Encryption Based On Schedule
I may be blowing smoke here but was wondering if there is an option to have encryption enabled based on a schedule?
My issue is that we are using OST to an HP B6200 server using deduplication and duplication to a second B6200 using NBU SLP's obviously I cannot use encryption on these policies as this would potentially wreck the deduplication, now this is Ok for our auditors on a Daily / Weekly basis as the data is copied on a private link so encryption is not required; however, we do have some policies that require longer term retention and are shipped off on tape, these are covered by an SLP that does a three part backup, 1 to the host B6200, 1 to the offsite B6200 and then 1 to physical tape, this is the one I want encrypted as it is held off our premises.
I cannot see an option to have the encryption based on the schedule, only on client and policy, woudl this potentially require me to create duplicate policies for the ones that require encryption on a monthly basis or is there a simpler option??
Kev
You can use KMS (tape drive encryption) and different volumes groups. KMS encryption work on a volume group level and each volume group must be prefixed with ENCR_
A schedule must point to a volume group. By pointing to either ENCR_ volumne group or non ENCR_ volume group you can control if data is encrypted or not on tape.
It worth mentioning that tape drive encryption is almost invisiable for the rest of Netbackup.
It does not require any client or policy configuration like "client encryption" and "media server encryption".
KMS install & config:
http://www.symantec.com/docs/TECH67972
Hope this make sense.
Nicolai
