Re: Securing tape backup drive

[Luis Rodriguez <luis.rodriguez2@xxxxxxxxx>]

John,

At a recent IBM HA seminar we were told by a Rochester representative to: 1) 
take a good look to the TS1120 tape drives, with hardware data encryption and 
that 2) "Real soon now" there would be an OS integrated (software) solution to 
encrypt your backups, no matter which tape drive.

Regards,

Luis Rodriguez
------------------------------

message: 2
date: Mon, 19 Mar 2007 09:55:25 -0500
from: "Jones, John \(US\)" 
subject: RE: Securing tape backup drive

Yep, our 3582 has a lock.  Beyond that pretty much every equipment rack
can be configured with locking front & rear panels.  Neither the tape
library nor the rack locks are particularly robust but they will at
least slow down anyone intent on accessing the media/equipment.

BTW, IANAL but if you were using a 'modern' encryption method like
AES256 I'm pretty sure the breach notification can be avoided.  IBM is
severely behind the times on tape (and disk for that matter) encryption
support for the iSeries.