Forum Discussion

syed_jahanzaib's avatar
syed_jahanzaib
Level 5
6 years ago

Symantec Backup Exec 2014 Encryption Recommendation

We have 2 branch offices who are using Symantec backup exec 2014 on Windows 2008 R2 along with 

  • IBM Tape Library TS3100 (LTO-5)
  • IBM Tape Drive Standalone (LTO-7)

What is the recommended method to apply encryption on the backup jobs? software or hardware?

Will adding software OR hardware encryption increases the backup time?

If Backup Exec windows is reinstalled, OR if we want to restore data from encrypted tapes on another backup exec server, then how we will going to restore data from these encrypted tapes ?

2014
Windows Server 2008 R2
  • pkh's avatar
    pkh
    6 years ago

    Will adding software OR hardware encryption increases the backup time?

    Definitely, there is no such thing as a free lunch.

    Do use hardware encryption where possible.  This takes less time than software encryption and both will take more time than non-encrypted jobs.

5 Replies

Sort By
  • Marianne's avatar
    Marianne
    Level 6
    6 years ago

    Backup Exec supports both hardware and software encryption.

    Extremely important that you read all available documentation before you make a choice - not only on how to configure encryption, but also how to ensure that encryption keys are available for restores.
    It is impossible to restore if encrytion key or passphrase is unavailable.

    Encrytion is covered in Chapter 15 of BE Admin Guide:  https://www.veritas.com/content/support/en_US/doc/59226269-99535599-0/v53895058-99535599

    Using encryption with Backup Exec

    This topic includes the following information:

    Software encryption

    Hardware encryption

    Encryption keys

    Restricted keys and common keys

    Pass phrases

    Also read through 'About restoring encrypted data' in chapter 5.

    My 2c - before you go ahead and configure encryption, please upgrade to a supported BE version. 
    BE2014 ran out of support on November 7, 2018.   https://www.veritas.com/content/support/en_US/article.100038900.html
    You may also want to migrate to newer OS as W2008 is nearing end of support from Microsoft.

    If you choose hardware encrytion, ensure that maintenance on all of your hardware devices is up to date from the relevant vendor and remains up to date for as long as you need to restore from encrypted tapes. 

  • pkh's avatar
    pkh
    Moderator
    6 years ago

    Will adding software OR hardware encryption increases the backup time?

    Definitely, there is no such thing as a free lunch.

    Do use hardware encryption where possible.  This takes less time than software encryption and both will take more time than non-encrypted jobs.

    • syed_jahanzaib's avatar
      syed_jahanzaib
      Level 5
      6 years ago

      From the screenshot below I can see hardware encryption NOT  supported in IBM LTO 7 Tape Drive.

      This means that I should use Software Compression + Software Encryption? As I read somewhere that you should use one type, either hardware compression + hardware encryption OR software compresion + software  encryption ??? is it true?

      • pkh's avatar
        pkh
        Moderator
        6 years ago

        Yes.  That is true.