3592 Model J1A Tape Drive, or TS1120 Tape Drive. With this support, encryption, WORM, and standard tape cartridges in both sizes can be intermixed within the same tape library or a common tape cartridge scratch pool.

The minimum level of microcode firmware will be the LM534.xx code.

Media Interchange Toleration support

Non-IBM 3494 or 3584 open systems installations

Support for the TS1120 encryption function installed in either a 3592 C20 Silo Compact Frame or a 19-inch rack open systems attached, require a minimum level of microcode firmware for any 3592 J1A Enterprise Tape Drive and/or TS1120 Tape Drive where the customer intends to use tape cartridges from a common tape cartridge scratch pool.

The minimum level of microcode firmware will be the D3I0_851 for the 3592 J1A Enterprise Tape Drive and D3I1_919 for the TS1120 Tape Drive (3592 E05), or may be ordered as follows:

  • 3592 J1A Enterprise Tape Drive support: Feature number 0500 Drive Microcode Update
  • TS1120 Tape Drive (3592 E05) support: Feature number 0500 Drive Microcode Update

IBM Tape Controller installations

Support for the TS1120 encryption function, installed in any IBM controller attachment, requires a minimum level of microcode firmware for any 3592 J70 Enterprise Tape Controller, TS1120 Tape Controller (3592 C06), or 3590 A60 Enterprise Tape Controller where you intend to use tape cartridges from a common tape cartridge scratch pool.

The minimum level of microcode firmware will be the 1.19.5.x for the 3592 J70 Enterprise Tape Controller or 1.21.x.x for the TS1120 Tape Controller (3592 C06), and/or 1.16.1.11 for the 3590 A60 Enterprise Tape Controller.

The level of microcode firmware required for the TS1120 Tape Controller (3592 C06) and the 3592 J70 Enterprise Tape Controller will be shipped the first time the customer orders FC5595 or when they order FC9595. To obtain the microcode required for the 3590 A60 Enterprise Tape Controller feature number 0520 Function Enhancement Field should be ordered.

Software requirements

Support for the TS1120 Tape Drive with encryption is provided in i5/OS™, AIX®, HP-UX, Linux™, Sun, and Microsoft™ Windows™ 2000, or 2003 operating system environments. Support for the z/OS® and operating system environments is available through the 3592 Model J70 Controller or TS1120 Tape Controller.

The installation of a TS1120 Tape Drive with encryption may require code updates for System z™, System i, System p and supported open systems device drivers or storage management software. Per the Solutions Assurance Product Review (SAPR) Guide , the account team or Business Partner should confirm that the customer checks the appropriate PSP buckets for System z environments or the equivalent support levels required for their particular software environment prior to the installation of the TS1120 Tape Drive with encryption. A Solutions Assurance call is required at a minimum for the installation of the first new TS1120 Tape Drive with encryption activated in an account.

An update of the open systems device drivers can be obtained via anonymous FTP from

Look under the directory storage/devdrvr.

For details on supported software versions and release levels for the TS1120 Tape Drive, as well as hardware support information, refer to the following Web site

Three modes of encryption management are supported: System Managed (available for z/OS and AIX only), Library Managed (available for AIX, i5/OS, Linux, Linux on System z FCP connected tape drives, HP, Sun and Windows) and Application Managed (IBM Tivoli® Storage Manager only).

System z

The TS1120 Tape Drive with encryption enabled is supported for attachment to ESCON and FICON channels on System z servers.

z/OS support of System Managed Encryption requires:

  • z/OS and z/OS.e V1R5, or later
  • z/OS V1R4 with z/OS V1R4 z990 Exploitation Support feature
  • z/OS.e V1R4 with z/OS.e V1R4 z990 Coexistence Update feature
  • An Encryption Key Manager component available to the z/OS system

z/OS support of the TS1120 Tape Drive with encryption is planned for October 27, 2006 (z/OS V1R6 and V1R7), November 17, 2006 (z/OS V1R8), and February 2007 (z/OS V1R4 and V1R5). For z/OS V1R6 and V1R7, refer to enabling APAR OA15685, and for z/OS V1R8, refer to enabling APAR OA17562. An enabling APAR will also be available for z/OS V1R4 and V1R5. For additional information on the support being provided, refer to the 3592 PSP bucket.

