NBU 7.6.1 encrypted tape duplicate from disk backup

[kybeer]

Hi

Is it possible to create an encrypted tape duplication of a non-encrypted disk backup (tapes used primarily used for off site storage)? I'm reading this:

http://www.symantec.com/business/support/index?page=content&id=TECH67972

and

http://kbdownload.symantec.com/resources/sites/BUSINESS/content/live/DOCUMENTATION/6000/DOC6486/en_US/NetBackup7.6_SecEncryp_Guide.pdf?__gda__=1427723397_cc17aa60eb9a649d04d65fca3f957aeb

but I don't understand if "tape encryption" means that you do the backup directly to tape and encrypt on the fly (and to not disk first)

[Yasuhisa_Ishika · Accepted solution]

KMS encryption can be used as duplication destination.

[sdo]

I'm quite sure that this doc will help you understand your options:

http://www.symantec.com/business/support/index?page=content&id=TECH203420

[Nicolai]

Sure - no problem.

Source can be anything in Netbackup.

Encryption on tape using KMS is controlled by the volume pool being prefixed with ENCR_

Encryption takes place in the tape drives hardware and is wire speed fast. Work really well and is a such transparent when configured.

[sdo]

This has just been published:

NetBackup v7.6 Blueprints - Security

https://www-secure.symantec.com/connect/articles/nbu-76-blueprint-security-feb-2015

...which also includes sections around encryption.

HTH.