Redundant LTO

Overview

Redundant LTO means more than “two tapes.” It is a strategy: at least two, preferably three, separately verified LTO copies written on different drives, stored in distinct geographic sites with independent catalogs. The goal is to survive media defects, drive obsolescence, site disasters, and human error.

Implementation Pattern

• 3-2-1 Rule: Three copies, on two media types (e.g., LTO + spinning disk), with one off-site.
• Diverse Hardware: Do not rely on a single drive model; cross-write on separate units to avoid systematic errors.
• Catalog + Manifest: Central inventory with barcodes, reel IDs, and per-file checksums.
• Restore Drills: Quarterly test restores (≥ 1% of frames) to validate workflows and staff skills.

Lifecycle and Migration

Plan for generational leapfrogging (e.g., LTO-7 → LTO-9). Maintain at least two functional drives for each generation you keep. Budget staff time for migrations and verify checksums after every rewrite.

Risk Management

Document chain-of-custody, environmental logs, and incident reports. If a tape fails verification, quarantine it and rebuild from other replicas immediately; do not allow a single bad copy to sit unaddressed.

Related Terms

• LTO tape, digital preservation master, bit rot, MD5/SHA-256.