09-16-2014 06:50 AM
Just wondering whether anyone has used Backup Exec 2014 with IBM TS3310. I have this in production at present and will be looking to setup encryption (hardware). I am assuming that you need to have the relevant licenses on the autoloder to enable the encryption and allow BEX to complete this?
Anything else thats required? i have tested software encryption however want to configure hardware.
I assume you need the Transparent Encryption lics for the autoloader but not sure what to do from there to be honest. Doesnt seem to be any documentation to say this is what you need to complete this.
We use LTO6 media also.
Would be good if anyone has come across setting this up and how it works really.
Thanks in advance.
Solved! Go to Solution.
09-16-2014 08:18 AM
I am assuming that you need to have the relevant licenses on the autoloder to enable the encryption and allow BEX to complete this?
Possibly.
There are two ways to do hardware encryption.
Either way, you get the same T10 hardware based encryption on the tape. The fundamental difference is who is managing your keys. With AME, your keys are in BE. With LME, your keys are in your IBM software.
Most people use AME, I think.
09-16-2014 08:03 AM
09-16-2014 08:18 AM
I am assuming that you need to have the relevant licenses on the autoloder to enable the encryption and allow BEX to complete this?
Possibly.
There are two ways to do hardware encryption.
Either way, you get the same T10 hardware based encryption on the tape. The fundamental difference is who is managing your keys. With AME, your keys are in BE. With LME, your keys are in your IBM software.
Most people use AME, I think.
09-16-2014 09:05 AM
Great thanks for your input. I have contacted IBM also regarding this.
09-16-2014 11:09 AM
just one remark. Take also a DR situation in count. Because of the hardware encryption, it could be that if you want to restore using other hardware (because of a fire disaster for example), that hardware must be capable to decrypt the encrypted tapes before sending the data to backupexec if you use the hardware encryption of the library. otherwise your restore will not be possible.
If you use the hardware encryption of backupexec, and you will restore it from another mediaserver or tape library, just will just be prompted to enter the passphrase of the encryption and backupexec will restore the requested data