IBM Internal Label Encryption Policy for NetBackup Setup and Implementation Version 3.0

Library Managed Encryption (LME) means the policy used to determine which volumes are encrypted and which key labels will be used is determined by a policy at the library. Initially, the LME method only allowed for encryption policy to be based on volser range. This was called "Scratch Encryption Policy" (SEP). The term "Scratch" is used since the policy applied to writes from BOT which indicates a scratch volume mount. During the TS1120 encryption beta program, a customer was using NetBackup and the LME method with SEP. However, NetBackup organizes data into pools, not in volser ranges. An enhancement to LME was needed to provide an encryption policy that utilizes the NetBackup pools to determine which volumes get encrypted and which key labels to use.