Using the HP StorageWorks EBS Data Encryption Solution with the NeoScale CryptoStor Tape Appliance and Symantec NetBackup
Solution overview..... 2 Components..... 2 About the CryptoStor Tape appliance.... 3 CryptoStor Tape appliance configuration.... 3 Taking advantage of ETLA with CryptoStor... 6 Creating custom maps.... 9 Test configuration.... 10 Test observations.... 11 Conclusion..... 12 For more information.... 12

Solution overview

Protection of data, in the form of backups, has been a part of corporate strategy for years. However, the sensitive nature of corporate data has forced companies to go to greater lengths to protect their data more stringently. Backing up data to tape and storing the data offsite is not sufficient. If the tape were to fall into the wrong hands, a company could be liable if sensitive information was leaked. As a result, encryption of data has come to the forefront as a necessary component of data protection. However, simply incorporating data encryption doesn't solve the problem. In fact, it can cause other headaches, especially when the procedure greatly increases backup windows. The best solution is one in which companies can encrypt the necessary data while inserting the process seamlessly into their current data protection scheme, without adding extra overhead. The HP StorageWorks Enterprise Backup Solution (EBS) Data Encryption Solution with NeoScale CryptoStor provides that ability with an easy-to-install, easy-to-manage appliance that encrypts the data as it is written to tape. The appliance can be inserted into an EBS data protection environment with minimal configuration required, and the backup application functions without even knowing that the data is being encrypted during backup and decrypted upon restore. All of this is done without impacting data transfer rates, so there is no effect on current backup windows. All encryption key management is safely maintained via the CryptoStor device, and allows for redundancy as well as disaster recovery. When combined with an HP Enterprise Backup Solution environment running Symantec NetBackup and including HP tape libraries featuring the Enterprise Tape Library Architecture, customers can take advantage of a well-tested, proven encryption solution to more fully protect their data.

Components

The HP EBS Data Encryption Solution was tested with the following components: HP ProLiant server running Windows 2003 HP PA-RISC server running HP-UX 11.11 with NetBackup-required patches HP StorageWorks EML E-series tape library with LTO-3 tape drives HP StorageWorks Command View for Tape Libraries Software (Command View TL) for EML administration EBS-supported SAN infrastructure (B-series 2GB switch fabric, supported HBAs) Symantec NetBackup Enterprise Server 5.1 with Maintenance Pack 2 NeoScale CryptoStor Tape 700-series encryption devices (System version: fc-2.1.0-Build 12) HP StorageWorks EVA5000 and EVA8000 storage arrays (for backup data) HP StorageWorks Secure Manager Tape Library Software advanced feature option (recommended) For this solution, Windows and HP-UX are the supported operating systems. The key to successfully integrating the CryptoStor device into an EBS data protection environment is the use of the Enterprise Tape Library Architecture (ETLA) features that allow selective LUN presentation via the Command View TL administration interface. Using the Secure Manager feature within Command View TL, individual tape drives within a library can be presented to different backup servers on the SAN, or whole sections of the library can be partitioned, with each partition presented separately. This allows for integration of an encryption solution to certain servers, while preserving non-encrypted backup activity in those instances when encryption is unnecessary. This provides flexibility, as well as the ability to integrate additional encryption as needed, over time. For more information on the EBS components and their features, visit the HP EBS website at http://www.hp.com/go/ebs.

About the CryptoStor Tape appliance
The NeoScale CryptoStor Tape 700-series appliance compresses, encrypts, and digitally signs data as it is transferred to tape media or virtual tape, without disrupting backup processes. The appliance actually presents the library robot and tape device LUNs to any hosts that would use the library on the SAN, residing between the hosts and the library. The encryption is secured by a key management strategy that allows options for maintaining the encryption keys used to protect the data. Two types of encryption algorithm strategies are recommended: AES256the 256-bit Advanced Encryption Standard algorithm (the strongest available and the one recommended for use with this solution) AES128the 128-bit AES version
NOTE: 3DES is an option, but it is not supported with this solution.
Keys can either be static (one key is used for all tapes) or dynamic (a new key is generated for each tape), and they can be stored in a catalog on the appliance or can be written to each tape in encrypted form. No keys are transmitted outside the appliance without being encrypted themselves using the system key; therefore, the CryptoStor clustering function can transmit key information between the appliances, and the keys can move to tape fully protected. The system key itself can be protected and backed up in several ways: 1) written to a smart card that comes with the appliance, 2) saved within the appliance itself, or 3) saved to a PC as an encrypted file. This provides the ability to rebuild an appliance and be able to access previously written data. As previously mentioned, a clustered scenario is available for redundancy of the key management and the encryption rules, or, in lieu of clustering, NeoScale provides a software tool that can decrypt data restored from tape while a replacement is readied. For more information on the appliance and its functionality, refer to the CryptoStor Tape documentation found at http://www.neoscale.com.
CryptoStor Tape appliance configuration
The CryptoStor Tape appliances were configured in a clustered format, which provides redundancy and consistency in terms of encryption rules. The clustering function automatically shares tape keys and policy data to minimize operational impact to restores, especially when it is geographically separated from the backup site, and to ensure the integrity of data encryption/decryption in the event of appliance failure. If an appliance is unavailable for any reason, a replacement can be quickly authenticated and synchronized as it is added to the existing cluster. In the interim, data paths to tape can be reconfigured through remaining cluster members.

NOTE: The clustering capability is not meant to be used as a tape path failover or multi-path-to-tape with this solution. EBS does not support multiple paths to tape devices in its solution configurations.
CryptoStor is configured using a browser interface, as shown in Figure 1.

Figure 1:

Figure 1 shows the System Summary page, which provides the basic information about the appliance. The Show Targets button at the bottom of this page allows the user to see a list of the devices currently available to the appliancethis is useful when troubleshooting device discovery issues.
Under the Storage section is the CryptoStor Rules tab, as shown in Figure 2.

Figure 2:

The Rules tab is where the encryption rules are created. The Statistics button can be used to monitor data throughput statistics, such as read/write speed, compression ratio, and total bytes written to tape or restored from tape. This is also useful to verify that backup jobs are indeed passing through the CryptoStor Tape appliance and the data is being protected. To create an encryption rule, click the New button. Figure 3 shows the screen for creating or modifying an encryption rule. From here, the authorized user can enable or disable the rule, designate a particular host (via FC address or World Wide Name) to which this rule will apply, designate a particular destination tape list, and define the actions to be enforced on the data. A CryptoStor user account's ability to perform such tasks is dependent upon its allocated permissions, and different user accounts can be created for different levels of access. For more information, refer to the CryptoStor Tape Administration Guide.

Figure 3:

A feature of the CryptoStor Tape interface of particular interest to Symantec NetBackup users is the Backup Policies tab. From here, the user can link the tapes assigned to a specific backup policy in NetBackup with an encryption rule. This can be used rather than creating a manual destination tape list.
Taking advantage of ETLA with CryptoStor
The capabilities provided by the HP StorageWorks Extended Tape Library Architecture (ETLA) via the Command View TL interface are a key feature of this solution with the CryptoStor appliance. The following is an example of how an HP StorageWorks library can have some of its drives segmented for use only through the CryptoStor, while the rest can be reserved for normal data protection use. In this scenario, the HP StorageWorks Secure Manager Tape Library Software advanced feature option is required in order to present drives individually. This configuration requires that the robot and two LTO3 drives be presented to each backup server. The library contains 4 drives: two are LTO2 and two are LTO3. First, partitions must be created within Command View TL to separate the LTO2 and LTO3 drives. To do this:

1. From the CV-TL browser interface, select the library to be managed and click the Configuration
2. Select the Partitioning item in the tree view to access the Partitioning screen. 3. Select Actions > Add Partition. Two partitions are created: one for the LTO2 drives (named LTO2)
and one for the LTO3 drives (named LTO3). The mailslots are assigned to the LTO3 partition, and each partition receives a section of library tape slots.

Figure 4:

The SAN fabric zoning necessary to present the library devices to hosts and the CryptoStor should now be created. This solution is only supported in a SAN fabric that employs zoning. A separate zone should be created for each CryptoStor tape port, including the tape port World Wide Name (WWN) and the WWNs for the appropriate interface controller ports. In this configuration, each of the LTO3 drives is to be presented out its own interface controller port. Therefore, the first tape port zone will have the WWN of the first CryptoStor tape port and the first interface controller port, while the second tape port zone will have the WWN of the second tape port and second interface controller port. In addition, zones should be created for the backup hosts that include the WWNs for the host HBAs and the appropriate CryptoStor host ports, as well as the interface controller port on the library through which the robot will be presented. In this case, two 2GB HBAs will be used per server, with each HBA having its own zone with its own CryptoStor host port. This is necessary to preserve maximum available bandwidth in order to take advantage of the LTO3 streaming capabilities. One of the two host zones for each backup host will have the WWN of the interface controller port for the robot. After the zones are established, an HBA rescan should be done on the hosts, and the CryptoStor appliance should be rebooted so that Command View TL will recognize all the appropriate WWNs.
With the two partitions now established, use the Host Access (Secure Manager) section of Command View TL to present the library devices to the SAN as follows:
1. Select the LTO3 partition on the Configuration tab under the Host Access (Secure Manager)
section. The Host/HBA Access screen is displayed for that partition. 2. Select Actions > Edit Host/HBA Access to open the Edit Host/HBA Access window. 3. In the Edit Host/HBA Access window, select Actions > Add Known Host/HBA. The host HBAs and the CryptoStor tape ports should all have WWNs represented in this list. 4. Assign the robot to each host WWN by clicking the Robotics box for each. 5. Assign the first LTO3 drive to the first CryptoStor WWN and the second drive to the second CryptoStor WWN by clicking the appropriate drive box for each.

Figure 5:

At this point, it is necessary to verify that the drives are being presented through separate interface controller ports. To do this:
1. Right-click each of the CryptoStor tape port listings in the Host Access (Secure Manager) window
and choose Edit Custom Device Map. In this scenario, the first drive is being presented out port 1 on the first interface controller in the library and the second drive is presented out port 0 on the second interface controller. Therefore, in this instance, no custom mapping is necessary. 2. Click Cancel at the bottom of the Edit Custom Device Map window to exit without changes. 3. Reboot the CryptoStor appliance and log in to the browser interface. 4. Click Show Targets at the bottom of the window to view how the library devices are recognized. If the drives are not presented sequentially, that is, if the drive sequence is interrupted by, for example, a LUN for the interface controller, a custom map or maps must be created in Command View TL to rectify this. See Creating custom maps for more information. 5. Rescan the backup host HBAs to discover the newly available targets.

Figure 6:

NOTE: When configuring an HP StorageWorks tape library using the Command View TL interface, it may be necessary to create a custom device map to present the tape drives to the CryptoStor appliance. Library devices must be presented sequentially to CryptoStor for the backup configuration to function properly. With the default map, the appliance may recognize library interface controllers as LUNs between drive LUNs, which can cause inconsistent backup behavior.

Creating custom maps

As noted earlier, library devices presented to the CryptoStor appliance must be in order and uninterrupted by other LUNs. If, for example, an interface controller LUN is presented in the middle of the drive LUNs, then a custom map must be created to remove the controller LUN from the listing. Make a note of the LUN for the interface controller for use when the custom map is created. The ability to create a custom map and present it to a specific HBA is a feature of the Advanced Secure Manager and requires additional licensing. The Basic Secure Manager allows a custom map, but it must be presented to all HBAs that access the tape library.

To create a custom map:

1. In the Command View TL browser interface on the Configuration tab, open the Host Access

(Secure Manager) window. Name.
2. Select Actions > Edit Host/HBA Access and enable access to the CryptoStor World Wide Port 3. Right-click the newly-created CryptoStor listing and select Edit Custom Device Map. 4. Alter the LUN listings as necessary to ensure that the interface controller LUN no longer appears 5. Reboot the CryptoStor appliance.
between drive LUNs on the CryptoStor interface.

Test configuration

Figure 7:
For test purposes, two NeoScale CryptoStor Tape appliances were usedone for each of the two tape devices in the EML library. The appliances were configured in a clustered format using the CryptoStor clustering function. Each appliance had two Fibre Channel ports: one to be zoned to the backup hosts, and the other to be zoned to the library. The CryptoStor devices reside between the
library and the hosts in the SAN, and actually present LUNs to the hosts that represent the robot and drives. With the EML library, Command View TL was used to provide library access to the appliances. The Secure Manager feature of Command View TL was used to present the library robot and one LTO3 drive to one appliance; the other LTO3 drive was presented to the other appliance. In turn, the appliances presented robot and drive LUNs to the NetBackup servers in the backup host fabric zone. Figure 8 shows the zoning configuration used.

Figure 8:

A single encryption rule was created for use by both servers. The rule designated AES256 as the encryption algorithm, and had both compression and HMAC enabled. When HMAC (HashMAC), is enabled, a hash signature is applied to the data stored on tape. This provides an authenticated data integrity check, to ensure that the data written to tape has not been altered. Symantec NetBackup 5.1 with Maintenance Pack 2 was installed on both servers, with the Windows server functioning as the Media Manager. The HP-UX server shared the library using the Shared Storage Option available with NetBackup. Each server had data stored on a volume mounted from an HP StorageWorks EVA storage arrayeither an EVA3000 or an EVA5000. All backup jobs were done using data on these EVA volumes.

Test observations

During testing, this solution was found to be very easy to use. After the fabric zoning of all the components was complete and the library was presented to the appliances via Command View TL, a simple restart of the appliances was necessary to present the library LUNs to the hosts. After the operating systems were able to create devices for the LUNs, the NetBackup Device Configuration Wizard had no problems defining the library and drives for use. At no time were any special
accommodations necessary within NetBackup to make use of the library via the CryptoStor Tape appliance.
NOTE: It is necessary to note that the CryptoStor appliances do not handle dynamic LUN reassignments in the event of a change in device presentation on the SAN. If, for some reason, an event occurs which would alter the presentation order to the OS, a restart of the appliance is required to newly present the changed LUNs. Subsequently, a rescan of the available SCSI devices (using Device Manager in Windows or the ioscan command in HP-UX), plus a re-run of the NetBackup Device Configuration Wizard, should also be performed.
Multiple tests were performed to measure the difference in streaming performance between encrypted and non-encrypted data transfer jobs. In each instance, with both backups and restores, there were no significant differences in transfer rates. In addition, with the encryption process taking place outside the backup server, the processing capability of the server is unaffected. The compression ability of the appliance was also measured against the compression ability of the tape device. In each test instance, identical 2:1 compressible data compressed equally when done by either the appliance or a tape device outside the encryption configuration. The CryptoStor appliance has the option to enable or disable compression before encryption. Use the browser interface to set this option. When enabled, the appliance analyzes the incoming data and determines whether or not to compress it before encrypting it. Although HP LTO tape drives are able to detect incoming compressed data and automatically disable compression, the CryptoStor appliance is in front of the drives and automatically disables compression on all drives. This prevents dual compression, which frequently results in data sizes that are larger than the original data. This solution can be easily inserted into an already existing backup configuration, as the CryptoStor appliance allows for the passing of non-encrypted data. Tapes that have been used previously for non-encrypted backup jobs can be restored through the appliance by checking the Allow passage of unregulated traffic option on the CryptoStor Rules tab.

Conclusion

The HP StorageWorks EBS Data Encryption Solution provides customers with the ability to implement an encryption policy in a Symantec NetBackup environment quickly and easily. The NeoScale CryptoStor appliance, in a supported HP EBS data protection configuration, allows implementation without needing to maintain separate equipment for restore of legacy data. The solution does not impact performance in any way: backup windows and tape usage are not affected by adding this solution. Furthermore, the investment that customers have already made in library management with Command View TL remains fully available. In fact, the ETLA Secure Manager feature of Command View TL is critical for its ability to separate encrypted and non-encrypted backup environments. Finally, because no alterations or additional administration are required within NetBackup to function with the CryptoStor appliance, customers can enjoy the added security of data encryption without adding to the time and effort necessary to administer their current configurations.

For more information

http://www.hp.com/go/ebs
2006 Hewlett-Packard Development Company, L.P. NeoScale, the NeoScale logo, CryptoStor, CryptoTape, SecureStor, and Stateful Storage Processing, are trademarks of Neoscale. NetBackup is a trademark of Symantec Corporation. All other names and/or trademarks herein are the property of their respective owners. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. 416423-002, February 2006

QuickSpecs

Overview
HP StorageWorks EML E-Series Tape Libraries
The HP StorageWorks Enterprise Modular Library (EML) E-Series Tape Libraries provide robust data protection and investment protection in heterogeneous Storage Area Networks (SAN) environments. The EML delivers superior data availability with protection against SAN event disruptions using the built in HP Extended Tape Library Extended Architecture (ETLA). ETLA intercepts rogue I/O requests from applications or new servers and prevent those requests from interrupting backup or recovery processes. Flexibly scale to 202TB native capacity or 4.6TB/hr performance from rack-ready or factory racked configurations. Easily manage the EML remotely while simplifying complex environments with logical library partitioning. The EML is ideally suited as a companion for the HP StorageWorks Enterprise Virtual Array (EVA) family. The EML Tape Libraries are fully integrated into the HP StorageWorks portfolio through interoperability and compatible capacity points. The EML tape library is extensively tested in the Enterprise Backup Solution (EBS) to ensure that it works in the most rigorous environment. Documentation is provided to enable you to configure, design and implement the best data protection solution for your environment. Entry configurations start at 71-slots. Maximize capacity with 505-slots or maximize performance with 16- drives. The EML delivers value through high reliability data protection, agility through modular scalability and simplicity through ease of management. HP StorageWorks EML E-Series Tape Libraries
103e Configuration or rack-ready EML71e

245e Configuration

505e Configuration
DA - 12238 Worldwide QuickSpecs Version 11 10-6-2006

Page 1

What's New
New EML E-Series Enhancements: EML tape libraries now supports an entry capacity rack-ready SKU (rack-mount at customer site) The EML71e configuration (AH062A) is bundled with 2 Ultrium 960 LTO3 drives, a 4Gb interface controller and special edition Command View Library Software The EML71e can be electronically upgraded to an EML103e with HP EML 71e Licensed Capacity Upgrade (AH063A). The EML71e configuration is an ideal data protection companion for the HP StorageWorks EVA4000 SAN Starter Kit AH052 NOTE: The EML71e AH062a and EML 71e Licensed Capacity Upgrade AH063a are NOT orderable in EMEA.

Standard Features

Scalable capacity from 71 slots to over 500 slots Scalable performance up to 16 Ultrium tape drives with 442 slots Interface controllers protect tape drives from SAN events Remote Management via Command View for tape libraries software or the command line interface Easy-to-use Touch-screen Graphical User Interface User configurable load ports with removable magazines Certified under the HP StorageWorks Enterprise Backup Solution (EBS) HP Ultrium 460-FC or Ultrium 960-FC Tape drives Factory rack and rack-ready configurations 2,000,000 Mean Swaps Between failure

Customer Benefits

Investment Protection: The EML tape library expands in capacity and performance as customer needs change. Through the addition of expansion modules, the EML library scales within the library footprint to 16 drives and 442 slots for maximum performance or 8 drives and 505 slots for maximum capacity. Improves reliability of backup and recovery processes: Utilizing interface controllers, part of the Extended Tape Library Architecture, the EML tape library minimizes the effect of rogue programs on backup and recovery processes. Manageable: The EML library has been designed to ease the management burdens of data protection in your SAN. Utilizing HP StorageWorks Command View for Tape Libraries Software, management, diagnostic, and configuration features can be accessed from anywhere. Additionally, Command View EVA and Command View for Tape Libraries Software may co-exist on the same general purpose server. Compatible: Certified through the HP StorageWorks Enterprise Backup Solution, the EML tape library is compatible with leading backup software packages, operating systems, servers, and disk arrays. Performance: Performance to meet critical backup windows is achieved through use of state-of-the-art HP Ultrium tape drives. Compact: Using a standard rack footprint, the EML library integrates easily into the rack-grid of your data center. Resiliency and Reliability: Highly reliable robotics and tape drives coupled with optional redundant power supplies and redundant cooling provide resiliency should a component fail. The EML tape libraries can be factory integrated for rapid deployment or mounted at the customer site with rack-ready configurations

Page 2

Configuration EML 71e Rackready Configuration 2-5 in configurable load port 12U 28.4 TB (LTO3) 1.1 TB/hr (LTO3
Family Configuration Comparisons (Examples)
EML 103e Base Configuration EML 442e EML 505e Maximum Maximum Performance Capacity Configuration Configuration 1-8 1-16 1-15 in configurable 35 in configurable 35 in configurable load port load port load port 24U 40U 40U 98.0 TB (LTO3) 49.0 TB (LTO2) 2.3 TB/hr (LTO3) 0.9 TB/hr (LTO2) 176.8 TB (LTO3) 88.4 TB (LTO2) 4.6 TB/hr (LTO3) 1.7 TB/hr (LTO2) 202 TB (LTO3) 101 TB (LTO2) 2.3 TB/hr (LTO3) 0.9 TB/hr (LTO2) EML 245e
# of drives possible # of slots
Product height within rack Maximum Capacity (native) Maximum throughput (native)
1-5 in configurable load port 12U 41.2 TB (LTO3) 20.6 TB (LTO2) 1.1 TB/hr (LTO3) 0.4 TB/hr (LTO2)
Configuration/slots 103e/103 245e/245 348e/348 375e/375 442e/442 469e/469 505e/505
Tape Drives 1-4 1-8 1-12 1-8 1-16 1-12 1-8
I/F Controller Cards 1 1-2 1-3 1-2 1-4 1-3 1-2
Redundant Power Supply 0-1 0-2 0-3 0-2 0-4 0-3 0-2
NOTE: To order an EML library factory integrated (CTO) library, begin by selecting the EML 103e Base Library sku (AG104B). Next add the following #0D1 options for integration into the EML 103e Base Library. Select the number of required slots, the number of tape drives, I/F controller cards (1 for every four tape drives) and the number of redundant power supplies. NOTE: The EML71e Configuration is not CTO. It is a rack-ready, field rack-mount configuration that can be upgraded to any EML configuration.
Rack-ready Configuration (EML 71e)
Logic Options 71 Slots AH062A Bundle includes drives, interface controller and basic management software Component Quantity HP StorageWorks EML 1 71e Library Comments Required; Bundles two HP EML Ultrium 960 FC Drives, HP EML e2400-FC 4Gb Controller and full functionality special edition HP Command View Tape Library Software for EML71e only. Permanent license included with capacity upgrade Optional Field installed
Additional Options Choose incremental drives

AD568B

HP EML Ultrium 960 FC Drive

Page 3

EML Secure Manager T3664A

Licensed Capacity Upgrade

AH063A

Secure Manager Tape Library Software for EML HP EML 71e Licensed Capacity Upgrade

Optional

Optional upgrade of EML 71e to EML103e capacity and configuration; includes permanent license for HP Command View Tape Library Software
CTO Configurations (EML 103e, 245e, 348e, 375e, 442e, 469e and 505e)
Logic 103 Slots Options AG104B 252663-B24 #0D1 T3663A Library Configure Choose drives Component Quantity HP StorageWorks 1 EML 103e Base Library PDU, 16A High Voltage 1 Modular -WW EML Command View 1 License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller HP EML Redundant Power Supply Secure Manager Tape Library Software for EML HP StorageWorks EML 103e Base Library HP EML 245e Expansion Module PDU, 16A High Voltage Modular -WW EML Command View License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller 1-4 Comments Required Required Required
AD562B #0D1 or AD568B #0D1
Must be same drive type throughout for CTO
Choose Controller Card Quantity
AD567B #0D1 or AD569B #0D1
1 card for every 4 drives - must be same card type throughout Optional
Choose Redundant Power Supply Additional Options EML Secure Manager 245 Slots

AD563B #0D1

0 or 1

T3664A

AG104B AG112B #0D1
Required Required, contains qty 1 AD565B and qty 1 AD566B Required Required
252663-B24 #0D1 T3663A Library Configure Choose drives
1 card for every 4 drives - must be same card type throughout

Page 4

Choose Redundant Power Supply Additional Options EML Secure Manager AD563B #0D1
HP EML Redundant Power Supply Secure Manager Tape Library Software for EML HP StorageWorks EML 103e Base Library HP EML 245e Expansion Module HP EML 4-Drive Expansion Module PDU, 16A High Voltage Modular -WW EML Command View License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller HP EML Redundant Power Supply Secure Manager Tape Library Software for EML HP StorageWorks EML 103e Base Library HP EML 245e Expansion Module HP EML Capacity Expansion Module PDU, 16A High Voltage Modular -WW EML Command View License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller

0 or 2

348 Slots
Required Required, contains qty 1 AD565B and qty 1 AD566B Required Required Required
AD565B #0D1 252663-B24 #0D1 T3663A Library Configure Choose drives AD562B #0D1 or AD568B #0D1
Choose Redundant Power Supply Additional Options EML Secure Manager 375 Slots

AD563A #0D1

0 or 3
AD564B #0D1 252663-B24 #0D1 T3663A Library Configure Choose drives

Page 5

Choose Redundant Power Supply Additional Options EML Secure Manager 442 Slots AD563B #0D1
HP EML Redundant Power Supply Secure Manager Tape Library Software for EML HP StorageWorks EML 103e Base Library HP EML 245e Expansion Module HP EML 4-Drive Expansion Module PDU, 16A High Voltage Modular -WW EML Command View License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller
Choose Redundant Power Supply Additional Options EML Secure Manager

0 or 4

469 Slots
Secure Manager Tape Library Software for EML HP StorageWorks EML 103e Base Library HP EML 245e Expansion Module HP EML 4-Drive Expansion Module HP EML Capacity Expansion Module PDU, 16A High Voltage Modular -WW EML Command View License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive
Required Required, contains qty 1 AD565B and qty 1 AD566B Required Required Required Required
AD565B #0D1 AD564B #0D1 252663-B24 #0D1 T3663A Library Configure Choose drives

Page 6

Choose Controller Card Quantity AD567B #0D1 or AD569B #0D1
HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller HP EML Redundant Power Supply Secure Manager Tape Library Software for EML HP StorageWorks EML 103e Base Library HP EML 245e Expansion Module HP EML Capacity Expansion Module PDU, 16A High Voltage Modular -WW EML Command View License HP EML Ultrium 460 FC Drive or HP EML Ultrium 960 FC Drive HP EML e2400-FC 2Gb Controller or HP EML e2400-FC 4Gb Controller HP EML Redundant Power Supply Secure Manager Tape Library Software for EML

505 Slots

Page 7

Product Highlights

Investment Protection The HP StorageWorks Enterprise Modular Library provides investment protection as your environment grows and changes. With superb scalability, the EML can achieve over 200 TB of capacity today. In the future, the next generation of HP Ultrium drives will enable vastly increased capacities and throughput. Additionally, certification under the Enterprise Backup Solution is a continuing process. As servers and HBAs continue to change, backup software packages evolve and improve, the EML E-Series tape library will expand its compatibility.

Manageability

HP StorageWorks Extended Tape Library Architecture will save library and SAN administrators time and money by simplifying library setup, configuration, and troubleshooting, increasing reliability and robustness of libraries in the SAN, integrating with leading enterprise management applications, and offering advanced features -- such as Access Control (Secure Manager EML) -that further increases backup performance and reliability. HP offers a balanced solution - neither piece-meal nor monolithic - that includes a generous initial feature set and allows users to buy only the advanced options they need.

Interface Controllers

As a key component of the Extended Tape Library Architecture, the Interface Controllers are integrated into the entire tape library solution. Similar to disk array controllers, the Interface Controllers provide the highest level of security, reliability, and broad interoperability for tape drives being connected into a storage area network. The EML tape libraries utilize the e2400-FC 2G and e2400-FC 4G Interface Controllers with Ultrium fibre channel tape drives. Each controller manages up to four tape drives and provides 2Gbit and 4Gbit FC connections to the SAN. (In effect, two drives per switch port)
HP StorageWorks The EML Tape Library configurations are supported on HP's industry-leading diagnostic tool - HP Library and Tape Tools StorageWorks Library and Tape Tools (L&TT). L&TT is a single, convenient program that's a snap (L&TT) to install and simple to operate. L&TT's intuitive user interface eliminates the need for training and deploys in less than five minutes. This robust diagnostic tool is designed for both the experienced professional and the untrained administrator. It ensures product integrity through self-diagnostics and fast resolution to device concerns. Additional information on L&TT plus download information can be found at: http://www.hp.com/support/tapetools.

Page 9

Software Components
Extended Tape Library The HP StorageWorks Extended Tape Library Architecture (ETLA) will save library and SAN Architecture (ETLA) administrators time and money by simplifying library setup, configuration, and troubleshooting. HP's controller-based architecture increases reliability and robustness of libraries in the SAN, and integrates with leading enterprise management applications. Advanced features such as Access Control (HP StorageWorks Secure Manager) further increase backup performance and reliability. HP offers a balanced solution - neither piece-meal nor monolithic - that includes a generous initial feature set and allows users to buy only the advanced options they need. The HP StorageWorks Interface Manager and Command View for Tape Libraries software are the next step in HP's Extended Tape Library Architecture, itself a key component of the HP Adaptive Infrastructure strategy. This architecture delivers tape libraries that are self-aware - self-managed, automatically maintained, continuously available - and network-aware - resilient, secure, and adaptable. HP's high-end tape libraries provide the reliability, interoperability, and advanced functionality required for your enterprise SAN environment. NOTE: For more information please visit: http://www.hp.com/go/ETLA

Intelligent SAN-Aware Functionality
Caching and intelligent network behavior to control SAN traffic Robust and automated configuration and verification of Interface Controller settings SAN-aware event tracking and detection of conflicts Persistent history and intelligent analysis of events and logs Persistent drive numbering and mapping across component swaps and reboot
Command View TL Web Interface Features
Select from a list of multiple supported libraries to manage View asset information for the library system View health summaries for all components of the library system: drives, robotics, Interface Controllers, and Interface Manager View library inventory: slots, media, and drives Search for media by barcode label View details on drives, robotics, Interface Controllers, and Interface Manager, including WWNs, speeds, and connection types Configure hosts/HBA-to-drive mapping and masking settings with Secure Manager EML Automatically discover hosts and HBAs on the SAN or add your own for access control and security purposes Upgrade firmware on the Interface Controllers and Interface Manager cards Configure IP network parameters for the management station and Interface Manager cards in each library Configure SNMP trap/event destinations to receive alerts asynchronously View persistent event logs for the library system

Secure Manager EML

Easily configure device-level security settings Allow only authorized servers to access tape drives and critical data Manage access control from a single pane of glass, through the library itself Library partitioning - Up to six "virtual" partitions available Paths to robotics can be separated between multiple independent SANs for isolation purposes

Page 10

Compatibility
HP's Enterprise Backup Solutions (EBS) assures that your HP StorageWorks Enterprise Modular Library (EML) E-Series works with leading servers, operating systems, and backup applications - and not just those sold by HP. Based on a foundation of extensive interoperability testing, EBS 1-2-3 provides a step-by-step methodology for designing, configuring, and implementing your SAN ensuring HP EML tape libraries work seamlessly in many environments. HP EML libraries are especially suitable if you have a mixed system environment. For the latest list of servers, workstations, operating systems, and backup software that support HP EML, check the tape backup compatibility pages on our web site at: http://www.hp.com/go/ebs. HP Server Compatibility The HP StorageWorks EML Tape Libraries are supported on the following classes of HP systems: HP ProLiant servers HP-UX Servers HP AlphaServers NOTE: For details of which models work with which systems, including third-party systems, visit http://www.hp.com/go/ebs for the latest hardware compatibility information.

OS Support

The HP StorageWorks EML E-Series Tape Libraries are supported on many popular operating systems. For the most up-to-date information, please visit the Enterprise Backup solution (EBS) compatibility matrix at http://www.hp.com/go/ebs.

Software Support

The HP StorageWorks EML E-Series Tape Libraries are supported on leading backup applications. For the most up-to-date information, please visit the Enterprise Backup Solution (EBS) compatibility matrix at http://www.hp.com/go/ebs.

Page 11

Warranty
Service and Support, HP Care Pack, and Warranty Information
HP Care Pack Services offer upgraded service levels to extend and expand your standard product warranty with easy to buy, easy to use support packages that help you make the most of your hardware and software investments. They let you choose the support levels that meet your business requirements, from basic to mission-critical. They help you contain total cost of ownership. HP Care Pack warranty extensions can be purchased along with HP products to cost-effectively upgrade or extend your warranty. For many products, post-warranty HP Care Pack Services are available when your original warranty has expired. Why purchase an HP Care Pack service? Your standard warranty protects against product defects. HP Care Pack Services help you guard against unplanned downtime, which can reduce your productivity and profitability. These convenient service packages: Protect your investment in HP products Provide consistent, predictable levels of support across your entire department or business Ease budget planning with fixed-cost support that includes parts and labor Give you direct access to proven technical and problem-solving expertise Offer a choice of response-time and repair-time commitments Deliver prompt, measurable results Are available whenever and wherever you do business HP Care Pack availability may vary by country and product. Supporting your Adaptive Enterprise journey HP Services helps you make the Adaptive Enterprise real for your organization. The breadth, depth, and quality of HP hardware and software support services can help you improve the performance of your IT support processes and resolve the complex software and hardware problems that tax user productivity. HP Care Pack services help you increase IT environment stability, efficiency, and agility from the desktop to the data center, and improve the productivity of your employees.
Warranty and Services Hewlett-Packard provides a 1-year, next-day, on-site, limited warranty for the EML enterprise tape Included with the library, Hardware, plus 9x5 phone support for the duration of the warranty. All drive modules and Product interface controllers have a 1-year, parts exchange, limited warranty, with next business day response, plus 9x5 phone support for the duration of the warranty. Library Upgrades (AD564B, AD565B, AD566B, AD563B, AD579A, and AG112B) have a 1-year, parts exchange, limited warranty, with next business day response, plus 9x5 phone support for the duration of the warranty. The EML 4-drive expansion module (AD565B) and card cage module (AD566B) include HP installation. HP warrants only that the Software media will be free of physical defect for a period of ninety (90) days from delivery For more information about HP's Global Limited Warranty and Technical Support, visit: http://h18006.www1.hp.com/products/storageworks/warranty.html

Available HP Care Pack Services
Extend your product warranty with a wide choice of cost-saving support packages. HP Care Pack Services are sold by HP and HP authorized enterprise and commercial resellers. Services for customers purchasing via direct and enterprise resellers are quoted using HP order configuration tools. Additional information about HP Care Pack Service features and benefits is available at http://www.hp.com/hps/carepack/services/. Key for HP Care Pack Service availability in the table below: E = Service available for customers purchasing direct and via enterprise resellers C = Service available for customers purchasing via commercial resellers N/A = Service not applicable HP Care Pack Services Deployment and Per Event Services HP Installation HP Installation & Startup HP Implementation Service Available E/C E/C N/A

Page 13

*NOTE: Installation & Startup is required for the EML 71e HP Care Pack Services Availability Services 1 yr 3 yr 4 yr 5 yr HP Next Day Hardware Support E/C E/C E/C E/C HP 4 Hr, 9x5 HW Support N/A N/A N/A N/A HP 4 Hr, 13x5 Hardware Support E/C E/C E/C E/C HP 4 Hr, 24x7 Hardware Support E/C E/C E/C E/C HP 6 HR Call-to-Repair HW Support E/C E/C E/C E/C HP Software Support E/C E/C E/C E/C HP Software Support 24x7 E/C E/C E/C E/C HP Support Plus E/C E/C E/C E/C HP Support Plus 24 E/C E/C E/C E/C HP Proactive Essentials 9x5, 10 SW N/A N/A N/A N/A Incidents HP Proactive Essentials 9x5, 25 SW N/A N/A N/A N/A Incidents HP Proactive Essentials 9x5 N/A N/A N/A N/A Unlimited HP Proactive Essentials 24x7, 25 SW N/A N/A N/A N/A Incidents HP Proactive Essentials 24x7, 50 SW N/A N/A N/A N/A Incidents HP Proactive Essentials 24x7 N/A N/A N/A N/A Unlimited HP Proactive 24 Service* E/C E/C E/C E/C HP Critical Service* E/C E/C E/C E/C *NOTE: Both Proactive 24 & Critical Service only relate to 'reactive elements', work is ongoing to offer the 'proactive elements' in the near future (SW is supported separately per package).

Installation Services

Care Pack Description For the EML 71e configuration HA114A1* Tape Library Installation And Start Up HA113A1 Tape Installation HW Installation Only For the EML 103e and 245e configurations HA114A1* Tape Library Installation And Start Up HA113A1 Tape Installation HW Installation Only Additional EML 103e and 245e configurations** HA124A1 Each additional library on the same site For add-on Tape Drive Installation HA113A1 Subsequent Add-on Tape Drive Installation For add-on Interface Controller Installation HA113A1 Subsequent Interface Controller Installation For Command View for Tape Library and Secure Manager Installation HA113A1 Command View or Secure Manager Installation Into SAN

band 5KJ 5KJ 5KF 5KF 5B1 5DU 5DP 5J5

Page 14

*NOTE: Installation and Start up (HA114A1) includes the installation of all subcomponents. i.e. If HA114A1 is ordered for the library no HA113A1 are needed for any component purchased at the same time as the library. The Installation and Start Up Service are Required for the EML 71e. **NOTE: If the additional library is to be configured at a different site the customer must purchase an additional HA1114A1.

Support Services

Libraries EML 103e EML 245e EML 71e Configuration Configuration Configuration band band band 8XE 8XF 80P 8XE 8XE 8XE 8XL 8XL 8XE 8XE 8XE 8XE 8XF 8XF 8XF 8XL 8XL 8XF 8XF 8XF 8XF 80P 80P 80P 80P 80P 80P 80P 80P 80P
Care Pack HA101A3 HA103A3 HA104A3 HA105A3 HA106A3 HA107A3 HA109A3 HA110A3 HA111A3 HA112A3
Description HW, "3-year", "next-day", "13x5", "on-site" HW, "3-year", "4-hour", "13x5", "onsite" HW, "3-year", "4-hour", "24x7", "onsite" HW, "3-year", "6hr CTR", "24x7", "on-site"* SW, "3-year", "Phone-in", "9x5"** SW, "3-year", "Phone-in", "24x7"** HW Only, Support Plus, "3-year", "13x5"*** HW Only Support Plus 24, "3-year", "24x7"*** HW Only, Proactive 24, "3-year", "24x7"**** HW Only, Critical Service, "3-year", "24x7"****
Accessories and Components Capacity Interface Or Drive Drive Controller Expansion 245e band band (AD564B Card Expansion (AD562B (AD567B) or Cage module or or AD565B) band band AD568B) (AD569B) band (AD566B) (AG112B) 8G5 8SV 8XH 8SU 80G 8G5 8G5 8G5 NA 8SV 8SV 8SV NA 8XH 8XH 8XH NA 8SU 8SU 8SU NA 80G 80G 80G NA
Care Pack Description HA101A3 HW, "3-year", "next-day", "13x5", "on-site" HA103A3 HW, "3-year", "4-hour", "13x5", "on-site" HA104A3 HW, "3-year", "4-hour", "24x7", "on-site" HA105A3 HW, "3-year", "6hr CTR", "24x7", "on-site"* HA106A3 SW, "3-year", "Phone-in", "9x5"** SW, "3-year", "Phone-in", HA107A3 "24x7"** HA109A3 HW Only, Support Plus, "3year", "13x5"***

NA 8G5

NA 8SV

NA 8XH

NA 8SU

NA 80G

Page 15

HA110A3 HA111A3 HA112A3

HW Only Support Plus 24, "3-year", "24x7"*** HW Only, Proactive 24, "3year", "24x7"**** HW Only, Critical Service, "3year", "24x7"**** 8G5 8G5 8G5 8SV 8SV 8SV 8XH 8XH 8XH 8SU 8SU 8SU 80G 80G 80G

NOTES: * 6hr CTR 'standalone' service is not offered in Latin or North America. ** Software supported under this service is Command View for Tape Libraries Software or Secure Manager EML (SW support for each package purchased separately). *** Support Plus covers 4hr H/W response (SW is supported separately per package). **** Both Proactive 24 & Critical Service only relate to 'reactive elements', work is ongoing to offer the 'proactive elements' in the near future (SW is supported separately per package). NOTE: HP Care Pack information quoted above relates to 3 year offerings only, 1yr, 4yr and 5yr packs are available for each offering (replace A3 with A1, A4, A5 respectively). Due to the scalability of the product, Service offerings match that of the purchase motion. I.e. support for the robotics, drives, interface controllers, drive expansions, card cage and software is purchased separately. To find HP Care Pack Services available via HP authorized commercial resellers, visit http://h30125.www3.hp.com/csn/salesmktg/elfpack/elf_nonlkup_ctrylang.asp?code=ELNL

Services Example

Hardware/Software purchased: EML 245e configuration, 8 drives, 2 Interface Controller, Command View for tape libraries software License and Secure Manager TL License Desire HP installation and Start Up and 3yr 24x7 uplift Services needed CTO Library: HA114A1 5KF (Installation and Startup for Tape Library and all subcomponents) HA104A3 8XE (EML 103e Base Library AG104B uplift) HA104A3 80G (245e Expansion Module AG112B uplift) 8 x HA104A3 8G5 (Drive uplifts) 2 x HA104A3 8SV (Interface Controller uplifts) 2 x HA107A3 8XL (Command View TL & Secure Manager uplifts)

Page 16

eSupport
HP eSupport is a portfolio of technology-based services that assist you with managing your business environment - from the desktop to the data center. Support Portal The HP support portal provides one-stop access to the information, tools and services you need to manage the daily operations of your IT environment. Features include: Access to self-solve tools (including search technical knowledge base) Efficient logging and tracking of support cases Collaboration with other business and IT professionals Download of patches and drivers Access to diagnostic tools Proactive notification of relevant information Access to certain features of the support portal requires an HP service agreement. To access the support portal, visit http://www.hp.com/support

Power Distribution Unit

1-2 per library

252663-B24

EML E-Series Ultrium 460-FC Drive Upgrade Kit

1 to 16 drives

AD562B
EML E-Series Ultrium 960-FC Drive Upgrade

Page 19

HP Ultrium960 (LTO3) Fibre Channel tape drive integrated in EML canister 2M Fibre Channel Cable Installation poster NOTE: #0D1 will appear after this part number on your sales order when factory integration is indicated. Contents: E2400FC 2G interface controller Installation poster NOTE: #0D1 will appear after this part number on your sales order when factory integration is indicated. Contents: E2400FC 4G interface controller Installation poster NOTE: #0D1 will appear after this part number on your sales order when factory integration is indicated.

E2400FC 2G for EML

1 for every 4 drives

AD567B

E2400FC 4G for EML

AD569B

NOTE: When connecting e2400-FC 4G interface controllers to the SAN disable auto speed negotiation of the fibre channel switch ports connected to the controller. The switch ports should be fixed at 1Gb/s, 2Gb/s or 4Gb/s as described in the switch documentation Command View for Tape Contents: Libraries Software License to use Command View for EML

1 per library

T3663A
Step 3 - Additional Options
Select each option with quantities specified. Model Name Model Description with Parts Shipped: HP EML 4-Drive Expansion Adds 4 drive bays. See capacity matrix below for capacity Module in various configurations HP installation included via MCC Code NOTE: #0D1 will appear after this part number on your sales order when factory integration is indicated. HP EML Capacity See capacity matrix below for capacity in various Expansion Module configurations HP installation included via MCC Code NOTE: #0D1 will appear after this part number on your sales order when factory integration is indicated. EML Card Cage Module NOTE: only use the card cage module when expanding to more than 4 drives. NOTE: card cage module includes redundant power supply capability HP installation included via MCC Code NOTE: EML Card Cage module includes redundant power supplies - no additional power supply is required for that module. NOTE: #0D1 will appear after this part number on your sales order when factory integration is indicated. Quantity Up to 3 Part Number AD565B

C7973A C7973W C7973WL

C7973AL

C7973AN

C7972A C7972AL

C7972AN

C8014A

C7978A

Q2007A

Q2008A

Q2002A
HP StorageWorks Command View for Tape Libraries Software
Permanent License (per library) for Command View EML NOTE: Please reference the Extended Tape Library Architecture QuickSpecs for more information at http://www.hp.com/go/etla NOTE: Only the EML71e is bundled with full use special edition HP Command View Tape Library Software. A permanent license is granted upon capacity upgrade purchase.
HP StorageWorks Permanent (per library) License for Secure Manager EML Secure Manager Tape NOTE: Please reference the Secure Manager ESL QuickSpecs for more Library Software for information at http://www.hp.com/go/etla EML

Page 22

Host Bus Adapters and Controllers for ProLiant Servers
NOTE: For a complete list of supported HBA's, please visit: http://www.hp.com/go/ebs.
Host Bus Adapters and Controllers for Alpha Servers
Fibre Channel Cables NOTE: Additional Fibre Channel Cables are required. Order one cable per Interface Controller, selecting cable length and converter type to match the appropriate environment. 2m SW LC/SC FC Cable Kit 221691-B21 5m SW LC/SC FC Cable Kit 221691-B22 15m SW LC/SC FC Cable Kit 221691-B23 2m SW LC/LC FC Cable Kit 221692-B21 5m SW LC/LC FC Cable Kit 221692-B22 15m SW LC/LC FC Cable Kit 221692-B23

Power Cord

NOTE: THIS PRODUCT CAN ONLY BE USED WITH AN HP APPROVED POWER CORD FOR THE CUSTOMER'S SPECIFIC GEOGRAPHIC REGION. WARNING: Use of a non-HP approved power cord may result in (1) use of a power cord that does not meet individual country specific safety requirements; (2) a power cord with insufficient conductor ampacity that could result in overheating with potential personal injury and/or property damage; and/or (3) an unapproved power cord could fracture resulting in the internal contacts being exposed which potentially could subject the user to a shock hazard. Use ONLY an HP approved power cord for your particular country. HP disclaims all liability in the event a non-HP approved power cord is used. HP Power Cord, North America and Japan, NEMA L6-20P Plug E7803A HP Power Cord, Universal PDU, C20 Plug E7804A HP Power Cord, Custom Applications, No Plug E7806A NOTE: This power cord should only be installed by a qualified electrician HP Power Cord, Europe, IEC309 Plug E7808A HP Power Cord, Europe, CEE 7/7 Plug E7809A HP Power Cord, China, GB16C Plug E7810A HP Power Cord, Israel, C-19 straight 2.5 meter length Plug E7811A HP Power Cord, Brazil, AR20S Plug E7812A