Forum Discussion

tarladak's avatar
tarladak
Level 4
10 years ago

KMS POC in Netbackup

Hi All,

 

I have implemented KMS in netbackup 7.5.0.6. Backup and restore is working fine. Could you please help me out with below issues.

 

1. I am not able to see Key tag in GUI reports

2. I have deleted DATA, HMKF and KPKF files from kms folder and ran the same backup it is working also restore is also working.

3. How can i prove Encryption is working

 

Regards,

Kiran K Tarlada

7.5
Backing Up
Backup and Recovery
NetBackup
Windows Server (2003-2008)
  • Nicolai's avatar
    Nicolai
    10 years ago

    If you try to restore encrypted backups, you will get a status code 85 if DATA, HMKF and KPKF are deleted.

    I don't think "just" deleting DATA, HMKF and KPKF while KMSD is in operation show/prove anything. Try restarting kmsd and havoc will start.

  • sdo's avatar
    sdo
    Moderator
    10 years ago

    How to verify KMS encrypted the backup:

    https://support.symantec.com/en_US/article.TECH127166.html

  • sdo's avatar
    sdo
    Moderator
    10 years ago

    See field 18 of the IMAGE record, as described:

    DOCUMENTATION: What are the different fields in "bpimagelist -l" output?

    https://support.symantec.com/en_US/article.TECH5584.html

    .

    Also see this post:

    https://www-secure.symantec.com/connect/forums/verify-kms-encryption-netbackup-75

  • tarladak's avatar
    tarladak
    Level 4
    10 years ago

    Hi Sdo,

    Thank you for your reply. I am able to validate using above KB's.

     I have deleted DATA, HMKF and KPKF files and ran the backup. If I use bpimagelist command same Flag showing Tape Encryption.

    Output of bpimagelist is same with DATA, HMKF and KPKF  these files and without these DATA, HMKF and KPKF files.

     

    Regards,

    Kiran.

  • sdo's avatar
    sdo
    Moderator
    10 years ago

    Sorry - if you think you have a problem... please re explain... and perhaps show evidence (i.e. actual output) depicting the problem that you think you have?  Thx.

  • Nicolai's avatar
    Nicolai
    Moderator
    10 years ago

    If you try to restore encrypted backups, you will get a status code 85 if DATA, HMKF and KPKF are deleted.

    I don't think "just" deleting DATA, HMKF and KPKF while KMSD is in operation show/prove anything. Try restarting kmsd and havoc will start.

  • tarladak's avatar
    tarladak
    Level 4
    10 years ago

    Hi Sdo and Nicolai,

     

    Thank you for your suggestions. I am able to perform the test after restarting the kmsd.