Tape Encryption
almir spahic
April 2nd, 2009
Hi everyone,
I backup up all my systems everynight with full backup.I want to do baremetal on my tape that stays on site and do encryption on tapes that goes offsite.What is the best way to do this?
Thanks in advance
Encryption
Buy LTO4 or IBM TS1120/TS1130 tape drives which do hardware encryption and have minimal impact on performance and use KMS (NetBackup) or EKM/TKLM (IBM) for key management.
The alternatives - ie encrypt on the host before sending to tape or using NetBackup MSEO (Media Server Encryption Option) - can prove to be restrictively time consuming if you have a lot of data.
Dhammica De Silva
"It's better to keep my mouth shut and be thought a fool rather than open it and remove all doubt." (Margaret Thatcher 1975)
Media Server Encryption
Media Server Encryption Option works fine, you can specify which copy, policy and pool is encrypted.
You have central server which stores policies and encryption keys and plugin for Media Server which install special tape drivers.
You can't manage MSEO from NB console, it's a product of Vormetric, but configuration in simple.. stored in text files.
Not possible
Hi Almir
Tape encryption has not supported in NBU,only it supports data encryption.This is i confirm from Symantec Support.
May be this document could
May be this document could help you.
ftp://exftpp.symantec.com/pub/support/products/NetBackup_Enterprise_Server/302438.pdf
Also U can try this
Hi
Also you can encrypt your data using the fololowing cmd
first U Want to run bpinst -ENCRYPTION <Client Name> From the master server
Then Run the bpkeyutil -clients <Client Name> from the client .
Thanks
Would you like to reply?
Login or Register to post your comment.