cancel
Showing results for 
Search instead for 
Did you mean: 

Automated OKM key destruction

Genericus
Moderator
Moderator
   VIP   

We are upgrading to LTO5 drives, with keys managed by Oracle Key Manager (OKM)

Since each tape will get its own key certificates, destroying those key certificates effectively scratches the tape.

 

I would like to implement a process that when I run my vault and it generates a list of scratch tapes to return from iron mountain, it takes that list of tapes and uses them as input to destroy the keys - effectively prohibiting me from ever importing the tapes. It would be like formatting every tape as it comes back, but with out the drive time.

 

Does anyone either already have such ascript, or see the need for one? Should this be something Oracle and NetBackup team up to provide?

 

NB 7.0.1 on Solaris 10

SL8500 moving to LTO5!

NetBackup 9.1.0.1 on Solaris 11, writing to Data Domain 9800 7.7.4.0
duplicating via SLP to LTO5 & LTO8 in SL8500 via ACSLS
1 REPLY 1

Genericus
Moderator
Moderator
   VIP   

Any new info on integrating Oracle OKM with NetBackup?

Specifically deleting expired keys as tapes return to scratch

 

NetBackup 9.1.0.1 on Solaris 11, writing to Data Domain 9800 7.7.4.0
duplicating via SLP to LTO5 & LTO8 in SL8500 via ACSLS