MSEO - How to understand the images are Encrypted ?
Updated: 21 May 2010 | 8 comments
This issue has been solved. See solution.
Hi All,
We are trying MSEO option. Is anyone know that how we can undaertand the images are Encrypted by MSEO.
or
Is there any commad to list/show images which are backed up by MSEO?
Thanks. Regards.
Servet
Discussion Filed Under:
Comments
Not sure of the command, but it should be trivial...
Since you will have to have made those backups using specific policies specially configured for MSEO (which is to say, with an MSEO keyword placed in the "Keyword phrase" box for the policy), you should be able to just list those backups from those particular policies with a `bpimagelist` command.
reports>Images on media
below screenshot will show you where you can see, whether your images are encrypted or not
regards, Srikanth.
Command :)
bpimmedia - display information about NetBackup images on media
SYNOPSIS
install_path\NetBackup\bin\admincmd\bpimmedia -disk_stu
storage_unit_label | -dt disk_type | -stype server_type [-dp
disk_pool_name [-dv disk_volume]] [-l | -L] [-disk | -tape] [-policy
policy_name] [-client client_name] [-d date time] [-e date time]
[-mediaid media_id | path_name] [-mtype image_type] [-option
option_name] [-rl retlevel] [-sl sched_label] [-t sched_type]
[-legacy] [-M master_server...] [-verbose]
install_path\NetBackup\bin\admincmd\bpimmedia -spanpools [-cn
copy_number] [-mediaid media_id] [-U]
Thanks, Karthikeyan Sundaram.
Beware! Don't get your "Encryption" confused!
The above two posts would be good answers if we were talking about CLIENT Encryption, but for MEDIA SERVER Encryption (MSEO), it's a little different. The "Encrypted" field in Srikanth's and Karthik's answers will not provide you with MSEO information, only CEO information. Please be sure to read carefully!
MSEO
There are 2 ways to check the image encyption
1) if you are on windows pls check the eventvwr which will clearly log the encyrption complete message
2) if you are on unix check the /var/log/cgsb.log for encyption complete message
Best test to to do is try to restore the backup to a drive where MSEO does not exist.
Usually encypted backups cant be restored to normal tape drives even though they would be of same density
good question
Netbackup's only communication to the MSEO server is through the keyword phase in each Netbackup policy.
My understanding is that if the Keyword phrase has "MSEO," the MSEO agent will intercept the backup job and apply the encryption specified for the policy.
The only way within NetBackup to show which images were encrypted with MSEO was mentioned before by CRZ. Use a command that can filter the keyword phase in the Netbackup policy.
This works if you know how your MSEO policies are configured. If the MSEO was configured to apply to only certain copies within that policy, then some copies will not be encrypted by MSEO within that policy. Say I backup to diskpool A and then have a vault job that copies those images to tape. Only the backup images to tape will be encrypted. If I search for just jobs within a policy that has the keyword "MSEO," there is a chance I could mistake job as being encrypted. I would then need to also filter by media pool, or copy number.
I found the Windows event viewer on the MSEO to be the best way to check for MSEO encryptions.
Trick to do this .. )
I'm working on this and will get back soon. Please follow the post at
https://www-secure.symantec.com/connect/forums/ide...
-Satkay Satish
Identify MSEO encrypted tapes
Hi All,
Encrypted tapes will have the below header V M T A P after the netbackup & backup image header and it could only be read from non MSEO tape drives. :)
While trying to read from MSEO drives it won't work as MSEO works transparently.
======================================================
root@netbackup7 # mt -f /tmp/aa rewind
root@netbackup7 # dd if=/tmp/aa bs=1024 | od -cx
0000000 V O L 1 2 4 0 2 1 3 \0 \0 \0 \0 \0 \0
564f 4c31 3234 3032 3133 0000 0000 0000
0000020 \0 \0 \0 \0 \0 \0 \0 001 \0 \0 \0 024 I u 242 242
0000 0000 0000 0001 0000 0014 4975 a2a2
0000040 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
0000060 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \n \0 \0 \0 e
0000 0000 0000 0000 0000 000a 0000 0065
0000100 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 004 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0400 0000 0000
0000120 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
0000160 T h I s I s A B P t A p
5468 4973 2049 7320 4120 4250 2074 4170
0000200 E h E a D e r \0 \0 \0 \0 \0 \0 \0 \0
4520 6845 6144 6572 0000 0000 0000 0000
0000220 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
0002000
1+0 records in
1+0 records out
root@netbackup7 # dd if=/tmp/aa bs=1024 | od -cx
0000000 \0 \0 \0 002 n e t b a c k u p 6 _ 1
0000 0002 6e65 7462 6163 6b75 7036 5f31
0000020 2 3 1 5 5 5 1 8 9 \0 \0 \0 \0 \0 \0 \0
3233 3135 3535 3138 3900 0000 0000 0000
0000040 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
0000200 \0 \0 \0 \0 I u 242 242 O 013 244 365 \0 \0 \0 \n
0000 0000 4975 a2a2 4f0b a4f5 0000 000a
0000220 \0 \0 \0 002 \0 \0 \0 001 \0 004 \0 \0 \0 \0 \0 \0
0000 0002 0000 0001 0004 0000 0000 0000
0000240 2 4 0 2 1 3 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
3234 3032 3133 0000 0000 0000 0000 0000
0000260 \0 \0 \0 002 \0 \0 \0 \0 \0 \0 \0 003 \0 \0 \0 \0
0000 0002 0000 0000 0000 0003 0000 0000
0000300 \0 \0 \0 \0 \0 \0 \0 \0 T h I s I s
0000 0000 0000 0000 5468 4973 2049 7320
0000320 A B P B a C k U p H e A d
4120 4250 2042 6143 6b55 7020 4865 4164
0000340 E r \0 C h a n _ d a i l y _ f i
4572 0043 6861 6e5f 6461 696c 795f 6669
0000360 n w a r e _ p o s t e o d _ n e
6e77 6172 655f 706f 7374 656f 645f 6e65
0000400 w _ f o u r _ v o l \0 \0 \0 \0 \0 \0
775f 666f 7572 5f76 6f6c 0000 0000 0000
0000420 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
0000540 \0 \0 \0 \0 C h a n _ d a i l y _ f
0000 0000 4368 616e 5f64 6169 6c79 5f66
0000560 i n w a r e _ p o s t e o d _ n
696e 7761 7265 5f70 6f73 7465 6f64 5f6e
0000600 e w _ f o u r _ v o l \0 \0 \0 \0 \0
6577 5f66 6f75 725f 766f 6c00 0000 0000
0000620 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
0000740 \0 \0 \0 \0 \0 p o s t e o d b a c
0000 0000 0070 6f73 7465 6f64 2062 6163
0000760 k u p \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
6b75 7000 0000 0000 0000 0000 0000 0000
0001000 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
0001160 \0 \0 \0 \0 \0 002 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0002 0000 0000 0000 0000 0000
0001200 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0 \0
0000 0000 0000 0000 0000 0000 0000 0000
*
read: Not enough space
1+0 records in
1+0 records out
0002000
root@netbackup7 # dd if=/tmp/aa bs=263168 | od -cx
0000000 222 247 V M T A P \0 \0 004 004 \0 002 204 247 222
92a7 564d 5441 5000 0004 0400 0284 a792
======================================================
-Satkay Satish
Would you like to reply?
Login or Register to post your comment.