Forum Discussion

soolean's avatar
soolean
Level 4
7 months ago

Key Management Service (KMS) encryption

Good day 

On the steps

I create ENCR_TEST, will ENCR_volumepoolname = ENCR_TEST in step 9?

8. Create the key group. All key group names must have the prefix ENCR_.

Windows: ..\netbackup\bin\admincmd\nbkmsutil -createkg -kgname ENCR_keygroup_name
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -createkg -kgname ENCR_keygroup_name

9. Create a key record by using the -createkey option.
Windows: ..\netbackup\bin\admincmd\nbkmsutil -createkey -kgname ENCR_volumepoolname -keyname keyname -activate -desc "description"
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -createkey -kgname ENCR_volumepoolname -keyname keyname -activate -desc "description"

For example, if the key group name is "ENCR_backup", the volume pool name in NetBackup must also be "ENCR_backup".

 

https://www.veritas.com/support/en_US/article.100020249

 

 

 

 

12.x and Earlier
Windows Server 2016

2 Replies

Sort By
  • soolean's avatar
    soolean
    Level 4
    7 months ago

    Unfortunately it didn't happen. Either this explanation is insufficient or I am missing very simple things.

    Error bpbrm (pid=14164) from client soolean2: EXIT STATUS 11: system call failed
    Error bpbrm (pid=14164) client soolean2 aborted
    Info bpfilter (pid=0) done. status: 49: client did not start

    Will a volumu pool be created here? Because he did not create it himself. Will it use the volume_pools I created before?