Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Tape encryption

Created: 17 Mar 2014 | 7 comments

Hi all,

we have BE2010 running in the main office and the BE12.5 in the branch office.

Now we have to encrypt the backups. So i enable the software encryprion in the BE21.5

Now i would like to know it ist possible to export the key and import the key in the BE2010?

I mean i would like to restore the backup tape in the main office as well.

Thank you!

Operating Systems:

Comments 7 CommentsJump to latest comment

CraigV's picture

Hi,

 

As long as you have the encryption key available it should work.

Before doing this on a production level I'd create a test backup (or backups) and encrypt the data on the BE 12.5 media server. Once done, export the key, and import it onto the BE 2010 media server before trying the restore.

This is the only way you've got a leg to stand on in proving it does, or doesn't, work to management.

Thanks!

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

mghomer's picture

cool thanks,

unfortunatly i can't find the possibility to export the key.

Any idea how i can doit on 12.5 und import it on 2010?

thanks

CraigV's picture

...you might want to refer to the TNs below on this:

http://www.symantec.com/docs/HOWTO22978

http://www.symantec.com/docs/TECH49603

Thanks!

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

pkh's picture

All you need to do is to use the passphrase and create an encryption key in the BE2010 machine.

You can also use hardware encryption if you want to. You are not restricted to software encryption

mghomer's picture

cool so  i have to selecet the restricted encryption? is it right?

the way woulld be this one?

1. BE12.5 restricted encryption

2. backup on 12.5

3. catalogue the encrypted tape on the BE2010 with passphrase

4. and restore with the passphrase

and

in this case I do not need any backup of the key if the BE 12.5 Server failed and i have to reinstall it from scratch?

 

 

 

CraigV's picture

In theory yes, but run the test yourself to validate that it is going to work.

Thanks!

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

pkh's picture

Why do you want to restrict your encryption key?