Backing up KMS database
We have tape encryption setup using KMS on Netbackup 7.5.0.6, The master server is Win2008 R2. I'm looking at the best way to backup KMS.
We plan to keep a paper copy of passphrases and key tag I...
I second this.
There's a short simple script here to generate a random pass-phrase:
https://www-secure.symantec.com/connect/forums/how-backup-kms-files
...then make sure to make a note of it - and keep it safe.
Laser carbon slides off paper after a few years. So does pencil graphite. Felt-tips fade or bleed, and so does cheap ink. You need good quality paper, and good quality pen and ink - to avoid a stink... when the pass phrases become illegible. Get the paper copy triple checked. If just one character is wrong, then you'll never be able to restore.
