cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Veritas.com
Support

NDMP direct attach data encryption

Dollypee
Moderator
Moderator
   VIP    Certified

‎02-20-2013 11:58 AM

1. With direct attach of NDMP to tape library or disk, is it possible to encrypt the data?

1a. If it is possible, what is the minimum version of NDMP & Netbackup supported?

1b. If encryption is possible, who controls the encryption keys?

1c. How can this be set up?

0 Kudos
1 REPLY 1

Yasuhisa_Ishika
Level 6
Partner Accredited Certified

‎02-20-2013 02:01 PM

Please have alook on the links below.

https://www-secure.symantec.com/connect/forums/native-lto4-encryption-and-ndmp#comment-5784721

http://www.daymarksi.com/storage-navigator/bid/45926/Tape-Encryption-and-Key-Management-Utilities

I could not find any documents from Symantec about support of KMS and direct NDMP. But I think it may work as far as NDMP host does not deny to passthru SCSI command for encryption likeSECURITY PROTOCOL IN and SECURITY PROTOCOL OUT. NDMP version is not matter.

So possible options for direct NDMP are:

  • Hardware encryption at tape drives with NetBackup KMS. NetBackup KMS was released in 6.5.2.
  • Hardware encryption at tape drives with vendor's Key Management System.
  • Encryption appliance like Decru placed in middle of data path in SAN

For steps to configure NetBackup KMS, please check "Security And Encryption Guide".

0 Kudos