Abstract: According to one embodiment, a computer-implemented method includes receiving an object to be stored within a storage library, computing a hash value, utilizing the object, determining a storage location within the storage library to store the hash value, and sending the hash value to the storage location and neighbor locations of the storage location within the storage library.

Abstract: According to one embodiment, a computer-implemented method includes receiving an object to be stored within a storage library, computing a hash value, utilizing the object, determining a storage location within the storage library to store the hash value, and sending the hash value to the storage location and neighbor locations of the storage location within the storage library.

Abstract: A computer-implemented method, according to one embodiment, includes: maintaining a reference count and an access count for each of a plurality of objects stored in an optical media storage system, using the reference count and access count to create a popularity metric for each of the plurality of objects, for each medium having one or more of the plurality of objects, creating a medium popularity metric based on the popularity metrics of the one or more objects on the respective medium, and using the medium popularity metric of each respective optical medium to arrange the optical media in the optical media storage system. Other systems, methods, and computer program products are described in additional embodiments.

Abstract: A computer-implemented method, according to one embodiment, includes: maintaining a reference count and an access count for each of a plurality of objects stored in an optical media storage system, using the reference count and access count to create a popularity metric for each of the plurality of objects, for each medium having one or more of the plurality of objects, creating a medium popularity metric based on the popularity metrics of the one or more objects on the respective medium, and using the medium popularity metric of each respective optical medium to arrange the optical media in the optical media storage system. Other systems, methods, and computer program products are described in additional embodiments.

Abstract: A system may include a key management server configured to store encryption keys. The system may also include a storage device that includes a processor, a memory coupled to the processor, and an optical medium coupled to the processor. The processor may be configured to encrypt and write data to the optical medium based upon the encryption keys, the data having metadata associated therewith, store the metadata in the memory, and read selected encrypted data from the optical medium. The processor may also be configured to retrieve the metadata associated with the selected encrypted data, retrieve a respective encryption key based upon the retrieved metadata, and decrypt the selected encrypted data based upon the respective encryption key. The processor may further be configured to delete selected metadata from the memory in response to a delete instruction so that the respective data is unreadable.

Abstract: A system and method for re-keying ciphertext on a storage system is resident on a host/client communicating with a storage system. The generation of encryption keys and tracking which storage system blocks are encrypted with what keys remain with the security appliance or storage system, but the policy governing re-keying and initiating actions in accordance with that policy reside with the client/host.

Abstract: A system and method for pre-generating encryption keys for re-keying stored ciphertext. The encryption keys are illustratively distributed to LKMs and therefrom to the security appliances communicating with each other. A minimum number of un-used pre-generated encryption keys is established wherein when that number is reached more pre-generated encryption keys are created and distributed.

Abstract: The invention operates in connection with a secure storage compartment feature of a storage security appliance to allow users to see the encryption and permission relationships between hosts and storage in one view. The invention also provides a user tool that enables users to manage secure storage compartments (encryption/key relationship) easily and access permissions between them. The invention also provides a user tool that helps users find missing relationships/permissions easily when troubleshooting a host's missing storage after a storage security appliance is installed. The invention further provides a user tool that overlays cross mapping/relationship information on top of a topology view, thereby making it easy for a user to see missing or extraneous relationships between hosts and storage.