Duplicating a hardware encrypted tape to an unencrypted tape
I have an LTO5 tape that has been backed up with hardware encryption. It has a variety of different types of backup sessions (flat files, MS SQL servers, MS Exchange) and I've been given the passphrase, so I've re-created the key and can pull off the flat files without any issue. The client has asked me to create an unencrypted version of the tape (they wish to use various 3rd party tools to extract the SQL and MS Exchange backups), and I've tried doing this with the duplication function, but I can't get it to work. I have a second tape drive in which I've mounted a freshly erased and labelled LTO5. When I try duplicating the original sessions from the encrypted tape onto it, I'm given the option of types of encryption (I chose none) but BE is switching on hardware encryption on the target drive anyway. This is regardless of whether I use DirectCopy, or choose to actually have encryption (which then gives me the option of choosing which key to use). Any ideas? Is there some option or other hidden deep in the bowels of BE that's telling it to encrypt everything it writes to tape by default?
[closed] Block level backup of encrypted VM
Hello, We have encrypted our VM thru the VM encryption module provided by VMWare since 6.5 version. As it is not supported by BE 16, we are doing now file level backup. Is there some news regarding an update of BE 16 that will allow block level backup with encrypted VM ?dlo user data always encrypted
I'm trying to set up DLO 2010R2 to NOT encrypt user's data when it is backed up to the network. I have disabled encryption under tools->options and also in the selection list under the profile. I am able to restore encrypted files using the recovery password but i would like to disable encryption completely. Thanks in advance, Udi
Encrypted Backup's not encrypting all files
Apparently if you use GRT backupexec will not encrypt the data. So I turn all that off but I still have .DR files showing up. Should I be concerned about their contents? When I open them with notepad there is ALOT of clear text information. Are these files critical to keep? If I delete them do they prevent the "full bare-metal restore/convert to virtual machine"? Should I stop using Backup Exec's encryption and encrypt my eSata drives with Truecrypt? I want the GRT features and these new DR features, but not at the risk of my off site media containing unencrypted files. Suggestions appreciated.
Backup Exec 12.3 - PCI DSS compliant encryption?
Just looking at our backup solution and we are using Backup Exec 12.3. This does indeed encrypt the data, but when reading PCI DSS V2, there is some hints that it might not be what the requirement is looking for even though the encryption level easily surpasses the required complexity. Can anyone shed some definitive light? ThanksHow does backup Exec generate the AES-256 key used by tape drives for encryption?
Does anyone know the key generator used by BE to create the AES-256 keys used by LTO drives for hardware encryption? You can read an encrypted tape across different versions of BE if you supply the same passphrase when you create the key, so clearly BE is using the same algorithm and/or salt. Does anyone know what it is?