If the Encryption Key Manager is run on the z/OS system, then one of the following IBM SDK for Java 2 must be installed:

  • IBM SDK for z/OS, Java 2 Technology Edition, V1.4, 5655-I56 (at the SDK1.4.2 SR6, or later level)
  • IBM 31-bit SDK for z/OS, Java 2 Technology Edition, V5.0, 5655-I98 (at the SDK5 SR3, or later level)

In addition, it is IBM's intent to support the following Systems Managed Encryption with the TS1120:

  • z/VM® V5.1 and V5.2 support of the TS1120 Tape Drive with encryption is planned for fourth quarter 2006. This includes transparent support for VM guests. The z/VM support will require the Encryption Key Manager component running on another operating system other than z/VM using an out-of-band connection.
  • z/TPF V1.1 support of the TS1120 Tape Drive with encryption is planned for first half 2007. The z/TPF support will require the Encryption Key Manager component running on another operating system other than z/TPF using an out-of-band connection.
  • z/VSE® V3.1 support of the TS1120 Tape Drive with encryption is planned for first half 2007. It is also IBM's intent to support z/VSE V4.1 (when made available) using Systems Managed Encryption with the TS1120. The z/VSE support will require the Encryption Key Manager component running on another operating system other than z/VSE using an out-of-band connection.

System i

System i supports Library Managed Encryption in conjunction with the TS3500 tape library.

System i support of Library Managed Encryption on the TS3500 requires:

  • i5/OS V5.2, or later
  • An Encryption Key Manager component available to the TS3500 tape library
  • A TS3500 Tape Library

The Encryption Key Manager is supported on i5/OS V5.3, or later. If the Encryption Key Manager component is run on i5/OS, then IBM Developer Kit for Java — Java Developer Kit 5.0 (5722-JV1) is required.

i5/OS Library Managed Encryption support is planned for September 8, 2006.

System p

System p supports System Managed Encryption and Library Managed Encryption in conjunction with the TS3500 tape library, and Application Managed encryption with Tivoli Storage Manager.

AIX V5.2, or later is required for Application Managed, System Managed, and Library Managed Encryption.

System Managed Encryption with AIX requires:

  • An Encryption Key Manager component available to the AIX system
  • The ATAPE device drivers must be installed, updated and utilized. It may be downloaded from the following Web site
    ftp://ftp.software.ibm.com/storage/devdrvr/AIX/

AIX System Managed encryption support is planned for September 8, 2006.

Library Managed Encryption with AIX requires:

  • An Encryption Key Manager component available to the TS3500
  • A TS3500 Tape Library

AIX Library Managed Encryption support is planned for September 8, 2006.

If the Encryption Key Manager is run on a System p server with AIX:

  • AIX V5.2, or later is required
  • One of the following two IBM Java SDK's should be updated to include the latest version of the Encryption Key Manager:
    • Java SDK 5 (31 and 64 bit)
    • Java SDK 1.4.2 (31 and 64 bit)
  • Updates to the AIX Java SDK may be obtained at the following Web site

Linux on System z

Library Managed Encryption is available for System z servers connected to the TS3500 via FCP, running one of the following Linux on System z distributions:

  • SUSE Linux Enterprise Server 9 (SLES 9)
  • Red Hat Enterprise Linux (RHEL 4)

Library Managed Encryption with Linux on System z requires:

  • An Encryption Key Manager component available to the TS3500
  • A TS3500 Tape Library

If the Encryption Key Manager is run on a Linux on System z partition, then one of the following Java 2 SDKs should be installed and updated:

Library Managed Encryption support of the TS1120 Tape Drive attached via FCP to a Linux on System z partition is planned to be available September 8, 2006.

In addition, it is IBM's intent to support Systems Managed Encryption for Linux on System z (source code) for FICON-connected and ESCON-connected TS1120 Tape Drives. This is intended to be provided in the first half of 2007 on developerWorks

IBM will work with its Linux distribution partners to provide this function in future Linux on System z distribution releases or service updates.

HP systems

HP-UX supports Library Managed Encryption with the TS3500.

Library Managed Encryption with HP-UX requires:

  • HP-UX 11.0, 11i, 11.23Pl
  • An Encryption Key Manager component available to the TS3500
  • A TS3500 Tape Library

Library Managed Encryption of HP servers is planned for September 8, 2006.

To run the Encryption Key Manager on HP-UX, the IBM TotalStorage Productivity Center — Limited Edition (TPC-LE), licensed program product 5608-VC6 is required and is planned for December 1, 2006.

Sun systems

Sun Solaris supports Application Managed and Library Managed Encryption with the TS3500.

Library Managed Encryption with Sun Solaris requires:

  • Sun Solaris 8, 9 and 10
  • An Encryption Key Manager component available to the TS3500
  • A TS3500 Tape Library

Library Managed Encryption of Sun servers is planned for September 8, 2006.

To run the Encryption Key Manager on Sun Solaris, the IBM TotalStorage Productivity Center — Limited Edition (TPC-LE), licensed program product 5608-VC6 is required and is planned for December 1, 2006.

Linux

System x and other Intel®-based or AMD Opteron-based Linux servers and System p servers support Application Managed and Library Managed Encryption on the TS3500. Library Managed Encryption requires:

  • Red Hat Enterprise Linux 4 (REHL 4)
  • SUSE Linux Enterprise Server 9 (SLES 9)
  • Asianux 2.0
  • An Encryption Key Manager component available to the TS3500
  • A TS3500 Tape Library

If the Encryption Key Manager component is run on Linux, then one of the following two Java 2 SDKs should be installed and updated

  • Java 2 Standard Edition SDK 5
  • Java 2 Standard Edition SDK 1.4.2

Updates to the Linux Java SDK may be obtained at the following Web site

Library Managed Encryption is planned for September 8, 2006.

Windows systems

Application Managed and Library Managed Encryption is supported on Windows with the TS3500 Tape Library. Library Managed Encryption requires:

  • Windows 2000 or 2003
  • An Encryption Key Manager component available to the TS3500
  • A TS3500 Tape library

Library Managed Encryption of Windows servers is planned for September 8, 2006.

To run the Encryption Key Manager component on Windows, the IBM TotalStorage Productivity Center — Limited Edition (TPC-LE), licensed program product 5608-VC6 is required and is planned for December 1, 2006.

Application software

Tivoli Storage Manager supports Application Managed Encryption on September 29, 2006.

Compatibility

  • The TS1120 Tape Drive is read and write compatible with the 3592 Model J1A Tape Drive.
    • The TS1120 Tape Drive can read and append to cartridges written by the 3592 Model J1A Tape Drive.
    • The TS1120 Tape Drive can write cartridges in a 3592 Model J1A format that can be read and appended to by the 3592 Model J1A Tape Drive.
  • The TS1120 Tape Drive cannot read cartridges written by the 3590 or 3490. Cartridges written by the TS1120 Tape Drive cannot be read by the 3590 or 3490. Even though the cartridges are similar in size, they contain different media, and thus are not interchangeable.
  • The TS1120 Tape Drive can be attached to the same 3592 Model J70 or C06 Controller, TS7700 Virtualization Engine, or 3494 VTS Models B10 or B20 with 3592 Model J1A Tape Drives.

Limitations

  • Although multiple systems may be attached to a TS1120 Tape Drive, the systems cannot use the drive simultaneously. The TS1120 Tape Drive can only be varied online to one system at a time.
  • TS1120 Tape Drives cannot be attached to the same 3592 Model J70 Controller with 3590 Tape Drives.
  • TS1120 Tape Drives are not supported for attachment to a 3590 Controller Model A60, A50, or A00.
  • TS1120 Tape Drives will operate in J1A emulation mode when they are attached to the same 3592 J70 or C06 Controller with 3592 Model J1A Tape Drives. This mode is set automatically by the microcode. In this mode, the TS1120 Tape Drives will read and write only in the J1A format at the J1A capacity and approximate performance ratings. This configuration requires J70 code level 1.19.1.xx, or later and Library Manager 532.xx, or later.
  • Under z/OS, with system-managed tape support, TS1120 Tape Drives that are encryption enabled are not supported under the same 3592 J70 or C06 Controller with TS1120 Tape Drives that are not encryption enabled. With our system-managed tape support, though a mix of TS1120 Tape Drives can exist in the library, under the same control unit, the TS1120 Tape Drives need to be homogeneous and support the same capabilities.
  • TS1120 Tape Drives attached to a TS7700 Virtualization Engine or 3494 VTS Model B10 or B20 will operate in J1A emulation mode. This mode is set automatically by the microcode. In this mode, the TS1120 Tape Drives will read and write only in the J1A format at the J1A capacity and approximate performance ratings. This configuration requires VTS code 2.32.745.x, or later, and Library Manager 532.xx or higher.
  • 3592 J1A Drives attached to the 3494 VTS Models B10 or B20 cannot be replaced by TS1120 Tape Drives.
  • The VTS and TS7700 do not support Capacity Scaling of cartridges.
  • The VTS and TS7700 do not support the enabled TS1120 Tape Drive encryption feature.
  • Currently, the TS1120 Tape Drives, running under OS/400® applications, can read J1A format but can not write J1A format.
  • TS1120 Tape Drives attached to z/TPF are in J1A mode.

Planning information

Customer responsibilities: Installation of the Encryption Key Manager component is a customer responsibility. Detailed installation and configuration information is contained in the IBM Encryption Key Manager Component for the Java Platform Introduction, Planning and User's Guide (GA76-0418).

Physical planning is a customer responsibility. Current levels of the open systems device drivers should be obtained to ensure the TS1120 Tape Drive is supported. The 3592 Tape Controller Model J70, TS1120 Tape Controller, TS3500 Tape Library, and 3494 Tape Library may require subsystem microcode updates by the IBM service representative for the proper installation and operation of attached TS1120 Tape Drive with encryption. Inform your IBM representative to refer to TS1120 Tape Drive maintenance information for information on these requirements so they may be incorporated into your installation planning. Detailed physical planning information for the TS1120 Tape Drives is in the IBM System Storage TS1120 Tape Drive and Controller Introduction and Planning Guide (GA32-0555).

Cable orders: Appropriate Fibre Channel cables should be ordered for each tape drive. Also refer to the Fibre Channel Cables section of the Special Feature Codes in the 3592 Model E05 Sales Manual for Fibre Channel cable information.

Packaging

                                           Number
Product        Shipment group              of boxes
 
TS1120 E05     TS1120 Tape Drive           1
                Maintenance Manual
               Power cord (for rack
                or frame attachment)
               Fibre Channel cables
                as ordered
               One data cartridge per
                subsystem
               One cleaning cartridge
                per subsystem

Supplies

For end users and remarketers

Labeled, initialized, or bulk data media for the TS1120 Tape Drive can be ordered directly through AAS using machine type 3599. Refer to the 3599 Sales Manual .

For information about IBM branded media, call 888-IBM Media (426-6334) in the U.S. and Canada, or visit

The part numbers for additional supplies are:

IBM part         Supply
number           item
 
18P7534          IBM TotalStorage Enterprise
                  Tape Cartridge 3592 (Data)
18P7535          IBM TotalStorage Enterprise
                  Tape Cartridge 3592 (Cleaning)

Note: The 3592 data cartridge has servo tracks written on it. These tracks enable the tape drive to accurately position the read/write head with respect to the media while the tape is in motion. If these servo tracks are damaged or removed (such as by Degausing), the cartridge is no longer useable.

Security, auditability, and control

This product uses the security and auditability features of host hardware, host software, and/or application software to which it is attached.

The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communications facilities.
 
Back topBack to top
 

Terms and conditions

Feature section

Feature number 5592 for this machine is manufactured from parts that are new or refurbished by IBM.

