Hewlett-packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Hewlett-packard Company

Curtis C Ballard

Kelly John Reasoner

Stephen Gold

Peter Thomas Camble

Mike P Fleischmann

William Wesley Torrey

Steven Maddocks

Rupin Tashi Mohan

Krishna Babu Puttagunta

Ian Peter Crighton

Stanley Smith Feather, Jr

Christopher Anthony Grant Hillier

Colette Toone Howe

Stan S Feather

Gregg S Schmidtke

Robert Wesley Luffel

David Paul Jones

Carl R Hoerger

Vivek Agarwal

Michael J Chaloner

Shiraz Billimoria

Nicholas D Thayer

Jeffrey Dicorpo

Thomas David Benson

Chuck Roman

Mark A Smith

Robert C Elliott

Leslie G Christie, Jr

Luis E Luciani, Jr

Kevin Jones

Richard Alan Irwin

Thomas W Holmquist

Richard Arthur Bickers

Christopher Martin

Ronald K Arp

John G McCarthy

Christopher Hillier

Rick A Kato

Timothy J Moore

James McCarthy

Myron Eugen Yoknis

Bill Torrey

Joe A Eccher

Ian Crighton

Charles A Roman

Mark Ayars Smith

In some examples, a storage system includes a controller to receive a request for a data encryption key from the host system, in response to the request, retrieve, from a key manager system, the data encryption key for the host system, and encrypt the data encryption key retrieved from the key manager system using a first key, to produce an encrypted data encryption key. The controller sends the encrypted data encryption key to the host system, and receives, from the host system, encrypted data encrypted using the data encryption key.

Encryption keys from storage systems

Examples described herein relate to configuring access to management interface of a storage system. Examples may obtain network adapter information of the host devices coupled to the storage system using credentials of a management controller of the host devices. Examples may create an allow-list or deny-list containing the network adapter information of the host devices. Examples may allow or deny connections to the management interface from the host devices based on the allow-list or deny-list. Examples may allow dynamic updating of the allow-list and deny-list based on a change in a network adapter of the host device.

Management interface access in storage systems

In some examples, a computer receives a command to transport a storage cartridge in a storage system from a physical storage slot to a storage drive, and determines whether the storage cartridge is associated with a restricted transport indication set by a configuration operation in the storage system. In response to determining that the storage cartridge is associated with the restricted transport indication, the computer checks for an indication of receipt of an access secret information, and denies processing of the command to transport the storage cartridge if the indication of receipt of the access secret information is not present.

Restricted transport storage cartridges

In some examples, a management system receives, from a first storage system, first port information of ports in the first storage system, and receives, from a second storage system, second port information of ports in a second storage system. The management system merges the first port information from the first storage system and the second port information from the second storage system into merged port information. The management system receives, from the first storage system, a request for port information of ports in the second storage system, and sends, to the first storage system, the second port information for use in path selection from hosts to the first and second storage systems.

Storage system port information management

In some examples, a controller for a storage system separate from a host system checks whether a storage cartridge in a storage system is associated with an indication set, in an electronic memory, during a configuration operation in the storage system to indicate write protection is enabled for the storage cartridge. In response to determining that the storage cartridge is associated with the indication, the controller triggers the write protection for the storage cartridge to prevent writing of data to the storage cartridge if the storage cartridge already contains previously written data.

Write protection for storage cartridges

In one implementation, a non-transitory machine-readable storage medium may store instructions that upon execution cause a processor to: determine, by a network device, path information for a plurality of paths in a computing fabric, the path information identifying alternative paths to access namespaces; determine, by the network device, a first portion of the path information that is associated with a first host; and provide, by the network device the first portion of the path information to the first host.

Determining path information in a computing network

In some examples, an adapter device includes a bridge to determine that a storage device includes a plurality of bus controllers, where the plurality of bus controllers are communicatively coupled to respective adapter devices. The bridge determines a quantity of supported connections over the network to the storage device, and in response to determining that the storage device comprises the plurality of bus controllers, the bridge computes an identifier based on the quantity of supported connections and to which respective bus controller of the plurality of bus controllers the adapter device is connected, and assigns the identifier to a connection from the host to the storage device.

Identifiers for connections between hosts and storage devices

A method comprising: determining, by a tape library, respective tape densities supported by each of a plurality of tape drives and respective tape densities indicated for each of a plurality of tape cartridges; receiving, by the tape library, a command to load a given one of the tape cartridges into a given one of the tape drives; determining, by the tape library, that the indicated tape density for the given tape cartridge matches a tape density supported by the given tape drive; and in response to the determination that the tape densities match, configuring, by the tape library, the given tape drive to initialize the given tape cartridge to the tape density indicated for the given tape cartridge.

Tape drive configuration

Examples described herein include a tape drive with a drive memory, an opening, and a key engine. The drive memory is to store a shared secret. The opening is to receive a tape cartridge that stores a protected dataset and an authorization code. The key engine is to generate a decryption key for the protected dataset based on the authorization code and the shared secret.

Protected datasets on tape cartridges

Storage management is performed by detecting installation of at least one new physical tape drive in a storage system. The storage system may include a plurality of tape drives. The plurality of tape drives include physical tape drives and virtual tape drives. Based on the detection, a unique name of at least one virtual tape drive is transferred to the at least one new physical tape drive.

Transfer of a unique name to a tape drive

Examples include replication based on a differential multiple write command. Examples include receipt, via a storage protocol path, of a differential multiple write command that specifies to store provided data to a first address range at the first storage array and to a different second address range of a second storage array, generation of storage-processed data representing the provided data in a different form than the provided data, and replication, via a replication path, the storage-processed data from the first storage array to the second storage array.

Replication based on a differential multiple write command

Techniques to send and receive access commands are provided. The access commands may include an expected media position. The expected media position may be compared to an actual media position.

Access commands including expected media positions

A described read request may be received. An object and a descriptor may be returned in response to the described read request. The object may be retrieved from a volume. The object may be analyzed to generate the descriptor, which may indicate whether the object is a tape mark or a data record.

Described object and descriptor

Techniques for associating a session key with a communication path are provided. A host may provide a session key to a library controller over a first communications path. The library controller may associate the communications path with the session key. In one aspect, commands received over the first communications path are associated with the session key. In another aspect, the session key may be associated with a second communications path when the communications path is to be changed.

Session key associated with communication path

Growing community of inventors

Eaton, CO, United States of America

Curtis C Ballard