07-09-2019 01:37 AM
We have 2 branch offices who are using Symantec backup exec 2014 on Windows 2008 R2 along with
What is the recommended method to apply encryption on the backup jobs? software or hardware?
Will adding software OR hardware encryption increases the backup time?
If Backup Exec windows is reinstalled, OR if we want to restore data from encrypted tapes on another backup exec server, then how we will going to restore data from these encrypted tapes ?
Solved! Go to Solution.
07-09-2019 06:44 PM
Will adding software OR hardware encryption increases the backup time?
Definitely, there is no such thing as a free lunch.
Do use hardware encryption where possible. This takes less time than software encryption and both will take more time than non-encrypted jobs.
07-09-2019 03:10 AM
Backup Exec supports both hardware and software encryption.
Extremely important that you read all available documentation before you make a choice - not only on how to configure encryption, but also how to ensure that encryption keys are available for restores.
It is impossible to restore if encrytion key or passphrase is unavailable.
Encrytion is covered in Chapter 15 of BE Admin Guide: https://www.veritas.com/content/support/en_US/doc/59226269-99535599-0/v53895058-99535599
This topic includes the following information:
Restricted keys and common keys
Also read through 'About restoring encrypted data' in chapter 5.
My 2c - before you go ahead and configure encryption, please upgrade to a supported BE version.
BE2014 ran out of support on November 7, 2018. https://www.veritas.com/content/support/en_US/article.100038900.html
You may also want to migrate to newer OS as W2008 is nearing end of support from Microsoft.
If you choose hardware encrytion, ensure that maintenance on all of your hardware devices is up to date from the relevant vendor and remains up to date for as long as you need to restore from encrypted tapes.
07-09-2019 06:44 PM
Will adding software OR hardware encryption increases the backup time?
Definitely, there is no such thing as a free lunch.
Do use hardware encryption where possible. This takes less time than software encryption and both will take more time than non-encrypted jobs.
07-10-2019 04:53 AM - edited 07-10-2019 04:55 AM
From the screenshot below I can see hardware encryption NOT supported in IBM LTO 7 Tape Drive.
This means that I should use Software Compression + Software Encryption? As I read somewhere that you should use one type, either hardware compression + hardware encryption OR software compresion + software encryption ??? is it true?
07-10-2019 07:04 PM
Yes. That is true.
07-10-2019 09:07 PM
Compression Type: Software
Encryption Type: Software
Software compression ratio: 1.6:1
Software compression ratio: 1.1:1
Software compression ratio: 1.4:1
Is there any way I can see or ensure that encryption is applied? or just showing in Log is enough for audit ?