cancel
Showing results for 
Search instead for 
Did you mean: 

Regarding MSDP Encryption option

1501SV
Level 4
Partner

Hi All,

We are looking forward to have MSDP configured in our environment (Media Server working as Storage Server with 64TB of dedup pool) and use compression and encryption features of MSDP

Also for long term retention of the data, we going to move a copy of data to tapes. We are looking forward to have SLP ( with backup operation and child duplication operation to send to tapes). 

So when my data is pushed to tapes is it encrypted? If not, how can I encrypt my data to the tapes ? I cant use encryption on the policy level since that will hamper my deduplication ratios

Looking forward for your responses. thanks in advance.

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

Nicolai
Moderator
Moderator
Partner    VIP   

You got it all right laugh

The Encryption option in the policy enabled software based encryption and i SLOW plus it absolutely kill compression at the tape drive level. Netbackup KMS is superior to software compression.

LTO4 and newer support hardware based encryption. So both LTO5 & LTO6 will work with NBU KMS. 

View solution in original post

3 REPLIES 3

Nicolai
Moderator
Moderator
Partner    VIP   

To encrypt data on tape you need to configure Netbackup KMS. KMS is part of Netbackup and does not require any additional license.MSDP pool encryption only encrypt data in the pool. Not the data read from the pool.

http://www.symantec.com/docs/TECH67972

http://www.symantec.com/docs/TECH127166

http://www.symantec.com/docs/HOWTO46814

1501SV
Level 4
Partner

thanks for your response.

Nice Quote Nicolai... So let me not assume and get somethings clarified :)

After a quick search my understanding is, KMS is used with the tape hardware that has a built-in hardware encryption capability and i dont need to enable encryption in policies to use this. Also most of the documents are talking about LTO4 tape drives as part of the documents and hope this hold good for my LTO5 tape drives and also with LTO6 in case we upgrade in future

 

 

 

 

Nicolai
Moderator
Moderator
Partner    VIP   

You got it all right laugh

The Encryption option in the policy enabled software based encryption and i SLOW plus it absolutely kill compression at the tape drive level. Netbackup KMS is superior to software compression.

LTO4 and newer support hardware based encryption. So both LTO5 & LTO6 will work with NBU KMS.