NetBackup and Sun StorageTek Crypto Key Management Solution
Updated: 23 May 2010 | 4 comments
Hi All!
We want to implement NBU with KMS from StrorageTek for our T10000 drives.
We have one robotic device with half of the drives has encryption enabled and second half has no encryption.
Final target is to separate encryption-enabled drives from unencrypted ones. Tapes are not a problem at all as we can use barcode rules to put them to different pools so it's not a big deal.
But how to create two storage units using single media server? Any ideas?
discussion Filed Under:
Comments
If KMS is the one where the
If KMS is the one where the key is created on the NetBackup master server.
/usr/openv/netbackup/crypt
then
the key is on the master and then the same key is on the media server if you have 12 drives and 6 are attached to the media server will have the capability to encrypt data, the other media servers that see the rest of the 6 drives wil not encrypt data.
ok
I'm sorry, but NBU KMS != Sun KMS
Sun KMS is an appliance which does the key management.
It is not a part of NBU.
I'm aware of NBU integrated KMS from 6.5.2, but this particular question is regarding Sun one...
Not sure about the KMS/encryption side of things
but looking at this from a purely NB admin side, the only way I could see to create 2 separate storage units on a single media server, and keep specific tape drives for each, would be to set the drives up as different densities?
Regards Andy
"It's not too late to panic ..."
You are right Andy
The KMS is out of scope of NBU and I also see the assignment of different drive type to encrypted/unencrypted drives/tapes as only way so solve this puzzle...
Would you like to reply?
Login or Register to post your comment.