Optional data encryption by partition for a partitionable data storage library

A tape library method comprising:

• receiving a first data package from a client using a user interface linked with a controller;
• receiving a second data package from said client using the user interface linked with the controller;
• generating a first key and a first moniker associated with the first key, a second key and a second moniker associated with the second key;
• encrypting the first data package by the controller, in accordance with the first key;
• encrypting the second data package by the controller, in accordance with the second key;
• directing the encrypted first data package to one of a plurality of tape drives comprised by the library comprised by the library;
• directing the encrypted second data package to one of the plurality of tape drives;
• storing the encrypted first data package, a first message authentication code that is generated from the first data package, and a first moniker on a first tape cartridge when cooperating with the one of a plurality of tape drives;
• storing the encrypted second data package, a second message authentication code that is generated from the second data package, and a second moniker on either the first tape cartridge or a second tape cartridge when cooperating with the one of a plurality of tape drives;
• receiving a request form a client to access one or more of the data packages;
• decrypting the first encrypted data package with the first key that is associated with the first moniker;
• authenticating that the first message authentication code matches a newly generated message authentication code to determine that the decryption of the first data package is successful;
• transmitting the decrypted first data package to the requested client after the successful decryption of the first data package;
• decrypting the second encrypted data package when used in combination with the second key that is associated with the second moniker;
• authenticating that the second message authentication code matches a newly generated message authentication code to determine that the decryption of the second data package is successful;
• and
• transmitting the decrypted second data package to the requested client after the successful decryption of the second data package.

A tape library method comprising:

• directing communication traffic between a client and the plurality of tape drives;
• generating a first key and a first moniker associated with the first key, a second key and a second moniker associated with the second key;
• encrypting, by a controller, a first data package received from the client in accordance with the first key;
• transmitting the encrypted first data package, the first moniker associated with the first key and a first message authentication code associated with the first data package to one of the plurality of tape drives for storage to a first tape cartridge;
• encrypting, by the controller, a second data package received from the client in accordance with the second key;
• transmitting the encrypted second data package, the second moniker and a second message authentication code to the one of the plurality of tape drives for storage to a second tape cartridge;
• receiving a request form a client to access one or more of the data packages;
• decrypting, by the controller, the first data package with the first key associated with the first moniker;
• authenticating that the first message authentication code matches the message authentication code received in the request to determine that the decryption of the first data package is successful;
• transmitting the decrypted first data package to the requested client after the successful decryption of the first data package;
• decrypting, by the controller, the second data package with a second key associated with the second moniker;
• authenticating that the second message authentication code matches the message authentication code received in the request to determine that the decryption of the second data package is successful;
• and
• transmitting the decrypted second data package to the requested client after the successful decryption of the second data package.