Encryption Key Manager Path Diagnostics
The EKM Path Diagnostics consists of a series of tests between a selected tape drive and the primary and secondary EKM servers. It is a good idea to test each drive that communicates with Q-EKMEKM servers.
Run this test any time you change the an EKM server settings or library encryption settings.
The diagnostics consists of the following tests:
- Ping — Verifies the Ethernet communication between the library and the EKM servers. If the partition in which the selected drive resides uses EKM server overrides, then the override IP addresses are tested (see Setup > Encryption > Partition Configuration). If the partition does not use overrides, the default system IP addresses are tested (see Setup > Encryption > System Configuration).
- Drive — Verifies the drive's path in the library (communication from library to tape drive sled and from tape drive sled to tape drive).
- Path — Verifies that EKM services are running on the EKM servers.
- Config — Verifies that the EKM servers are capable of serving encryption keys to the selected tape drive.
|
CAUTION: Performing this action takes the partition in which the selected drive resides offline.
|
- Access the EKM Path Diagnostics screen in one of two ways:
- Enter library Diagnostics (select Tools > Diagnostics) and then select Q-EKM > Q-EKM Path Diagnostics. Note that entering Diagnostics will log off all other users of the same or lower privileges and take your partitions offline. See About Library Diagnostics for more information.
- Select Setup > Encryption > System Configuration and click the link that says "Click here to run EKM Path Diagnostics."
A list of all the tape drives enabled for library-managed encryption is displayed, along with the drive status and the partition in which each drive resides.
- Select the tape drive on which you want to perform diagnostics and click Apply.
A dialog box appears telling you that the selected partition will be taken offline.
- Click OK to start the diagnostics.
The Progress Window appears. The Progress Window contains information on the action, elapsed time, and status of the requested operation.
The library performs the diagnostics and reports pass/fail results on each of the tests in the Progress Window.
- If any of the tests fail, try the following resolutions and run the test again to make sure it passes:
- Ping Test Failure — Verify that the EKM server host is running and accessible from the network the library is on.
- Drive Test Failure — Look for any tape drive RAS tickets and follow the resolution instructions in the ticket. See Viewing RAS Ticket Details or Subsystem Status for more information.
- Path Test Failure — Verify that the EKM server is actually running and that the port/SSL settings match the library configuration settings. See Configuring Encryption Key Manager Server Access or Configuring Partition Encryption for more information.
- Config Test Failure — Verify that the EKM server is set up to accept the tape drive you are testing.
- Do one of the following:
- If Completed appears in the Progress Window, the diagnostics were performed (this does not mean that the diagnostics passed, just that the diagnostics were performed). Click Close to close the Progress Window.
- If Failure appears in the Progress Window, the diagnostics were not able to be performed. Follow the instructions listed in the Progress Window to resolve any issues that occurred during the operation.
See also: