06-17-2014 02:04 AM
Hi All,
We are looking forward to have MSDP configured in our environment (Media Server working as Storage Server with 64TB of dedup pool) and use compression and encryption features of MSDP
Also for long term retention of the data, we going to move a copy of data to tapes. We are looking forward to have SLP ( with backup operation and child duplication operation to send to tapes).
So when my data is pushed to tapes is it encrypted? If not, how can I encrypt my data to the tapes ? I cant use encryption on the policy level since that will hamper my deduplication ratios
Looking forward for your responses. thanks in advance.
Solved! Go to Solution.
06-17-2014 04:49 AM
You got it all right
The Encryption option in the policy enabled software based encryption and i SLOW plus it absolutely kill compression at the tape drive level. Netbackup KMS is superior to software compression.
LTO4 and newer support hardware based encryption. So both LTO5 & LTO6 will work with NBU KMS.
06-17-2014 03:11 AM
To encrypt data on tape you need to configure Netbackup KMS. KMS is part of Netbackup and does not require any additional license.MSDP pool encryption only encrypt data in the pool. Not the data read from the pool.
http://www.symantec.com/docs/TECH67972
http://www.symantec.com/docs/TECH127166
http://www.symantec.com/docs/HOWTO46814
06-17-2014 04:40 AM
thanks for your response.
Nice Quote Nicolai... So let me not assume and get somethings clarified :)
After a quick search my understanding is, KMS is used with the tape hardware that has a built-in hardware encryption capability and i dont need to enable encryption in policies to use this. Also most of the documents are talking about LTO4 tape drives as part of the documents and hope this hold good for my LTO5 tape drives and also with LTO6 in case we upgrade in future
06-17-2014 04:49 AM
You got it all right
The Encryption option in the policy enabled software based encryption and i SLOW plus it absolutely kill compression at the tape drive level. Netbackup KMS is superior to software compression.
LTO4 and newer support hardware based encryption. So both LTO5 & LTO6 will work with NBU KMS.