8464ch06_HW Implement.fm Draft Document for Review February 7, 2020 3:15 pm GLYPH<SM590000> Defining the encryption method for the new logical library GLYPH<SM590000> Defining CAPs (Cartridge Assignment Policies) GLYPH<SM590000> Inserting TS7770T or TS7760T physical volumes into the library GLYPH<SM590000> Assigning cartridges in the TS4500/TS3500 tape library to the logical library partition GLYPH<SM590000> Relabeling physical volumes The TS7700T supports only encryption when its attached logical library is configured to  use the System-Managed encryption method. Defining CAP policies automates the assignment of physical volumes to the logical library  that are associated with the target TS7700T. This task consists on the physical insertion of cartridges to be used by the TS7700. This  process can be done by using the I/O station in the tape library, or by opening a tape  library enclosure door and directly inserting cartridges into available slots. The inventory is  needed only if the door is opened to insert cartridges. This procedure is necessary only if a cartridge was inserted, but a Cartridge Assignment  Policy (CAP) was not declared in advance. This procedure is necessary only if a mismatch exists between the internal and external  label of a physical tape cartridge. To correct such a condition, you can use the library  request command interface to submit a  LI REQ PVOL, <volser>, RELABEL, YES  request  against the affected cartridge, which marks it for relabeling the next time that it is written  from the beginning of tape. Note:  For more information about the Library Request commands and their responses,  see  IBM TS7700 Library Request Command V5.0,  WP101091. 6.1.2 Definitions for TS7700T If you use a TS7700C or TS7700D, skip this section and see 6.1.4, “TS7700 definitions” on  page 229. For more information about TS7700T procedures, see 9.5.2, “TS7700 definitions”  on page 541. The following tasks apply only to TS7700T: This cluster setting requires the address of the (IBM Security Key Lifecycle Manager  (ISKLM) server that is responsible for managing the encryption keys that are used for  data that is copied to physical volumes.  Key exchanges for tape encryption are performed by using the IPP protocol. Starting  with microcode R5.0, the TS7700T supports the use of the TLS1.2 protocol to  encapsulate IPP traffic to target ISKLM, which requires importing its corresponding  server certificate into the TS7700T. 228  IBM TS7700 Release 5.0 Guide – Data at rest encryption configuration  GLYPH<SM590000> If the TS7700T is required to perform tape encryption (only for machines that have feature  code 9900 installed), the following definitions are applicable: – Set the reclaim threshold – Set up any Inhibit Reclaim schedules, if required GLYPH<SM590000> Defining physical volume pool properties: GLYPH<SM590000> Defining VOLSER ranges for physical volumes The physical VOLSER ranges in the TS7700T should match the cartridge assignments in  the logical library of the attached TS4500/TS3500