MES discount applicable: Equal to the volume commitment discount

Field installable feature: Yes

Warranty period: One year

Feature 5592 is manufactured from parts that are refurbished. Regardless, IBM's standard warranty terms apply.

Customer setup: No

Machine code: Same license terms and conditions as base machine.
 
Back topBack to top
 

Prices

The prices provided in this announcement are suggested retail prices for the U.S. only and are provided for your information only. Dealer prices may vary, and prices may also vary by country. Prices are subject to change without notice. For additional information and current prices, contact your local IBM representative.

                                                   Field   Plant
               Machine       Feature Purchase      install install
Description    type    Model number  price    MMMC only    only
 
Encrypt        3592    E05   5592    $5,000     NC Y       N*
 Capable
 Refurb Field
Encryption                   5596       500     NC Y       N
 Configuration
 -- Field
Encryption                   9592        NC     NC N       Y
 Capable Plant
Encryption                   9596        NC     NC N       Y
 Configuration
 -- Plant
 
Router for     3592    J70   5593     1,280     NC N       N
 EKM Attach
CU Encryption                5595       500     NC Y       N
 Configuration
CU Encryption                9595        NC     NC N       Y
 Configuration
 
 Plant
Field Install                9877        NC     NC N       N
 J70 in
 3952-F05
 
Router for     3592    C06   5593     1,280     NC N       N
 EKM Attach
CU Encryption                5595       500     NC Y       N
 Configuration
 Field
CU Encryption                9595        NC     NC N       Y
 Configuration
 Plant
Field Install          F05   9885        NC     NC N       N
 C06 in 3952
Plant Install          F05   9886        NC     NC N       Y
 C06 in 3952
 Silo
Field Install          F05   9887        NC     NC N       N
 C06 in 3953
Plant Install          F05   9889        NC     NC N       Y
 C06 in 3952
 for 3494
 
Router for     3952    F05   5593     1,280     NC N       N
 EKM Attach
Attach                       5594       980     NC N       N
 Additional
 CU to
 Router
 
Router for     3953    F05   5593     1,280     NC N       N
 EKM Attach
 
Router for     3494    L10   5593     1,280     NC N       N
 EKM Attach            L12
                       L14
                       L22
 
Router for     3590    C10   5593     1,280     NC N       N
 EKM Attach
Attach                       5594       980     NC N       N
 Additional
 CU to
 Router
 
Encryption     3584    L22   9900        NC     NC N       N
 Configuration         L23
                       D22
                       D23

NC = No charge
N = No
Y = Yes

*
If field installed on a purchased machine, parts removed or replaced become the property of IBM and must be returned.

 
Back topBack to top
 
Order now

To order, contact the Americas Call Centers, your local IBM representative, or your IBM Business Partner.

To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968).

 Phone:      800-IBM-CALL (426-2255)
 Fax:        800-2IBM-FAX (242-6329)
 Internet:   callserv@ca.ibm.com
 Mail:       IBM Americas Call Centers
             Dept. Teleweb Customer Support, 9th floor
             105 Moatfield Drive
             North York, Ontario
             Canada M3B 3R1
 
 Reference:  YE001

The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

Note: Shipments will begin after the planned availability date.

Trademarks

 
System Storage, iSeries, System i, SP, System p, System x, System z9, Virtualization Engine, FICON, i5/OS, System z, and developerWorks are trademarks of International Business Machines Corporation in the United States or other countries or both.
 
TotalStorage, AS/400, pSeries, RS/6000, xSeries, zSeries, Netfinity, ESCON, eServer, S/390, AIX, z/OS, Tivoli, z/VM, z/VSE, and OS/400 are registered trademarks of International Business Machines Corporation in the United States or other countries or both.
 
Intel is a registered trademark of Intel Corporation.
 
Microsoft and Windows are trademarks of Microsoft Corporation.
 
Java is a trademark of Sun Microsystems, Inc.
 
Linux is a trademark of Linus Torvalds in the United States, other countries or both.
 
Other company, product, and service names may be trademarks or service marks of others.

Back to topBack to top
 

 
Printable version Printable version