Oracle StorageTek T10000D User manual

Oracle StorageTek T10000D Tape Drive
FIPS 140-2 –Level 1 Validation
Non-Proprietary Security Policy
Hardware Part #: 7042136, 7314405
Firmware Version
RB411111
Security Policy Revision 0.12

© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Title: Oracle StorageTek T10000D FIPS 140-2 Security Policy
01.20.2017 Author: Acumen Security, LLC
Contributing Authors: Oracle
Oracle Corporation
World Headquarters
500 Oracle Parkway
Redwood Shores, CA 94065
U.S.A.
Worldwide Inquiries:
Phone: [phone]
Fax: [phone]
oracle.com
Copyright © 2017, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only and
the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other warranties or
conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or
fitness for a particular purpose. Oracle specifically disclaim any liability with respect to this document and no contractual obligations are formed
either directly or indirectly by this document. This document may reproduced or distributed whole and intact including this copyright notice.
Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Page 3 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Table of Contents
INTRODUCTION............................................................................................................................... 6
1.1 PURPOSE............................................................................................................................. 6
1.2 REFERENCES....................................................................................................................... 6
1.3 DOCUMENT ORGANIZATION ............................................................................................... 6
2STORAGETEK T10000D TAPE DRIVE..................................................................................... 8
2.1 MODULE OVERVIEW........................................................................................................... 8
2.1.1 ORACLE KEY MANAGER................................................................................................. 9
2.1.2 VIRTUAL OPERATOR PANEL ........................................................................................... 9
2.1.3 STORAGETEK T10000D TAPE DRIVE DEPLOYMENT ....................................................... 9
2.2 MODULE SPECIFICATION .................................................................................................. 11
2.2.1 PERMANENT ENCRYPTION APPROVED MODE ............................................................... 11
2.2.2 ENCRYPTION ENABLED APPROVED MODE.................................................................... 12
2.2.3 ENCRYPTION DISABLED APPROVED MODE................................................................... 12
2.2.4 MIXED MODE ............................................................................................................. 13
2.3 MODULE INTERFACES....................................................................................................... 13
2.3.1 FIPS 140-2 LOGICAL INTERFACE MAPPING................................................................. 14
2.3.2 STORAGETEK T10000D TAPE DRIVE VOP STATUS INFORMATION ................................ 19
2.4 ROLES AND SERVICES....................................................................................................... 20
2.4.1 CRYPTO-OFFICER ROLE.............................................................................................. 20
2.4.2 NON-APPROVED SERVICES .......................................................................................... 23
2.4.3 USER ROLE ................................................................................................................. 23
2.4.4 ADDITIONAL OPERATOR SERVICES ............................................................................... 24
2.4.5 ADDITIONAL STORAGETEK T10000D TAPE DRIVE SERVICES........................................ 25
2.5 PHYSICAL SECURITY......................................................................................................... 25
2.6 OPERATIONAL ENVIRONMENT.......................................................................................... 26
2.7 CRYPTOGRAPHIC KEY MANAGEMENT.............................................................................. 26
2.7.1 ENCRYPTION ENABLED CRYPTOGRAPHIC ALGORITHM IMPLEMENTATIONS .................... 26
2.7.2 ENCRYPTION DISABLED CRYPTOGRAPHIC ALGORITHM IMPLEMENTATIONS ................... 28
2.7.3 MIXED MODE ALGORITHM IMPLEMENTATIONS............................................................. 30
2.7.4 ENCRYPTION ENABLED CRYPTOGRAPHIC KEYS AND CRITICAL SECURITY PARAMETERS.. 33
2.7.5 ENCRYPTION DISABLED CRYPTOGRAPHIC KEYS AND CRITICAL SECURITY PARAMETERS. 36
2.7.6 MIXED MODE CRYPTOGRAPHIC KEYS AND CRITICAL SECURITY PARAMETERS ............... 38
2.8 EMI/EMC........................................................................................................................ 41
2.9 SELF-TESTS ...................................................................................................................... 41
2.9.1 INTEGRITY TESTS......................................................................................................... 41
2.9.2 POWER-ON SELF-TESTS .............................................................................................. 41
2.9.3 CONDITIONAL SELF-TESTS .......................................................................................... 42
2.9.4 CRITICAL FUNCTIONS TESTS........................................................................................ 43
2.10 MITIGATION OF OTHER ATTACKS..................................................................................... 43

Page 4 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
3SECURE OPERATION.............................................................................................................. 44
3.1 CRYPTOGRAPHIC OFFICER GUIDANCE (FIRST USE).......................................................... 44
3.1.1 INITIAL SET-UP........................................................................................................... 44
3.1.2 ENCRYPTION DISABLED APPROVED MODE SET-UP...................................................... 45
3.1.3 ENCRYPTION ENABLED APPROVED MODE SET-UP....................................................... 45
3.1.4 PERMANENT ENCRYPTION APPROVED MODE SET-UP................................................... 46
3.1.5 MIXED MODE SET-UP................................................................................................. 46
3.2 CRYPTOGRAPHIC OFFICER GUIDANCE (NORMAL OPERATION)......................................... 47
3.2.1 USING SSH (ALL MODES) ............................................................................................ 47
3.2.2 MEMORY DUMP OFFLOAD (ALL MODES)...................................................................... 47
3.2.3 SWITCHING TO ENCRYPTION DISABLED APPROVED MODE ........................................... 47
3.2.4 SWITCHING TO ENCRYPTION ENABLED APPROVED MODE ............................................ 48
3.2.5 SWITCHING TO PERMANENT ENCRYPTION APPROVED MODE ........................................ 48
3.2.6 SWITCHING TO MIXED MODE ...................................................................................... 49
3.3 ZEROIZATION.................................................................................................................... 49
4ACRONYMS............................................................................................................................. 50
List of Figures
FIGURE 1–STORAGETEK T10000D TAPE DRIVE ............................................................................ 9
FIGURE 2–STORAGETEK T10000D TAPE DRIVE DEPLOYMENT SCENARIO .................................. 10
FIGURE 3-STORAGETEK T10000D TAPE DRIVE (FRONT) ............................................................ 14
FIGURE 4-STORAGETEK T10000D TAPE DRIVE (REAR) .............................................................. 15
FIGURE 5–STORAGETEK T10000D TAPE DRIVE (BOTTOM)......................................................... 16
List of Tables
TABLE 1–SECURITY LEVEL PER FIPS 140-2 SECTION.................................................................. 11
TABLE 2–MAPPING OF FIPS 140-2 LOGICAL INTERFACES TO STORAGETEK T10000D TAPE DRIVE
PHYSICAL INTERFACES .................................................................................................................. 17
TABLE 3–CRYPTOGRAPHIC OFFICER SERVICES............................................................................ 21
TABLE 4–USER SERVICES............................................................................................................. 23
TABLE 5–ADDITIONAL OPERATOR SERVICES............................................................................... 25
TABLE 6–FIPS-APPROVED ALGORITHMS IN STORAGETEK T10000D TAPE DRIVE (PERMANENT
ENCRYPTION AND ENCRYPTION ENABLED MODES)....................................................................... 26
TABLE 7–FIPS-APPROVED ALGORITHMS IN STORAGETEK T10000D TAPE DRIVE (ENCRYPTION
DISABLED MODE).......................................................................................................................... 28
TABLE 8–MIXED MODE SECURITY FUNCTIONS............................................................................ 30
TABLE 9–LIST OF CRYPTOGRAPHIC KEYS,CRYPTOGRAPHIC KEY COMPONENTS,AND CSPS
(PERMANENT ENCRYPTION AND ENCRYPTION ENABLED MODES)................................................. 33

Page 5 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
TABLE 10 –LIST OF CRYPTOGRAPHIC KEYS,CRYPTOGRAPHIC KEY COMPONENTS,AND CSPS
(ENCRYPTION DISABLED MODE) ................................................................................................... 36
TABLE 11 –LIST OF CRYPTOGRAPHIC KEYS,CRYPTOGRAPHIC KEY COMPONENTS,AND CSPS (
MIXED MODE)............................................................................................................................... 38

Page 6 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
INTRODUCTION
1.1 Purpose
This is a non-proprietary Cryptographic Module Security Policy for the
StorageTek T10000D Tape Drive from Oracle Corporation. This Security Policy
describes how the StorageTek T10000D Tape Drive meets the security
requirements of Federal Information Processing Standards (FIPS) Publication
140-2, which details the U.S. and Canadian Government requirements for
cryptographic modules. More information about the FIPS 140-2 standard and
validation program is available on the National Institute of Standards and
Technology (NIST) and the Communications Security Establishment (CSE)
Cryptographic Module Validation Program (CMVP) website at
http://csrc.nist.gov/groups/STM/cmvp.
This document also describes how to run the module in a secure FIPS-Approved
mode of operation. This policy was prepared as part of the Level 1 FIPS 140-2
validation of the module. The StorageTek T10000D Tape Drive may also be
referred to in this document as the Encrypting Tape Drive, the ETD
1
, the crypto
module, or the module.
1.2 References
This document deals only with operations and capabilities of the module in the
technical terms of a FIPS 140-2 cryptographic module security policy. More
information is available on the module from the following sources:
The Oracle Corporation website (http://www.oracle.com) contains
information on the full line of products from Oracle.
The CMVP website (http://csrc.nist.gov/groups/STM/cmvp/documents/140-
1/140val-all.htm) contains contact information for individuals to answer
technical or sales-related questions for the module.
1.3 Document Organization
The Security Policy document is one document in a FIPS 140-2 Submission
Package. In addition to this document, the Submission Package contains:
Vendor Evidence document
1
ETD –Encrypting Tape Drive

Page 7 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Finite State Machine
Other supporting documentation as additional references
This Security Policy and the other validation submission documentation were
produced by Acumen Security under contract to Oracle. With the exception of
this Non-Proprietary Security Policy, the FIPS 140-2 Submission Package is
proprietary to Oracle and is releasable only under appropriate non-disclosure
agreements. For access to these documents, please contact Oracle.

Page 8 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
2 STORAGETEK T10000D TAPE DRIVE
2.1 Module Overview
Oracle’s StorageTek T10000D Tape Drive (Hardware Part #: 7042136/7314405;
Firmware Version: RB411111) blends the highest capacity, performance,
reliability, and data security to support demanding, 24/7 data center operations.
The T10000D delivers fast write speeds (252 MB
2
/sec
3
) to a native 8.5 TB of
magnetic tape storage; making it ideal for data center operations with growing
data volume. The T10000D provides data protection with built-in AES
4
hardware
encryption and multiple FIPS 140-2 Approved modes of operation. Customers
can be assured that their data will always be secure, in any of these FIPS 140-2
Approved modes. The T10000D encrypting tape drive (ETD) operates with data
encryption services:
permanently enabled
temporarily enabled
temporarily disabled
Each encryption mode provides FIPS 140-2 Approved security services and
functionality to ETD operators. For added flexibility, a mixed mode of operation
supporting both FIPS 140-2 Approved and non-FIPS 140-2 Approved operations
is also available. This mode of operation provides a non FIPS-140-2 Approved
method for encrypting the tape cartridge contents for customers who do not
require FIPS 140 protected content.
The StorageTek T10000D Tape Drive is featured in Figure 1 below.
2
MB –Megabytes
3
sec –Second
4
AES –Advanced Encryption Standard

Page 9 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Figure 1 –StorageTek T10000D Tape Drive
2.1.1 Oracle Key Manager
The ETD is intended to be used in conjunction with the Oracle Key Manager
(OKM), which provides centralized key management. The OKM, an external
system component, creates, stores, and manages the keys used for encryption and
decryption of data stored in the tape cartridge used by the ETD. An Oracle Key
Manager (formerly called the Key Management System or KMS) cluster consists
of two or more Key Management Appliances (KMAs), providing policy-based
Lifecycle Key Management, authentication, access control, and key provisioning
services. Connections to the ETD from the OKM are secured through the use of
TLS
5
1.0.
2.1.2 Virtual Operator Panel
The Virtual Operator Panel (VOP) is an external software application running on
a General Purpose Computer (GPC) that facilitates operator communication with
the StorageTek T10000D Tape Drive through the use of an intuitive and user-
friendly Graphical User Interface (GUI). The VOP allows an operator to
configure the drive for FIPS-Approved operation, perform operator services, and
display drive-related status information. An operator of the StorageTek T10000D
Tape Drive will use the VOP, in addition to the OKM, during the initial FIPS
configuration and any time the operator chooses to switch between modes of
operation. Connections to the ETD from the VOP are provided through the
Telnet and SSH network protocols.
2.1.3 StorageTek T10000D Tape Drive Deployment
A sample deployment scenario for the StorageTek T10000D Tape Drive with
encryption enabled is provided in Figure 2 below. The ETD is shown with a red,
dotted line surrounding it, representing its cryptographic boundary.
5
TLS –Transport Layer Security

Page 10 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Service Network Customer Network
ELOM/ILOM Network
Figure 2 –StorageTek T10000D Tape Drive Deployment Scenario

Page 11 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
2.2 Module Specification
The StorageTek T10000D Tape Drive is validated at the FIPS 140-2 section
levels shown in Table 1 for all FIPS-Approved modes of operation.
Table 1 –Security Level per FIPS 140-2 Section
Section
Section Title
Level
1
Cryptographic Module Specification
1
2
Cryptographic Module Ports and Interfaces
1
3
Roles, Services, and Authentication
1
4
Finite State Model
1
5
Physical Security
1
6
Operational Environment
N/A
7
Cryptographic Key Management
1
8
EMI/EMC6
1
9
Self-tests
1
10
Design Assurance
1
11
Mitigation of Other Attacks
N/A
The StorageTek T10000D Tape Drive is a hardware cryptographic module with a
multi-chip standalone physical embodiment as defined by FIPS 140-2. The
primary purpose of this device is to provide FIPS 140-2 Level 1 security to data
being stored on magnetic tape. The cryptographic boundary of the StorageTek
T10000D Tape Drive is defined by the tape drive’s commercial-grade, metallic
enclosure.
The module provides several FIPS-Approved modes of operation that each meet
overall Level 1 FIPS 140-2 requirements specified in Table 1 above. The module
also provides one Mixed mode of operation. Each of the Approved modes and
the Mixed mode are described in the sections below. Cryptographic security
functions and services available in each of the defined modes are specified in the
appropriate sections of this Security Policy. Additional information on each
operational mode of the module, including their invocation, is provided in Section
3 (Secure Operation).
2.2.1 Permanent Encryption Approved Mode
The Permanent Encryption Approved Mode or Permanent Encryption Mode is the
first FIPS-Approved mode of operation provided by the StorageTek T10000D
Tape Drive. This mode provides secure encryption and decryption of data stored
on magnetic tape, using the 256-bit AES cryptographic algorithm. While
6
EMI/EMC –Electromagnetic Interference / Electromagnetic Compatibility

Page 12 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
operating in the Permanent Encryption Mode, operators of the module do not
have the ability to disable encryption services. Placing the module into
Permanent Encryption Mode is non-reversible. The ETD will be able to read
from unencrypted tape cartridges while operating in this mode, but will be unable
to append to them if unencrypted data is already present.
To determine that the module is operating in the Permanent Encryption Mode, an
operator can use the VOP to view the drive settings and verify that the
“Encryption Active” and “Permanently encrypting” labels are both set to “Yes”.
In addition, the operator shall verify that the “Use OKM or DPKM
7
”label is set to
“OKM”. Instructions to place the module into the Permanent Encryption Mode
are provided in Section 3.1.4 (Permanent Encryption Approved Mode Set-Up).
2.2.2 Encryption Enabled Approved Mode
The second FIPS-Approved mode of operation is the Encryption Enabled
Approved Mode or Encryption Enabled Mode. The Encryption Enabled Mode
provides operators the ability to encrypt and decrypt data that is stored on
magnetic tape. Encryption and decryption are performed using the 256-bit AES
cryptographic algorithm. This mode operates in the same way as the Permanent
Encryption Mode, but with the ability to switch to the Permanent Encryption, the
Encryption Disabled Approved mode and the Mixed mode. The ETD will be able
to read from unencrypted tape cartridges while operating in this mode, but it will
be unable to append to them if unencrypted data is already present.
An operator of the module can determine if the module is operating in the
Encryption Enabled Mode by using the VOP to view the drive settings and verify
that the “Encryption Active” label is set to “Yes” and the “Permanently
encrypting” label is set to “No”. Finally, the operator shall confirm that the “Use
OKM or DPKM” label is set to “OKM”. Instructions to place the module into the
Encryption Enabled Mode are provided in Section 3.1.3 (Encryption Enabled
Approved Mode Set-Up).
2.2.3 Encryption Disabled Approved Mode
When operating in the Encryption Disabled Mode, only plaintext data is stored on
the magnetic tape. This plaintext data is non-security-relevant user data. While
operating in this mode, only unencrypted tape cartridges will be supported for
read and write operations. An operator will be able to switch to any of the
additional FIPS-Approved modes or the Mixed mode while operating the module
in the Encryption Disabled Mode.
7
DPKM –Data Path Key Management

Page 13 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
An operator of the module can determine if the module is operating in the
Encryption Disabled Mode by using the VOP to view the drive settings and verify
that the “Encryption Active” label is set to “No”. Finally, the operator shall
confirm that the “Use OKM or DPKM” label is set to “UNKN
8
”. Instructions to
place the module into the Encryption Disabled Mode are provided in Section 3.1.2
(Encryption Disabled Approved Mode Set-Up).
2.2.4 Mixed Mode
The StorageTek T10000D Tape Drive is capable of operating in a Mixed mode of
operation. The Mixed mode of operation is defined as a mode of operation that
allows both FIPS approved and non-approved services. Mixed mode of operation
supports the following approved services, SSH and firmware update. No other
cryptographic services are considered approved in Mixed mode.
Mixed mode of operation supports non-approved key import and export (in
plaintext). These methods of key import and export provide no cryptographic
security. Any data encrypted with this keying material is considered plaintext.
Mixed mode is entered when DPKM is enabled through the VOP. DPKM allows
an operator to use the SCSI
9
commands SPIN and SPOUT in order to import
and export keying material to and from the module in plaintext.
Keys and CSPs established in any of the other Approved modes are zeroized prior
to operating in the Mixed mode. Additionally, keys and CSPs established in
Mixed Mode are zeroized prior to operating in the any of the other Approved
modes. An operator of the module can determine if the module is operating in
the Mixed mode by using the VOP to confirm that the “Use OKM or DPKM”
label is set to “DPKM”. Instructions to place the module into the Mixed are
provided in Section 3.1.5. An operator will be able to switch to the Encryption
Disabled Mode while operating the module in the Mixed Mode.
2.3 Module Interfaces
The following is a list of the FIPS 140-2 logical interfaces supported by the
StorageTek T10000D Tape Drive:
Data Input
Data Output
8
UNKN - Unknown
9
SCSI –Small Computer System Interface

Page 14 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Control Input
Status Output
Additionally, the module supports a Power Input interface.
2.3.1 FIPS 140-2 Logical Interface Mapping
Figure 3 shows the front of the StorageTek T10000D Tape Drive. The opening
provides an entryway for an approved StorageTek T10000 T1 or T2 Tape
Cartridge. The ETD will not operate if the wrong tape cartridge is inserted. This
entryway provides the Tape Head and RFID
10
Reader/Writer as physical
interfaces to the tape cartridge. The opening at the front of the module is the only
opening in the module. It does not provide access to the interior of the module.
Figure 3 - StorageTek T10000D Tape Drive (Front)
Figure 4 shows the rear of the StorageTek T10000D Tape Drive. It provides the
following physical interfaces:
Tape Transport Interface (TTI) –RS-232
11
Serial connection
Power Supply Connector
Host Interfaces –Fibre Channel connection (Hardware version #
7042136)/iSER connection (Hardware version # 7314405)
Recessed Switch
Ethernet Port –RJ45
12
connection
10
RFID –Radio Frequency Identification
11
RS-232 –Recommended Standard 232
12
RJ45 –Registered Jack 45

Page 15 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Figure 4 - StorageTek T10000D Tape Drive (Rear)
The bottom of the StorageTek T10000D Tape Drive (Figure 5) provides one
additional physical interface; the Operator Panel Port. This port is used to provide
general module status as well as additional control input access when the drive is
rack-mounted.
*The additional port pictured is the Manufacturing Servo Interface. This interface
is not operational in any of the modes of operation; therefore, it is not listed in the
interfaces table (Table 2) below.

Page 16 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Figure 5 –StorageTek T10000D Tape Drive (Bottom)
13
Table 2 provides a mapping of all of the physical interfaces of the StorageTek
T10000D Tape Drive listed above to their respective FIPS 140-2 Logical
Interfaces. The functionality and logical interface mappings of these physical
interfaces do not change between Approved modes.
13
The security seal shown does not provide additional physical security

Page 17 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Table 2 –Mapping of FIPS 140-2 Logical Interfaces to StorageTek T10000D Tape Drive Physical Interfaces
Physical Interface
Quantity
FIPS 140-2
Logical Interfaces
Supported
Description
Tape Head
2
Data Input
Data Output
Provides the interface to the magnetic tape media, where
the user data to be encrypted is written to, and where the
data to be decrypted is read from.
Tape media resides in six possible cartridge types:
1) Standard Data
2) SPORT (reduced length) Data
3) VolSafe (write-once) Data
4) Sport VolSafe Data (reduced length, write-once)
5) Cleaning
6) Diagnostic (used by a service representative)
TTI connector (RS-
232)
1
Control Input
Data Output
Status Output
Primarily used for tape library communications.
The operator can review the status output to determine if
the module has passed or failed different self-tests. The
status output from this port consists of messages
indicating failure and success.
Recessed switch
1
Control Input
Short press: Reset the module’s IP14 address to the default
IP address (10.0.0.1)
Long press: Force ETD data dump15
Power supply connector
1
Power
100-240 VAC16 @ 50-60 Hz17
14
IP –Internet Protocol
15
All unencrypted dumps shall be deleted by the CO after their creation
16
VAC –Volts Alternating Current
17
Hz - Hertz

Page 18 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Physical Interface
Quantity
FIPS 140-2
Logical Interfaces
Supported
Description
Interface Port (Host
Interface)
2
Data Input
Data Output
Control Input
Status Output
This interface is used to transfer user data between the
ETD and the host. When the host transfers user data to
the ETD through this interface, the ETD encrypts and
writes the data to the magnetic media. When the host
receives user data from the ETD through this interface,
the ETD delivers data read from the magnetic media that
has been decrypted by the ETD.
On hardware version 7042136 the interface can be
configured to support one of two protocols:
1) Fibre Channel, in accordance with the Fibre Channel
Protocol-3 (FCP-3), SCSI Primary Commands-3, and
SCSI Stream Commands (SSC-3) specifications
2) FICON18, in accordance with the Fibre Channel
Single-Byte Command Code Sets-3 Mapping Protocol
(FC-SB-3), Revision 1.6 specification
3)
On hardware version 7314405 the interface supports
iSCSI19 Extensions for RDMA20 (iSER) version 1.0, July
2003
Ethernet Port
(RJ-45)
1
Data Input
Data Output
Control Input
Status Output
The primary uses of this interface is to:
1) Configure the ETD
2) Deliver encryption keys to the ETD
3) Obtain ETD status and diagnostic data
4) Download firmware to the ETD
5) Deliver status information to an SNMP21 server.
18
FICON –Fibre connection
19
iSCSI –Internet Small Computer System Interface
20
RDMA –Remote Direct Memory Access
21
SNMP –Simple Network Management Protocol

Page 19 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Physical Interface
Quantity
FIPS 140-2
Logical Interfaces
Supported
Description
Operator Panel Port22
1
Status Output
Control Input
The Bottom cover of the ETD has an Operator Panel
connector carrying the following signals:
A. Four signals to provide status output:
1. Power Indicator output signal
2. Activity Indicator output signal
3. Clean Indicator output signal
4. Service Indicator output signal
B. An LCD23 display output interface. The LCD is used
to display ETD status and configuration menu text.
C. Four switch signals (input):
1. IPL24 Switch
2. Unload Switch
3. Menu Switch
4. Select Switch
RFID Reader/Writer
1
Data Input
Data Output
Used to obtain information from each tape inserted into
the ETD to reduce access times and manage the lifecycle
of the cartridge. Various statistical data and information
of record locations are written to the RFID located on the
tape cartridge
2.3.2 StorageTek T10000D Tape Drive VOP Status Information
The module outputs status information via the Ethernet Port to the VOP to
provide a more detailed drive and encryption status to the operator. Drive statuses
include whether the ETD has a tape, is online, or has encountered an error.
Encryption statuses include whether the ETD has correct encryption keys and if it
is capable of performing encryption. Detailed statuses of the module are provided
in the StorageTek Virtual Operator Panel User’s Guide; freely available at:
http://docs.oracle.com.
22
Status and control information provided through Operator Panel Port is provided in Chapter 2 of the StorageTek
T10000 Tape Drive Operator’s Guide.
23
LCD –Liquid Crystal Display
24
IPL –Initial Program Load

Page 20 of 51
© Copyright 2017 Oracle Corporation
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
2.4 Roles and Services
The StorageTek T10000D Tape Drive cryptographic module provides two roles
which operators may assume:
Cryptographic Officer (CO)
User
Each role is assumed implicitly by an operator and is determined by the service
which the operator is executing. The ETD supports up to twelve concurrent
operators. Each connection to the ETD is logically separated by the module by
unique session keys.
Each role, and the services available to them in each Approved mode, is detailed
in the sections below. Please note that the keys and Critical Security Parameters
(CSPs) listed in the tables indicate the type of access required using the following
notation:
R –Read: The item is read or referenced by the service.
W –Write: The CSP is established, generated, modified, or zeroized.
X –Execute: The CSP is used within an Approved or Allowed security
function.
2.4.1 Crypto-Officer Role
The CO is in charge of the initial configuration of the StorageTek T10000D Tape
Drive which includes placing the module into one of the modes of operations. A
list of services available to the CO, and the Approved mode the service is
available in, is provided in Table 3.