cancel
Showing results for 
Search instead for 
Did you mean: 

Flashbackups and Encryption

j083418
Level 5

There is a business need to encrypt the backups that are currently being taken at my place of work. A lot of the backups are Flashbackups and I was wondering if anyone had tried this before?

 

Currently running Netbackup 6.5.4 and think I read somewhere that encrpyting Flashbackups was not possible.

 

Has anyone implemented encryption with Flashbackup?

1 ACCEPTED SOLUTION

Accepted Solutions

RiaanBadenhorst
Level 6
Partner    VIP    Accredited Certified

Dont think that's possible, FlashBackup is a block level backup of the File System. Can't encrypt a block. Also dont think it will be worth much without the catalog information, so its basically encrypted anyways :)

View solution in original post

6 REPLIES 6

RiaanBadenhorst
Level 6
Partner    VIP    Accredited Certified

Dont think that's possible, FlashBackup is a block level backup of the File System. Can't encrypt a block. Also dont think it will be worth much without the catalog information, so its basically encrypted anyways :)

Deeps
Level 6

I think we can use hardware encryption in this situation ?

Deeps
Level 6

1) Install and configure NetBackup Media Server Encryption Option (MSEO)

2) Configure NetBackup Key Management Service (KMS) ONLY if you are running LTO-4 or IBM Total Storage drives .

3) Use a 3rd party hardware device to encrypt the data.
 

Ed_Wilts
Level 6

We use Decru (now NetApp) devices to encrypt all of our backups, whether they're FlashBackup or not.  These appliances have now reached (or about to reach) their end of sale date.

Your other option is to investigate LTO-4 tape drives and encrypt at the drive level.  That's what we'll likely do next.

Karthikeyan_Sun
Level 6

 

This doc is for NB 5.x, i dont find info for NB 6.x but i hope its similar only

The following limitations exist with the FlashBackup option for Windows:
 

  • The NetBackup 5.0 Advanced Client license key is required on the master server
  • The master server must be Windows 2000 or 2003. UNIX master server support is planned to be added later
  • Clients must be Windows 2000 or 2003
  • Clients must have NetBackup 5.0 installed
  • Policies must be of the type FlashBackup-Windows
  • Files list of the policy must be in the format: \\.\<drive_letter>:
Example: \\.\D:  
  • The ALL_LOCAL_DRIVES directive is not supported  
  • User Backup and User Archive policy schedules are not supported. Only full, differential incremental, and cumulative incremental schedule types are supported
  • The following policy attributes are not supported:
- "backup network drives"
- "cross mount points"
- "collect True Image Restore (TIR) information"
- "compression"
- "encryption"

- "collect disaster information"

http://www.symantec.com/business/support/index?page=content&id=TECH30893&actp=search&viewlocale=en_US&searchid=1293165442890

j083418
Level 5

Thanks for all the responses. It's as I thought, Flashbackups don't seem to be supported for Netbackup Encryption. Will have to try encrypting them at the drive level as Ed has suggested.