cancel
Showing results for 
Search instead for 
Did you mean: 

mystery FRAG field from bpimagelist -l

Brian_J__Greenb
Level 2
I recently got a bpimagelist output dump from a Windows NBU6.5 backup environment with an extra field.  All the documentation I have shows that the FRAG line should have 26 fields but there's a 27th field with the *NULL* value.  Anyone ever see this before?  Doing a bpimagelist -L shows me it might be a "Key tag".  I don't see any documentation or reference to it.
1 ACCEPTED SOLUTION

Accepted Solutions

CRZ
Level 6
Employee Accredited Certified

Doesn't look like it's been documented yet,  but the 6.5.2 documentation update states in the "KMS considerations" subsection:

■ NetBackup GUI and CLI changes to report the encryption key tag addition to
the NetBackup image information
The bpimmedia and bpimagelist were modified.


I think you found the modification.  :)

It goes on to say...

When a NetBackup image has been encrypted, the key tag is recorded and
associated with the image. You can see this information through NetBackup
Administration Console reports, or in the output of the bpimmedia and bpimagelist
commands.


See pages 426 and 453:
Veritas NetBackup 6.5.6 Documentation Updates
  http://support.veritas.com/docs/348223

Looks like we need to update THIS TechNote for 6.5.2!

DOCUMENTATION: What are the different fields in "bpimagelist -l" output?
 
http://support.veritas.com/docs/193085

So, the short answer (too late) is that this was part of the KMS (Key Management Service) introduced in NetBackup 6.5.2.  If you're not using KMS, expect to see a lot of NULLs.  :)

View solution in original post

3 REPLIES 3

Brian_J__Greenb
Level 2
Additional info:

I did the bpimagelist -L and looks like its something called a "Key tag", whatever that it.  Can't find it in the manuals anywhere. 

CRZ
Level 6
Employee Accredited Certified

Doesn't look like it's been documented yet,  but the 6.5.2 documentation update states in the "KMS considerations" subsection:

■ NetBackup GUI and CLI changes to report the encryption key tag addition to
the NetBackup image information
The bpimmedia and bpimagelist were modified.


I think you found the modification.  :)

It goes on to say...

When a NetBackup image has been encrypted, the key tag is recorded and
associated with the image. You can see this information through NetBackup
Administration Console reports, or in the output of the bpimmedia and bpimagelist
commands.


See pages 426 and 453:
Veritas NetBackup 6.5.6 Documentation Updates
  http://support.veritas.com/docs/348223

Looks like we need to update THIS TechNote for 6.5.2!

DOCUMENTATION: What are the different fields in "bpimagelist -l" output?
 
http://support.veritas.com/docs/193085

So, the short answer (too late) is that this was part of the KMS (Key Management Service) introduced in NetBackup 6.5.2.  If you're not using KMS, expect to see a lot of NULLs.  :)

J_H_Is_gone
Level 6
I know what that is.
 
If you are using encryption with netbakup (three types, client side, MSEO – Media Server Encryption Option, or KMS ( application managed hardware encryption – drives do the encryption but NB manages the Keys)
So if your image is encrypted – the Key Tag field will have a very big item in it as the tag.  You can compare that tag to you key database to see if you can UN-encrypt that image.