Quantum Q-EKM Podręcznik Użytkownika Pobierz pdf (Strona 54)

Sharing Encrypted Tapes – Import/Export Operations

Special Considerations for Exchanging Files Between Linux and Windows Servers

Quantum Encryption Key Manager User’s Guide 41

Special Considerations for Exchanging Files Between

Linux and Windows Servers

When moving public certificate files and key files between Linux and

Windows servers, make sure the files are copied and transported in

binary format. Files transported in other formats, such as ASCII, will

become corrupted. (Windows defaults to an ASCII; FTP generally creates

ASCII output.) Using SFTP to copy files will ensure they are binary.

Understanding How Q-EKM Uses Aliases

Q-EKM creates “aliases” as unique ways to identify public certificates

and data encryption keys for use when sharing these items between

Q-EKM environments. There are two types of aliases referred to in the

Q-EKM scripts. Understanding what they mean may help you

understand some of the script values that are returned in various

situation.

Public Certificate Alias 6

The public certificate alias is the library serial number associated with the

Q-EKM server from which the public certificate came. (It is the same

library serial number that was entered during Q-EKM installation.) The

alias (library serial number) appears in the file name of the public

certificate file when it is exported from the Q-EKM server. For instance, in

file name QEKMIECert

A0C0115928.cer, the alias is A0C0115928.

Q-EKM needs the unique alias to associate with an imported public

certificate. Normally Q-EKM pulls the alias off of the file name without

any input from the user required. Occasionally, the owner of the file may

change the file name so that the serial number no longer appears. In this

Alias Type Alias is Composed of

Public Certificate Alias

Library serial number

Data Encryption Key Alias

Library WWN key

1 2 ... 49 50 51 52 53 54 55 56 57 58 59 ... 92 93

Brak uwag

Quantum Q-EKM Podręcznik Użytkownika Strona 54