Hello BBracey,
When it comes to drive based encryption DP only has 2, quite distinct, roles...
1. we request (or not) the drive to use "Drive-based encryption" if it is capable of doing so.
2. we (optionally) handle the encryption key management.
We don't don't do anything else.
I'd say the commands you have described in the text above are only w.r.t. encryption key management.
If you want to see if a Tape drive within DP is set to use Drive based encryption...
GUI, Left pane...
Devices and Media context, Devices, <name of tape library>
Expand Drives, right click on the drive/device and select Properties
Right pane, Settings tab, Advanced, Here you can see "Drive-based encryption".
If it is set you can be reasonably sure backups to that drive are using "Drive-based encryption".
If it is not set the backups to that drive are not using "Drive-based encryption".
If it is greyed out, the drive (from a hardware point of view) is reporting to
DP it is not capable of "Drive-based encryption".
Alternatively/additionally, it is possible to set "Drive-based encryption" in the backup spec.
GUI, Left pane...
Backup context, Expand Filesystem, right click on a spec "Properties"
Right pane... Destination tab, highlight the drive, Properites
Is "Drive-based encryption" checked ?
Hope this might help you tell if your backups are using "Drive-based encryption", or not.
A little about key management with respect to Drive-based encryption
By default DP makes a new encryption key per media.
By setting KeyEntity= and EnableCommonKeyEntity= values in the global file
/etc/opt/omni/server/options/global
\Program Files\OmniBack\Config\Server\Options\global
\ProgramData\OmniBack\Config\Server\Options\global
it is possible change it so DP makes fewer keys.
Hope this helps you.
Best regards, Stewart