07-03-2013 11:10 PM
Hi Guys,
We have recently setup a Netbackup 7.5 instalation to backup a small VMware environment.
We are using VM Snapshots to do the backups.
Currently we are writing our backups to local disc on the server, however, we have just connected a tape library.
I've configured a policy to write weekly backups to the library and need some additional security. To achive this I want to turn on Encryptiopn using the check box on the Attributes tab on the Policy but its greyed out.
I've made sure that I've started the Administrator Console as an Administrator. I've checked my Licencing and found the following:
License Key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-X
Host: BackupServer01
Date Added: 18/07/2011 2:14:03 PM
Product: NetBackup Enterprise Server
Instances: 0
Feature: Encryption (Legacy DES 56-bit) (Active)
Valid: Yes
: No Expiration Date
License Key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-X
Host: BackupServer01
Date Added: 18/07/2011 2:14:03 PM
Product: NetBackup Enterprise Server
Instances: 0
Feature: Encryption (Legacy DES 40-bit) (Active)
Valid: Yes
: No Expiration Date
License Key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-X
Host: BackupServer01
Date Added: 18/07/2011 2:14:03 PM
Product: NetBackup Enterprise Server
Instances: 0
Feature: Encryption (Active)
Valid: Yes
: No Expiration Date
So I figure I'm licenced for this feature.
Can any one give me some guidance on how I can set this up?
Mark
Solved! Go to Solution.
07-04-2013 12:32 AM
If you have LTO4 or newer use Netbackup KMS. NBU KMS will utilize the built-in hardware encryption of the tape drives.
About the Key Management Service (KMS)
http://www.symantec.com/docs/HOWTO46814
How to install and configure Key Management Service (KMS) encryption on a NetBackup master server
http://www.symantec.com/docs/TECH67972
07-04-2013 12:26 AM
Not supported for VMware backups.
Extract from NetBackup Security and Encryption Guide http://www.symantec.com/docs/DOC5185 :
Client side encryption security
The following backup policy types support the use of the client encryption option.
07-04-2013 12:32 AM
If you have LTO4 or newer use Netbackup KMS. NBU KMS will utilize the built-in hardware encryption of the tape drives.
About the Key Management Service (KMS)
http://www.symantec.com/docs/HOWTO46814
How to install and configure Key Management Service (KMS) encryption on a NetBackup master server
http://www.symantec.com/docs/TECH67972
07-07-2013 05:15 PM
That would be it.
Thankyou Marianne.
07-09-2013 08:54 AM
I would second Nicolais advice: KMS is straightforward to implement, and uses the hardware horsepower of the drives, not the servers, so if it suits your needs its a great way to implement encryption which can be minimal cost, low maintenance and zero perfomance impact.
Just remember to manage your keys.
jim
07-14-2013 10:41 PM
Thanks Guys.