Video Screencast Help

NBU DATA ENCRYPTION

Created: 02 Oct 2012 • Updated: 04 Oct 2012 | 7 comments
This issue has been solved. See solution.

Hi Experts,

 

I am going to implement the data encryption in our environment and have some doubts regarding it , to my understanding i have framed the steps how to do data encryption,

Step 1:- Enable the encryption tab in the POLICY and then enable the encryption in each and every client by selectring Clients ---> Host properties---> Encryption---> 128 or 256 encryption.

Step 2:- Go to command prompt and generate the keys for each and every client manually from the MASTER SERVER

 

<install_path>\Veritas\NetBackup\bin\bpkeyutil -client <client_name>

 

Step 3:- Now we can have the KEY GENERATED in the keyfile.dat in the location 

 

C:\program files\veritas\netbackup\var\keyfile.dat

 

 

Will the above steps will do please advise asap.

 

Thanks,

Nayab

 

 

Comments 7 CommentsJump to latest comment

Marianne's picture

You have marked this post as solution in your previous post? https://www-secure.symantec.com/connect/forums/data-encryption-0#comment-7781011

 

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links

Nayab.Rasool's picture

Hi Maria,

Yes i have marked it but still wanna confirm with you people that i am in the right path.

 

Thanks,

Nayab

Yasuhisa Ishikawa's picture

These steps are right.

Please mark a solution to Marianne again.

Authorized Symantec Consultant(ASC) Data Protection in Tokyo, Japan

Nayab.Rasool's picture

Hi Yasuhisa,

 

What if i am implementing KMS encryption i have attached a doc which has the complete steps to achieve KMS encryption could you please cross check and confirm it to me. So that i can go ahead and implement it on the coming weeked.

 

Thanks,

Nayab

AttachmentSize
KMS ENCRYPTION.docx 17.54 KB
Nayab.Rasool's picture

Could you also tell me how the RESTORATION happens if KMS ENCRYPTION enabled i mean do i need to enter any KEYS while restoration .

 

Thanks

Nayab

Yasuhisa Ishikawa's picture

The procedure in your .docx is completely same with that in NetBackup Security and Encryption Guide.

no need to enter key at restore unless you manually delete it from KMS DB. NetBackup keeps key inside and use it at restore.

Authorized Symantec Consultant(ASC) Data Protection in Tokyo, Japan

SOLUTION