Need suggestion on encrypting tapes
Hi All,
Our environment is Netbackup 7.1 on Solaris 10 , connected to SL library [ TD 4 drives ] through NDMP host
we have got a scenario of encrypting 500 non-encrypted tapes before shipping to offsite.
On some research found some options...
1) Configure KMS and do hardware based encryption
we have configured KMS in master server , created one ENCR_volumepool and tried image duplication from non-encrypted tape to ENCR_Volumepool through catalog and it's working fine .. But the drawback is , it's only working to LTO 4 tapes and it's failing on LTO 3 tapes... now we have to purchase 500 LTO 4 tapes , to go with this option
2) Heard about MSEO [ Media server Encryption ] , but not sure whether it helps our scenario of encrypting tapes through duplication.
Also if you have any ideas / suggestions on encrypting non-encrypted tapes.. kindly suggest. Thanks.
Regards,
Satish Kumar
Satish,
Hardware Encryption for LTO3 tape drives was not available at the time the drives were released so generally LTO3 tapes are not supported for the same hardware encryption.
MSEO is software based compression and encryption. You would have to make sure to size your media server to add the encryption load but it would support encryption LTO3 tapes and drives. MSEO is installed seperately and has it's own KMS management.
http://www.symantec.com/docs/HOWTO70072
Regards,
Skip