8464ch02_Architecture.fm Draft Document for Review February 7, 2020 3:15 pm The Copy Export function enables a copy of selected logical volumes that are written to  secondary physical tape pools within the TS7700T to be removed and taken offsite for DR  purposes. The benefits of volume stacking, which places many logical volumes on a physical  volume, are retained with this function. Because the physical volumes that are being exported  are from a secondary physical pool, the primary logical volumes remain accessible to the  TS7700T. The following logical volumes are excluded from the export:  GLYPH<SM590000> Volumes that are mounted during any portion of the export process GLYPH<SM590000> Volumes that cannot create a valid primary and secondary pool copy GLYPH<SM590000> Volumes that did not complete replication into the exporting TS7700T at the start of the  export process These excluded volumes are candidates in the next copy export request. The Copy Export sets can be used to restore data at a location that has equal or newer tape  technology and equal or newer TS7700 Licensed Internal Code. An offsite reclamation process runs against copy-exported stacked volumes. This process  does not require the movement of physical cartridges. Rather, non-expired logical volumes  are written to a new secondary copy-exported stacked volume and the original copy exported  stacked volume is marked invalid. For more information, see 13.1.5, “Reclaim process for  Copy Export physical volumes” on page 745. 2.3.15 Encryption of physical tapes The importance of data protection became increasingly apparent with news reports of  security breaches, loss, and theft of personal and financial information, and with government  regulation. Encrypting the stacked cartridges minimizes the risk of unauthorized data access  without excessive security management burdens or subsystem performance issues. The encryption solution for tape virtualization consists of several components: GLYPH<SM590000> An external key manager GLYPH<SM590000> The TS1150, TS1140, TS1130, and TS1120 encryption-enabled tape drives GLYPH<SM590000> The TS7700T Encryption key manager  For physical tape, the TS7700 can use one of the following encryption key managers: GLYPH<SM590000> IBM Security Key Lifecycle Manager (formerly IBM Tivoli Key Lifecycle Manager) GLYPH<SM590000> IBM Security Key Lifecycle Manager for z/OS In this publication, we use the general term  key manager  for all EK managers.  54  IBM TS7700 Release 5.0 Guide require such low recovery times for all or a mixture of your workload or you require another  PIT copy for air gap purposes, a function called  Copy Export  is available for the TS7700T.