Abstract: Example implementations may relate to a host and a storage system that communicate by a block storage protocol. For example, the host may embed host credentials in a data packet of the block storage protocol, and the data packet of host credentials may be cryptographically signed by a certificate authority trusted by a user of the host to generate a signed credential packet. The signed credential packet may be transmitted in a data path between the host and the storage system. The storage system may validate the signed credential packet using enrollment credentials and a certificate authority certificate and may authenticate the host to a logical unit.

Abstract: Example implementations may relate to a host and a storage system that communicate by a block storage protocol. For example, the host may embed host credentials in a data packet of the block storage protocol, and the data packet of host credentials may be cryptographically signed by a certificate authority trusted by a user of the host to generate a signed credential packet. The signed credential packet may be transmitted in a data path between the host and the storage system. The storage system may validate the signed credential packet using enrollment credentials and a certificate authority certificate and may authenticate the host to a logical unit.

Abstract: In one embodiment, a method of diagnosing an error in a cartridge drive, comprises detecting an occurrence of a defined event in a cartridge drive, in response to the defined event, initiating an analysis routine of at least one event log from the cartridge drive, and invoking an intervention routine when the analysis indicates that the defined event represents a failure threat.

Abstract: In one embodiment, a cartridge library comprises a library controller comprising a first processor module and a memory medium communicatively connected to the processor module, and a cartridge drive controller comprising a second processor module and a memory medium communicatively connected to the processor module. The cartridge drive controller comprises logic instructions stored on a computer readable medium which, when executed, cause the first processor module to receive, from a management component coupled to the cartridge library, at least one access control parameter, wherein the access control parameter identifies at least one of a user, a server, a command, or a time, record, in a memory medium coupled to the cartridge library, the at least one access control parameter; receive a request for at least one resource of the cartridge library; and use the access control parameter in determining whether to grant access to the at least one resource of the cartridge library.

Abstract: Embodiments include methods, apparatus, and systems for managing encryption keys in a storage library. One method includes receiving a request to read or write data to a tape drive; initiating, by the tape drive, a request for an encryption key to encrypt or decrypt the data; and transmitting the encryption to key to the tape drive through an out-of-band path.

Abstract: Embodiments include methods, apparatus, and systems for managing encryption keys in a storage library. One method includes using a tape library to determine which key manager is selected for data encryption operations to a tape drive when multiple different key managers exist in a storage system.

Abstract: A method includes receiving a first command for accessing a tape storage system, the first command containing an indicator that the first command was issued as a result of a failover from a first path to the storage system to a second path to the tape storage system. The method further includes determining whether the first command is a repeat of a second command already received by the tape storage system. The first command is processed based on determining whether the first command is a repeat of the second command.

Abstract: In one embodiment, a cartridge library comprises a library controller comprising a first processor module and a memory medium communicatively connected to the processor module, and a cartridge drive controller comprising a second processor module and a memory medium communicatively connected to the processor module. The cartridge drive controller comprises logic instructions stored on a computer readable medium which, when executed, cause the first processor module to receive, from a management component coupled to the cartridge library, at least one access control parameter, wherein the access control parameter identifies at least one of a user, a server, a command, or a time, record, in a memory medium coupled to the cartridge library, the at least one access control parameter; receive a request for at least one resource of the cartridge library; and use the access control parameter in determining whether to grant access to the at least one resource of the cartridge library.

Abstract: In one embodiment, a method of diagnosing an error in a cartridge drive, comprises detecting an occurrence of a defined event in a cartridge drive, in response to the defined event, initiating an analysis routine of at least one event log from the cartridge drive, and invoking an intervention routine when the analysis indicates that the defined event represents a failure threat.

Abstract: Embodiments include methods, apparatus, and systems for managing a storage library with removable media. One method includes providing to an administrative console identification of host computers attempting to access a tape drive in a tape library; determining, from input at the administrative console, access rights for each of the host computers attempting to access the tape drive; and transmitting the access rights to the tape drive in order to configure the tape drive to determine which of the host computers are authorized to access the tape drive.

Abstract: Storage apparatus and methods that allow direct ordering of storage supplies from a vendor. Exemplary storage apparatus comprises a housing, and a controller contained within the housing that is configured to robotically manage removable media. A communications module is coupled to the controller for communicating with the vendor. An operator control panel is attached to the housing, is coupled to the controller, and is configurable to allow a user to order storage supplies from the vendor via the communications module. As a result, the storage supplies are ordered directly from the storage apparatus.