Encryption options enabled in netbackup 7

Netbackup Encryption option is the specially priced option for performing backups with encryption enabled.

For more information refer to Netbackup security and Encryption guide.

 http://www.symantec.com/docs/TECH127044

 http://www.symantec.com/docs/TECH76577
 

Regards.

Use tape drive based encryption. The KMS that handle the encryption keys has been included in Netbackup since 6.5.2. The only requirement is you have T10 compliant tape drives around (LTO4/LTO5 etc etc).

Although as delivered, T10 side encryption is somewhat limited in terms of active encrypted pools  (encr_... if I recall) . If you get to know if its expandable (and chargeable) then I for one would like to know the deal.

Jim

KMS - which does the hardware encryption is free.

with 7.0 you can have up to 20 volume pools to encrypt.

The one only thing that some people what that this does not do is - round robin on the codes.

Meaning you for each encrypted volume pool you have 1 active encryption key.  All tapes made in that pool with use that key.  If you want to use another key, you have to make a new active one and demote the current key to a reading key.  You can have a different key for each pool.

Where some people what 20 keys active all at once, and each backup in the same pool would use a different key.

Depends on what your requirements are.

But KMS that does hardware encryption is free with 7.0 with up to 20 encrypted volume pools.

i have the below license details installed in my current netbackup 6 MP4 installation

-------------------------

file version    = 0x05000000
  time added      = 0x48ce1093 Mon Sep 15 10:36:51 2008
  hostname        = netbackup
  product ID      = 6 NetBackup
  serial number   =
  key version     =
  count           = 0
  server platform = 0 Any platform
  client platform = 0 Any platform
  server tier     = 5 NetBackup Server
  client tier     = 0 No tier
  license type    = 1 Permanent
  Site ID         = 2006 Unknown site: 2006
  Feature ID      = 75 Bare Metal Restore +
  Feature ID      = 74 Encryption +
  Feature ID      = 73 Open File Backup +
  Feature ID      = 43 Encryption (Legacy DES 56-bit) +
  Feature ID      = 42 Encryption (Legacy DES 40-bit) +
  Feature ID      = 22 Additional clients +

------------------------------------

Is this MSEO ??

please advice

thanks

FYI

In NBU 7.1 is number of KMS pools has been raised to 100.

There is no payable KMS option. I think earlier announcement about making it a licensed option has been withdrawn.

Interesting Nicolai: you say 100 pools in 7.1: do you know how many active at once? As I read it (the 7.0.1 security and encr. guide) the kgroup name is ENCR_poolname and theres a maximum of 20 records in 2 kgroups of 10 with one per kgroup active this strikes me as adequate for a few tests for not for real world production: I need plenty more concurrent active kgroups.

I only browsed the documentation, apologies for any misinterpretation.

Jim

It look like it. 

Update:

No this is the client side encryption - Andy already discovered my mistake :-D