Duplicating a hardware encrypted tape to an unencrypted tape
I have an LTO5 tape that has been backed up with hardware encryption. It has a variety of different types of backup sessions (flat files, MS SQL servers, MS Exchange) and I've been given the passphrase, so I've re-created the key and can pull off the flat files without any issue. The client has asked me to create an unencrypted version of the tape (they wish to use various 3rd party tools to extract the SQL and MS Exchange backups), and I've tried doing this with the duplication function, but I can't get it to work. I have a second tape drive in which I've mounted a freshly erased and labelled LTO5. When I try duplicating the original sessions from the encrypted tape onto it, I'm given the option of types of encryption (I chose none) but BE is switching on hardware encryption on the target drive anyway. This is regardless of whether I use DirectCopy, or choose to actually have encryption (which then gives me the option of choosing which key to use). Any ideas? Is there some option or other hidden deep in the bowels of BE that's telling it to encrypt everything it writes to tape by default?3.7KViews0likes11CommentsHow does backup Exec generate the AES-256 key used by tape drives for encryption?
Does anyone know the key generator used by BE to create the AES-256 keys used by LTO drives for hardware encryption? You can read an encrypted tape across different versions of BE if you supply the same passphrase when you create the key, so clearly BE is using the same algorithm and/or salt. Does anyone know what it is?682Views0likes0Comments[closed] Block level backup of encrypted VM
Hello, We have encrypted our VM thru the VM encryption module provided by VMWare since 6.5 version. As it is not supported by BE 16, we are doing now file level backup. Is there some news regarding an update of BE 16 that will allow block level backup with encrypted VM ?1.3KViews0likes1CommentEncrypted Backup's not encrypting all files
Apparently if you use GRT backupexec will not encrypt the data. So I turn all that off but I still have .DR files showing up. Should I be concerned about their contents? When I open them with notepad there is ALOT of clear text information. Are these files critical to keep? If I delete them do they prevent the "full bare-metal restore/convert to virtual machine"? Should I stop using Backup Exec's encryption and encrypt my eSata drives with Truecrypt? I want the GRT features and these new DR features, but not at the risk of my off site media containing unencrypted files. Suggestions appreciated.854Views0likes3CommentsEncryption Key Issue
Hi, Before implmenting hardware encryption, we want to delete our key to test a DR scenario where we have lost our server/keys. However, when we come to delete the key it says it is associated with a selection list that know longer excists. Is there a way of removing this? ThanksSolved775Views0likes3CommentsBackup Exec 12.3 - PCI DSS compliant encryption?
Just looking at our backup solution and we are using Backup Exec 12.3. This does indeed encrypt the data, but when reading PCI DSS V2, there is some hints that it might not be what the requirement is looking for even though the encryption level easily surpasses the required complexity. Can anyone shed some definitive light? Thanks692Views0likes3CommentsBackup Exec 2010 R2 - Tape ejects on catalog / restore / backup
Hi, Were currently have Backup Exec 2010 R2 running at two sites. A production site and a DR site. Tapes are backed up at the production site and encrypted on a LTO4 auto loader (hardware 256Bit AES). When trying to catalog or restore data at the DR site using a stand alone LTO4 drive Backup Exec is just ejecting the media. I suspect this is due to encryption. I have setup the encryption key on the DR install of Backup Exec but suspect it is not working. Does anyone have any ideas what could be going on? Cheers.Solved2.1KViews0likes15Commentsdlo user data always encrypted
I'm trying to set up DLO 2010R2 to NOT encrypt user's data when it is backed up to the network. I have disabled encryption under tools->options and also in the selection list under the profile. I am able to restore encrypted files using the recovery password but i would like to disable encryption completely. Thanks in advance, Udi967Views0likes2Comments