Netbackup 7.5.0.7 Encryption

[AIacono]

Hi to all,

I need to activate Encryption on my Netbackup Infrastructure.

We have 2 sites:

SITE A

Netbackup Master Server 7.5.0.7 + 1 DD860 + TL Quantum i40 + 16 Mediaserver ( 2 Windows 2008 R2, 3 Linux RH6.1 update 3, 11 AIX)

SITE B

2 Mediaserver Windows 2008 R2 + 2 DD670 + TL Quantum i500

All backups run in the site A on DD860. With SLP we duplicate backups in the DD in the site B. After first duplication another one starts writing on TL in the site B.

We need to activate encryption on tapes written by TL on site B, but we must be able to restore this images from TL on site A.

Thanks in advance.

Regards,

Amilcare

[Nicolai · Accepted solution]

Use Netbackup KMS. Netbackup KMS provides a interface to the SCSI T10 hardware based tape drive encryption option available from LTO4 and newer. No impact on backup ore restore performance. 

By using NBU KMS insted of robot based encryption, you ensure that all media servers will be able to read tapes.

How to install and configure Key Management Service (KMS) encryption on a NetBackup master server

http://www.symantec.com/docs/TECH67972

About the Key Management Service (KMS)

http://www.symantec.com/docs/HOWTO46814