Encryption Key Manager Path Diagnostics
The EKM Path Diagnostics consists of a series of short tests to validate whether the key servers are running, connected, and able to serve keys as required.
Run the diagnostics any time you change the Q-EKM or QKM server settings or library encryption settings. For Q-EKM, it is a good idea to test each drive that communicates with key manager servers.
The diagnostics consists of the following tests:
- Ping — Verifies the Ethernet communication between the library and the Q-EKM/QKM servers.
- Drive (Q-EKM only) — Verifies the drive's path in the library (communication from library to tape drive sled and from tape drive sled to tape drive).
- Path — Verifies that Q-EKM/QKM services are running on the Q-EKM/QKM servers.
- Config — Verifies that the Q-EKM/QKM servers are capable of serving encryption keys.
 |
CAUTION: For Q-EKM: Performing this action takes the partition in which the selected drive resides offline.
|
- Access the EKM Path Diagnostics screen in one of two ways:
- Enter library Diagnostics (select Tools > Diagnostics) and then select EKM > EKM Path Diagnostics. Note that entering Diagnostics will log off all other users of the same or lower privileges and take your partitions offline. See About Library Diagnostics for more information.
- Select Setup > Encryption > System Configuration or Setup > Encryption > Partition Configuration and click the link that says "Click here to run EKM Path Diagnostics."
- To run QKM Path Diagnostics, select QKM Path Diagnostics and click Apply.
- To run Q-EKM Path Diagnostics, select Q-EKM Path Diagnostics and click Apply.
A list of all the tape drives enabled for library-managed encryption is displayed, along with the drive status and the partition in which each drive resides.
- Q-EKM Only: Select the tape drive on which you want to perform diagnostics and click Apply.
A dialog box appears telling you that the selected partition will be taken offline.
- Click Apply to start the QKM diagnistocs, or clickOK to start the Q-EKM diagnostics.
The Progress Window appears. The Progress Window contains information on the action, elapsed time, and status of the requested operation.
The library performs the diagnostics and reports pass/fail results on each of the tests in the Progress Window.
- If any of the tests fail, try the following resolutions and run the diagnostics again to make sure all tests pass:
- Ping Test Failure — Verify that the Q-EKM or QKM server host is running and accessible from the network the library is on.
- Drive Test Failure — Look for any tape drive RAS tickets and follow the resolution instructions in the ticket. See Viewing RAS Ticket Details or Subsystem Status for more information.
- Path Test Failure — Verify that the Q-EKM or QKM server is actually running and that the port/SSL settings match the library configuration settings. See Configuring Encryption Key Server Access for more information.
- Config Test Failure — Verify that the Q-EKM or QKM server is set up to accept the tape drive you are testing.
- Do one of the following:
- If Completed appears in the Progress Window, the diagnostics were performed (this does not mean that the diagnostics passed, just that the diagnostics were performed). Click Close to close the Progress Window.
- If Failure appears in the Progress Window, the diagnostics were not able to be performed. Follow the instructions listed in the Progress Window to resolve any issues that occurred during the operation.
See also: