Abstract: A technique for managing encryption keys includes encrypting the contents of a piece of media with a first encryption key, encrypting the first encryption key with a second encryption key, and storing the encrypted first encryption key on or in connection with the piece of media. Encrypted data may be recovered by receiving the encrypted first encryption key from the piece of media, receiving the second encryption key (e.g., from a user to whom the key is assigned), recovering the first encryption key using the second encryption key, and decrypting the data from the piece of media using the first encryption key.

Abstract: An improved technique for managing offsite data storage avoids the need for tapes or other media arriving at an offsite storage location to be mounted. The improved technique includes generating a list of data objects stored on each piece of media of a first set of media sent from a first site to a second site. A reply list is generated, which identifies any data objects that did not arrive at the second site. The missing data objects are stored on a second set of media being prepared for shipment from the first site to the second site. The second set of media typically contains not only the missing data objects, but also additional data objects.