Backup Exec 2015 encryption

[richardsantos]

Hi ALL,

I would like to know if the BE 2015 Encryption Support the Encryption to backup dedupe storage?

Thanks

[pkh]

You should not enable encryption in your job because encrypted data dedup badly. Instead you should turn on encryption in the dedup engine. See this document http://www.symantec.com/docs/HOWTO99126

[VJware]

These KBs may help -

Using deduplication with encryption - https://support.symantec.com/en_US/article.HOWTO99121.html

Enabling encryption in a deduplication folder - https://support.symantec.com/en_US/article.TECH124682.html

[richardsantos]

How can I verify if the encryption is already working?

So I need to configure the encryption via storage level and not on the backup job?

[VJware]

That's right via the storage level and not via the backup job.

I believe, the logs should help you verify if encyrption is being used or not.

[richardsantos]

Do you have exact procedure on how to do the encryption in dedupe storage.

[richardsantos]

Where can I find the logs? My apology for too much asking I'm new with the ecnryption configuration of BE 2015.

[pkh]

You just need to change the property of the dedup folder. See this document http://www.symantec.com/docs/HOWTO99126

[VJware]

afaik, you can enable encryption for dedupe in multiple ways -

1) Edit the properties of the DeDupe Folder and enable encryption. This will enable encryption over the wire and at the dedupe folder also.

2) Edit the pd.conf at the BE media server. This will enable encryption at the dedupe folder only.

3) Edit the pd.conf at the remote servers. This will enable encryption over the wire.

Lemme check if we can verify if dedupe encryption is being used or not in the sts / sgmon logs, though i am quite sure this info doesn't come up in the regular job logs.

[richardsantos]

I created the encryption keys. I was thinking that if im going to run the backup it will ask for the encryption key or restore it will ask for encryption key. Does it correct?

[pkh]

No. Encryption keys are used by your jobs. They are not needed in this case. The job just send the unencrypted data and they are encrypted by the dedup engine

[richardsantos]

How would I know if the encryption is working?

[Networker_rules]

Im not using DeDup, I have encryption enabled at the jobs.  I have restarted services to have that setting enabled, how do I verify that it is encrypting data?  What log file would tell me this?

[VJware]

@Networker_rules - The job log will mention if encryption is being used or not. Alternatively, SGmon log will also provide this information.

[Networker_rules]

Thanks VJ, im running a couple jobs right now and will check the log once they are done.  Can you tell me if the key and pass phase I created applies to all the jobs on my media server or can you associate them per job?