ANSI INCITS 516-2013 Information Technology C SCSI Stream Commands - 4 (SSC-4).pdf

1、American National StandardDeveloped byfor Information Technology SCSI Stream Commands - 4(SSC-4)INCITS 516-2013INCITS 516-2013INCITS 516-2013American National Standardfor Information Technology SCSI Stream Commands - 4(SSC-4)SecretariatInformation Technology Industry CouncilApproved December 30, 201

2、3American National Standards Institute, Inc.AbstractThis standard specifies the device model and functional requirements for the SCSI sequential-accessdevice type. This standards permits the SCSI sequential-access device type to attach to computers andprovides the definitions for their use.This stan

3、dard does not contain material related to any service delivery subsystem that is used totransport the commands, command parameter logical block, command response logical block, andstatus specified in this standard.Approval of an American National Standard requires review by ANSI that therequirements

4、 for due process, consensus, and other criteria for approval havebeen met by the standards developer.Consensus is established when, in the judgement of the ANSI Board ofStandards Review, substantial agreement has been reached by directly andmaterially affected interests. Substantial agreement means

5、much more thana simple majority, but not necessarily unanimity. Consensus requires that allviews and objections be considered, and that a concerted effort be madetowards their resolution.The use of American National Standards is completely voluntary; theirexistence does not in any respect preclude a

6、nyone, whether he has approvedthe standards or not, from manufacturing, marketing, purchasing, or usingproducts, processes, or procedures not conforming to the standards.The American National Standards Institute does not develop standards andwill in no circumstances give an interpretation of any Ame

7、rican NationalStandard. Moreover, no person shall have the right or authority to issue aninterpretation of an American National Standard in the name of the AmericanNational Standards Institute. Requests for interpretations should beaddressed to the secretariat or sponsor whose name appears on the ti

8、tlepage of this standard.CAUTION NOTICE: This American National Standard may be revised orwithdrawn at any time. The procedures of the American National StandardsInstitute require that action be taken periodically to reaffirm, revise, orwithdraw this standard. Purchasers of American National Standar

9、ds mayreceive current information on all standards by calling or writing the AmericanNational Standards Institute.American National StandardPublished byAmerican National Standards Institute, Inc.25 West 43rd Street, New York, NY 10036Copyright 2014 by Information Technology Industry Council (ITI)All

10、 rights reserved.No part of this publication may be reproduced in anyform, in an electronic retrieval system or otherwise,without prior written permission of ITI, 1101 K Street NW, Suite 610, Washington, DC 20005. Printed in the United States of AmericaCAUTION: The developers of this standard have r

11、equested that holders of patents that may be re-quired for the implementation of the standard disclose such patents to the publisher. However, nei-ther the developers nor the publisher have undertaken a patent search in order to identify which, ifany, patents may apply to this standard. As of the da

12、te of publication of this standard, followingcalls for the identification of patents that may be required for the implementation of the standard,notice of one or more such claims has been received. By publication of this standard, no positionis taken with respect to the validity of this claim or of

13、any rights in connection therewith. The knownpatent holder(s) has (have), however, filed a statement of willingness to grant a license underthese rights on reasonable and nondiscriminatory terms and conditions to applicants desiring to ob-tain such a license. Details may be obtained from the publish

14、er. No further patent search is con-ducted by the developer or publisher in respect to any standard it processes. No representation ismade or implied that this is the only license that may be required to avoid infringement in the use ofthis standard.iContentsPageForeword xiiiIntroduction xixSCSI sta

15、ndards family xx1 Scope 12 Normative references 12.1 Normative references overview12.2 Approved references 22.3 References under development .22.4 Other references 23 Definitions, acronyms, keywords, and conventions .33.1 Definitions.33.2 Acronyms .93.3 Keywords103.4 Editorial Conventions .113.5 Not

16、ation Conventions .123.5.1 Notation for state diagrams 124 General Concepts 144.1 Overview 144.2 Sequential-access device model144.2.1 Sequential-access device model overview 144.2.2 Volumes and medium 144.2.2.1 Volumes .144.2.2.2 Medium 154.2.2.3 Recording volume model .164.2.2.4 WORM volume model1

17、84.2.2.5 Cleaning volume model .194.2.2.6 Microcode update volume model .194.2.3 Device entity.194.2.4 End-of-partition.194.2.5 Early-warning .234.2.6 Programmable early warning .244.2.7 Partitions within a recording volume 254.2.8 Logical objects .274.2.8.1 Logical objects within a partition 274.2.

