HP MSL2024 Quickspecs page 5

QuickSpecs
Product Highlights
Data Encryption The HP 1/8 G2 & MSL Encryption Kit provides a library-enabled encryption solution providing data
privacy, confidentiality, and integrity of your critical business data while supporting compliance
requirements. The HP 1/8 G2 & MSL Encryption Kit is an easy and affordable library-enabled encryption
solution for small businesses.
Protect the confidentiality and integrity of your data:
The encryption kit includes two USB key server tokens, product documentation, and firmware support.
One encryption kit is needed per library or autoloader. One USB key server token is installed in the USB
port of the library to enable encryption. The token must remain in the tape library or tape autoloader
while encryption is enabled. The USB key server token generates and stores keys for the LTO-6, LTO-5
or LTO-4 Ultrium drives. The USB key server token uses a hardware random number generator, a
cryptographic module running on FIPS 140-2 Level 3 validated hardware, password authentication, and
digital envelopes for strong encryption keys and security operations. A second USB key server token is
provided in the kit to be used as a backup token which can be stored in a secure location. The keys are
transferred securely token-to-token for backup or export, with no exposure to insecure PCs, servers, or
networks. An option is also provided to save the token contents to a secure file. You may now also save
the most recently added keys on the token to a file to enable you to seed new tokens with keys from
other tokens. The encryption kit provides a self-contained solution for MSL libraries with no additional
software, PCs, or servers required or involved.
Protect IT resources and meet compliance requirements:
With the HP 1/8 G2 & MSL Encryption Kit, users can enable or disable encryption, configure and manage
the USB key server tokens, restore encrypted data, as well as a variety of other tasks. In addition, the
LTO-6, LTO-5 and LTO-4 Ultrium tape drives use the Advanced Encryption Standard (AES) with the
longest and most secure keys -- 256 bits. AES-256 encryption is implemented using the Galois Counter
Mode (GCM). This method adds Message Authentication Codes to ensure the integrity as well as privacy
of the backup data stored on tape. The HPLTO-6, LTO-5 and LTO-4 Ultrium Tape Drives are designed to
be compliant with the standard for tape media security (IEEE 1619.1).
Protect critical business data across an enterprise:
To meet requirements for larger scale encryption key managers, the MSL family of libraries also
supports KMIP 1.2 compliant key managers. With the purchase of the MSL KMIP Encryption License, the
MSL library will be able to request encryption keys from KMIP 1.2 compliant key managers, for data
encryption and key management.
For more information on servers supported, please visit:
DA - 13258 Worldwide — Version 39 — December 2, 2013
HP StoreEver MSL2024 and MSL4048 Tape Libraries
www.hp.com/go/ebs
Page 5