cancel
Showing results for 
Search instead for 
Did you mean: 

Encrypting NBU 7.5 Backups

Nerdling
Level 4

Hi Guys,

We have recently setup a Netbackup 7.5 instalation to backup a small VMware environment.

We are using VM Snapshots to do the backups.

Currently we are writing our backups to local disc on the server, however, we have just connected a tape library.

I've configured a policy to write weekly backups to the library and need some additional security.  To achive this I want to turn on Encryptiopn using the check box on the Attributes tab on the Policy but its greyed out.

I've made sure that I've started the Administrator Console as an Administrator.  I've checked my Licencing and found the following:

      License Key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-X
             Host: BackupServer01
       Date Added: 18/07/2011 2:14:03 PM
          Product: NetBackup Enterprise Server
        Instances: 0
          Feature: Encryption (Legacy DES 56-bit) (Active)
            Valid: Yes
                 : No Expiration Date

      License Key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-X
             Host: BackupServer01
       Date Added: 18/07/2011 2:14:03 PM
          Product: NetBackup Enterprise Server
        Instances: 0
          Feature: Encryption (Legacy DES 40-bit) (Active)
            Valid: Yes
                 : No Expiration Date

      License Key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-X
             Host: BackupServer01
       Date Added: 18/07/2011 2:14:03 PM
          Product: NetBackup Enterprise Server
        Instances: 0
          Feature: Encryption (Active)
            Valid: Yes
                 : No Expiration Date

So I figure I'm licenced for this feature.

Can any one give me some guidance on how I can set this up?

Mark

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

Nicolai
Moderator
Moderator
Partner    VIP   

If you have LTO4 or newer use Netbackup KMS. NBU KMS will utilize the built-in hardware encryption of the tape drives.

About the Key Management Service (KMS)

http://www.symantec.com/docs/HOWTO46814

How to install and configure Key Management Service (KMS) encryption on a NetBackup master server

http://www.symantec.com/docs/TECH67972

 

View solution in original post

5 REPLIES 5

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

Not supported for VMware backups.

Extract from NetBackup Security and Encryption Guide http://www.symantec.com/docs/DOC5185  :

Client side encryption security

The following backup policy types support the use of the client encryption option.

■ AFS
■ DB2
■ DataStore
■ DataTools-SQL-BackTrack
■ Informix-On-BAR
■ LOTUS_NOTES
■ MS-Exchange
■ MS-SharePoint
■ MS-SQL-Server
■ MS-Windows
■ Oracle
■ PureDisk-Export
■ SAP
■ Split-Mirror
■ Standard
■ Sybase
 
 

Nicolai
Moderator
Moderator
Partner    VIP   

If you have LTO4 or newer use Netbackup KMS. NBU KMS will utilize the built-in hardware encryption of the tape drives.

About the Key Management Service (KMS)

http://www.symantec.com/docs/HOWTO46814

How to install and configure Key Management Service (KMS) encryption on a NetBackup master server

http://www.symantec.com/docs/TECH67972

 

Nerdling
Level 4

That would be it.

Thankyou Marianne.

jim_dalton
Level 6

I would second Nicolais advice: KMS is straightforward to implement, and uses the hardware horsepower of the drives, not the servers, so if it suits your needs its a great way to implement encryption which can be minimal cost, low maintenance and zero perfomance impact.

Just remember to manage your keys.

jim

Nerdling
Level 4

Thanks Guys.