Video Screencast Help

Netbackup 7.5 (.6) / KMS / IBM TS3310 License

Created: 10 May 2013 | 9 comments
kmouline's picture

Hello All,

 

 

We are getting a new IBM Library, TS3310 with LTO6 drives.

We are also upgrading to NBU 7.5 or 7.6 in order to utilize KMS with 20 KeyGroups

Do We need any IBM Licence to use with KMS

 

Is LTO 6 supported ? 

From other hand can we use MSO with LTO 6 drives ? 

 

Thank you, 

 

(I have already read the post regarding the same topic with LTO5/KMS/and Netbackup 7.1) 

 

Operating Systems:

Comments 9 CommentsJump to latest comment

Yasuhisa Ishikawa's picture

Please have a look on page 8 in this white paper.

http://www.symantec.com/business/support/resources...

 

The NetBackup Key Management Service (KMS) was introduced in the NetBackup 6.5.2 release and initially managed encryption keys for tape drives supporting the SCSI T10 encryption standard. Today, this includes all LTO4, LTO5 and LTO6 

I'm not sure IBM requires you to purchase any license, but usually tape vendors only charge to use of their prorietary key management system. Please confirm to IBM if you have to purchase any license for use of drive's encryption feature with NetBackup KMS.

Authorized Symantec Consultant(ASC) Data Protection in Tokyo, Japan

Marianne's picture

I cannot see how the 7.5/7.6 answer will be different to the the post you are referring to?
I guess it is https://www-secure.symantec.com/connect/forums/netbackup-71-kms-imb-ts3310-license#comment-5579871  ? 

NBU 7.x HCL: http://www.symantec.com/docs/TECH76495

Master Compatibility List: http://www.symantec.com/docs/TECH59978  

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links

StefanosM's picture

No, you do not need to have the IBM license to enable netbackup KMS. I have some installations like yours that use KMS with IBM libraries.

You just have to enable the encryption from the libraries's menu and configure netbackup KMS

 

And trust me, you do not want to use MSEO. It is useful if you have LTO3 drives but not for LTO6. Your backups will at least take the double time to finish and you will lose compression. There is software compression but it will put the backup time to the sky.

Yasuhisa Ishikawa's picture

MSO -> SSO?

Authorized Symantec Consultant(ASC) Data Protection in Tokyo, Japan

kmouline's picture

MSEO: NetBackup Media Server Encryption Option 

StefanosM's picture

Good question  smiley

I thought that it was MSEO as we are talking about encryption.... But you are right, maybe it is SSO.

Nicolai's picture

No I don't think so. The Native LTO encryption is controlled by SCSI commands. The robot will have no idea that encryption is enabled from the host.

Oracle offer similar solution - why pay for something that's free with Netbackup ? 

Assumption is the mother of all mess ups.

If this post answered your'e qustion -  Please mark as a soloution.

StefanosM's picture

The robot will have no idea that encryption is enabled from the host.

Nicolai, this is not exactly correct.

For IBM libraries, you have to go to the encryption option and select the "Application Managed Encryption”
If you do not do that, all backups with KMS encryption will fail.

If I remember correct, the same goes to Quantum and Dell libraries. For HP libraries I think that you do not need to change anything.

If you enable the option Application Managed Encryption”, then you can use netbackup KMS without paying IBM

Nicolai's picture

OK - Thanks for the clarification.

Assumption is the mother of all mess ups.

If this post answered your'e qustion -  Please mark as a soloution.