How to configure NetBackup Client Encryption Option
i am working to enable client encrption in our backup environment and found a link https://www.veritas.com/support/en_US/article.TECH72130 in veritas support site.
there are five steps to enable client encryption base on the document.
How to configure NetBackup Client Encryption Option :
1. Push the encryption binaries to the client using the following command on the master
2. Install the license keys for encryption on the master server.
3. Create an encryption key file on the client by running the following command on the client
4. On Netbackup administration console In the policy under the Attributes tab there is a selection for Encryption that determines if the backup will be encrypted. Check the check box.
5. In the NetBackup Administration Console, Expand NetBackup Management > Host Properties > Clients, double click to launch client properties window. Click on "Encryption" and Configure this client to be enabled for encryption.
but i don't understand the step 2 "install the license keys ..." , What license do i need to enable client encryption?
there is no additional license required to enable client encryption in my understanding.
Please hlep me to have a correct information.
Thanks in advance.
Harry
Q1) Do we need to configure any configuration in Tape device to use KMS encryption? if needed, please let me know article for me.
A1) No special configuration of tape library or tape drives is required. All that needs to be done is to configure NetBackup KMS, which also means the creation of a new tape media pool, and then to also re-configure either one or all of: policies, schedules, SLPs... to use the new "ENCR_MYPOOL" pool name. There are several very good posts in this forum on how to configure KMS.
.
Q2) Is there performance issue in master or client server? is encryption performed by tape device?A2) Not on the master, nor on the media server, nor on the client. There is a performance penalty at the tape drive head, of about 0.5% average to 1% maximum performance penalty impact. Some would consider this performance penalty to be negligible.