The invention provides a mechanism for selectively encrypting media within a consolidation of storage devices into a shared configuration, i.e. a media pool. The invention also provides a mechanism by which more than one key can be used for encrypting media. The invention accomplishes tape encryption by media parsing. An encryption key is determined based on the backup application's grouping of data sets. This is accomplished by examining the volume header of the tape and, from the header, deciding if pools are supported by the application. If they are, the invention auto-creates a pool key. In the case where the pools are known in advance, a user with appropriate administrative privileges can create the pools and assign keys to them. The invention thus allows mirroring of the logical groupings in the backup application with encryption keys.