Encrypt Oracle RMAN Backup with NetBackup

[technimdaxviii]

Hi,

Good day. We're using an old version of Netbackup (7.6) for our Oracle DB, and looking for an option to encrypt the backup. In the Oracle backup policy, I've found an option as shown below. Will ticking the option automatically encrypt the backup? Or is there some configuration that needs to change?

Thank you

[Nicolai · Accepted solution]

hi @technimdaxviii 

The option in the policy to encrypt data is a path you don't want to follow - it's old, not efficient and will slow down backup considerable. 

You should instead use Netbackup Key Management Servers (aka KMS). It's a option that allow Netbackup to use the encryption module in tape drives like LTO. This encryption has zero performance impact on backup and restore operation.

See : https://www.veritas.com/support/en_US/article.100020249

However, PLAN YOUR KMS DEPLOYMENT and how you want to store and secure your encryption passphrase. If you lose them your backup will forever be encrypted.

More reading in the Security and Encryption guide :

https://www.veritas.com/support/en_US/doc/21733320-136194743-0/index

[technimdaxviii]

Hi @Nicolai. Thank you for the information. May I know if the KMS needs to have a separate license?

[Nicolai]

Hi @technimdaxviii 

No additional licenses required. it comes with the base license.

[technimdaxviii]

Thank you @Nicolai