ENCRYPTION SLP DUPLICATION

[Hernan_Peralta]

hello I need make encryption to tapes slp

my slp duplicated the tapes of my library, this tapes of the duplication are going to external custody

example:

I have two tapes in my library, my slp duplicated this tapes and this go to custody

I need configurate the slp for encrypt alone this tapes

thanks.

[Marianne]

Read up in NetBackup Security and Encryption Guide  about KMS Encryption.

Part of this configuration is to create volume pool(s) with ENC_ prefix. 

Simply select the tape Storage Unix and ENC_xxxx pool as duplication destination in SLP config. 

[Nicolai]

And for the lazy:

How to install and configure Key Management Service (KMS) encryption on a NetBackup master server

http://www.veritas.com/docs/000037336

SLP does not encrypt data, it must be the device that store data that encrypt. This is called data at rest encryption.

LTO4 and newer has hardware to encrypt data in real time without performance impact

[Hernan_Peralta]

hello one question if nbu damage server and the tapes use the pool ENC_XXX, I reinstall nbu server in a new server how restore this tapes?

when creates pool ENC_XXX this configuration to stock key configuration, if this correct how I do backup this configuration for restore in new nbu server.

thanks.

[Marianne]

Please see this discussion:
https://vox.veritas.com/t5/NetBackup-Appliance/How-to-Backup-Up-KMS-files/td-p/726222