18、8.2 Logical object identifier 284.2.9 Logical files 284.2.9.1 Logical files within a partition .284.2.9.2 Logical file identifier .284.2.10 Object buffering294.2.11 Synchronize operation behavior.294.2.12 Direction and position definitions .304.2.13 Write modes .30ii4.2.13.1 Write mode introduction

19、.304.2.13.2 Overwrite-allowed mode 304.2.13.3 Append-only mode.314.2.14 Compression of objects344.2.14.1 Compression of objects overview 344.2.14.2 Interaction of the compression mode parameters344.2.15 Error reporting364.2.15.1 Overview 364.2.15.2 Stream commands sense data descriptor .374.2.15.3 I

20、nformation sense data descriptor374.2.15.4 Deferred check condition eligible commands 384.2.15.5 Deferred error affinity commands 384.2.15.6 Error conditions384.2.16 Write protection404.2.16.1 Write protection introduction 404.2.16.2 Write protection additional sense code use .414.2.16.3 Software wr

21、ite protection for the device server424.2.16.4 Associated write protection 424.2.16.5 Persistent write protection424.2.16.6 Permanent write protection 424.2.17 Progress indication.434.2.18 Command queuing444.2.18.1 Command queuing overview 444.2.18.2 Explicit address mode write sequences.444.2.19 Bl

22、ock address mode.444.2.19.1 Block address mode overview .444.2.19.2 Block address mode selection .454.2.19.3 Block address mode state diagrams454.2.20 TapeAlert application client interface .534.2.20.1 TapeAlert introduction534.2.20.2 TapeAlert usage model564.2.20.3 TapeAlert flag activation and dea

23、ctivation .584.2.20.4 WORM TapeAlert flags 634.2.20.5 TapeAlert Response log page .634.2.21 Medium auxiliary memory attributes 644.2.21.1 Medium auxiliary memory device type attributes .644.2.21.2 Medium auxiliary memory medium type attributes.654.2.21.3 Medium auxiliary memory host type attributes.

24、664.2.22 Reservations 664.2.23 Logical block protection684.2.23.1 Logical block protection overview 684.2.23.2 Protection information on a volume .694.2.23.3 Logical blocks and protection information704.2.23.4 Protection information for Recover Buffered Data .724.2.23.5 Protecting logical blocks tra

25、nsferred during writes.744.2.23.6 Protecting logical blocks transferred during reads .754.2.23.7 Protecting logical blocks transferred during a RECOVER BUFFERED DATA command .754.2.23.8 File Verification of protection information.764.2.23.9 Verification of protection information to EOD.764.2.24 Logi

26、cal block encryption.774.2.24.1 Logical block encryption overview .774.2.24.2 Encrypting logical blocks on the medium.774.2.24.3 Reading encrypted logical blocks on the medium784.2.24.4 Exhaustive-search attack prevention .79iii4.2.24.5 Keyless copy of encrypted logical blocks.794.2.24.6 Managing lo

27、gical block encryption keys within the device entity .814.2.24.7 Logical block encryption capabilities824.2.24.8 Key instance counters834.2.24.9 Encryption mode locking834.2.24.10 Nonce generation.834.2.24.11 Unauthenticated key-associated data (U-KAD) and authenticated key-associated data (A-KAD)84

28、4.2.24.12 Metadata key-associated data (M-KAD) 844.2.24.13 Wrapped key key-associated data (WK-KAD) .844.2.24.14 Logical block encryption information per I_T_L nexus.844.2.24.15 Logical block encryption parameters .864.2.24.16 Effects of reservation loss on logical block encryption parameters .874.2

29、.24.17 Effects of reservation preempt on logical block encryption parameters.884.2.25 External data encryption control.894.2.25.1 External data encryption control overview .894.2.25.2 External data encryption control of data encryption capabilities 894.2.25.3 External data encryption control of logi

30、cal block encryption parameters .914.2.25.4 External data encryption control - logical block encryption parameters exclusive control .954.2.25.5 External data encryption control error conditions.954.2.26 Logical block encryption key protection .964.2.26.1 Logical block encryption key protection over

31、view 964.2.26.2 Logical block encryption key protection using security associations .964.2.26.3 Key wrapping using public key cryptography.964.2.26.4 Key wrapping using key manager specific methods 964.2.26.5 Encryption management attributes 974.2.27 Appending data to a volume containing encrypted l

32、ogical blocks984.2.28 Self-test operations 994.2.29 Capability-based command (CbCS) security .994.2.29.1 Capability-based command security overview.994.2.29.2 Association between commands and permission bits .995 Explicit address command descriptions for sequential-access devices 1015.1 Summary of c

33、ommands for explicit address mode 1015.2 ERASE(16) command 1055.3 READ(16) command 1065.4 READ REVERSE(16) command 1105.5 VERIFY(16) command .1115.6 WRITE(16) command.1145.7 WRITE FILEMARKS(16) command .1166 Implicit address command descriptions for sequential-access devices 1186.1 Summary of comman

34、ds for implicit address mode 1186.2 ERASE(6) command 1216.3 LOCATE(10) command1216.4 READ(6) command 1236.5 READ REVERSE(6) command 1256.6 SPACE(6) command 1266.7 VERIFY(6) command .1286.8 WRITE(6) command.1316.9 WRITE FILEMARKS(6) command .132iv7 Common command descriptions for sequential-access de

35、vices .1347.1 ALLOW OVERWRITE command .1347.2 FORMAT MEDIUM command1357.3 LOAD UNLOAD command.1377.4 LOCATE(16) command1397.5 PREVENT ALLOW MEDIUM REMOVAL command1417.6 READ BLOCK LIMITS command.1427.6.1 READ BLOCK LIMITS command overview .1427.6.2 READ BLOCK LIMITS block length data .1427.6.3 READ

36、BLOCK LIMITS maximum logical object identifier data 1447.7 READ POSITION command 1457.7.1 READ POSITION command description1457.7.2 READ POSITION data format, short form1477.7.3 READ POSITION data format, long form.1497.7.4 READ POSITION data format, extended form.1507.8 RECOVER BUFFERED DATA comman

37、d1517.9 REPORT DENSITY SUPPORT command.1537.9.1 REPORT DENSITY SUPPORT command description 1537.9.2 REPORT DENSITY SUPPORT header .1547.9.3 Density support report1547.9.4 Medium type support report .1587.10 REWIND command1597.11 SET CAPACITY command.1607.12 SPACE(16) command1618 Parameters for seque

38、ntial-access devices 1668.1 Diagnostic parameters .1668.2 Log parameters 1668.2.1 Log parameters overview.1668.2.2 Sequential-Access Device log page.1688.2.3 TapeAlert log page.1698.2.4 Device Statistics log page1708.2.4.1 Device Statistics log page overview.1708.2.4.2 Device statistics log paramete

39、r formats .1738.2.4.3 Device statistics string data log parameter format .1758.2.4.4 Device Statistics log parameters1758.2.5 Tape Diagnostic Data log page1798.2.6 Current Service Information log page 1828.2.6.1 Current Service Information log page overview .1828.2.6.2 Vendor-specific service inform

40、ation descriptor 1848.2.6.3 DEVICE INFORMATION DESCRIPTOR.1858.2.6.4 Volume information descriptor .1868.2.6.5 TapeAlert flag specific information.1888.2.7 Requested Recovery log page.1898.2.7.1 Requested Recovery log page overview .1898.2.7.2 Recovery procedures log parameter1908.2.8 Data Compressi

41、on log page.1918.2.8.1 Data Compression log page overview .1918.2.8.2 Data compression counter log parameter format.1938.2.8.3 Data Compression log parameters 1938.2.9 Volume Statistics log page.1958.2.9.1 Volume Statistics log page overview .195v8.2.9.2 Volume statistics log parameter formats1988.2

42、.9.3 Volume statistics log parameters .2018.3 Mode parameters .2078.3.1 Mode parameters overview2078.3.2 Data Compression mode page 2138.3.3 Device Configuration mode page.2158.3.4 Medium Partition mode page .2228.3.5 Read-Write Error Recovery mode page.2268.3.6 Informational Exceptions Control mode

43、 page 2278.3.7 Medium Configuration mode page .2338.3.8 Device Configuration Extension mode page 2348.3.9 Control Data Protection mode page.2378.4 Vital product data (VPD) parameters .2388.4.1 VPD parameters overview and page codes.2388.4.2 Sequential-access Device Capabilities VPD page.2388.4.3 Man

44、ufacturer-assigned Serial Number VPD page .2398.4.4 TapeAlert Supported Flags VPD page.2408.4.5 Automation Device Serial Number VPD page2408.4.6 Data Transfer Device Element Address VPD page .2418.5 Security protocol parameters .2418.5.1 Security protocol overview .2418.5.2 SECURITY PROTOCOL IN comm

45、and specifying Tape Data Encryption security protocol 2418.5.2.1 SECURITY PROTOCOL IN command specifying Tape Data Encryption security protocol overview.2418.5.2.2 Tape Data Encryption In Support page2438.5.2.3 Tape Data Encryption Out Support page.2438.5.2.4 Data Encryption Capabilities page.2448.5

46、.2.5 Supported Key Formats page 2518.5.2.6 Data Encryption Management Capabilities page.2518.5.2.7 Data Encryption Status page .2528.5.2.8 Next Block Encryption Status page2558.5.2.9 Get Encryption Management Attributes page 2598.5.2.10 Random Number page.2598.5.2.11 Device Server Key Wrapping Publi

47、c Key page2608.5.3 SECURITY PROTOCOL OUT command specifying Tape Data Encryption security protocol 2618.5.3.1 SECURITY PROTOCOL OUT command specifying Tape Data Encryption security protocol overview.2618.5.3.2 Set Data Encryption page 2628.5.3.3 SA Encapsulation page2748.5.3.4 Set Encryption Managem

48、ent Attributes page 2758.5.4 SECURITY PROTOCOL IN and SECURITY PROTOCOL OUT descriptors.2758.5.4.1 Tape Data Encryption security protocol descriptors overview .2758.5.4.2 Tape Data Encryption descriptors2768.5.4.3 Wrapped Key descriptors.2768.5.4.4 Encryption management attributes descriptor .279Ann

49、ex A (Informative) Security environment 284A.1 Security environment overview 284A.2 Security environment threats .285Annex B (Informative) Example keyless copy operation flowchart.286B.1 Example keyless copy operation flowchart overview.286Annex C (Informative) Example application client use of volume coherency .288viAnnex D (Informative) Sense data in