NetBackup - Tape level Encryption

[Vamsi1]

Team,

In my current Netbackup environment. Encryption is enabled at the tape library level Encryption.

Encryption Key Server type is “Q-EKM”. This was configured long back when I was not with this environment and present the people who were configured this were not in environment. 

So I dont have any clue how to find that out the key. Can you please help me on this.

[Marianne · Accepted solution]

This is the beauty and problem with encryption - if neither the person nor the documentation can be found, there is absolutely no way that anyone can help you.

[mph999]

Marianne is spot on, there is no way to recover the keys if they are not known, after all, that is the idea.

Perhaps you would be able to contact the people who set it up ?

[Nicolai · Accepted solution]

You won't be able to retrive the key. The key should have been written down and saved in safe place.

Q-EKM is a Quantum product, please see 

http://www.veritas.com/docs/000011272

I recommend you switch to Netbackup KMS Tape drive envryption with you have LTO4 and newer. 

It is really easy to do, and transperant to the rest of NBU operation

http://www.veritas.com/docs/000037336