Welcome! » Log In » Create A New Profile

[EMC-DataProtection-L] Identify AES Encrypted saveset ?

Posted by Anonymous 
[EMC-DataProtection-L] Identify AES Encrypted saveset ?
December 08, 2016 07:23AM
Hello,

Did anyone once play with directive-based AES Saveset encryption ?

Any way to identify/verify/query about encrypted saveset(s) ?

I have been asked to check for possible on-the-fly saveset
encryption when saving folder or server-wide (Current 8.2.0.5 on Win2008R2/x64).

Any good/bad feedback ?

Thanks !

Th

Kind regards - Bien cordialement - Vriendelijke groeten,

Thierry FAIDHERBE
Backup/Storage & System Management

LE FOREM
Département des Systèmes d'Information, Direction Infrastructure

Boulevard Tirou, 104 Tel: +32 (0)71/206730
B-6000 CHARLEROI Mobile: +32 (477)/995319
BELGIUM Mail : Thierry.faidherbe<at>forem.be

"The urgent is done, the impossible is being processed ... For miracles Allow time".
"Nowadays, people know the price of everything and the value of nothing", Oscar Wilde
"The future belongs to those who believe in the beauty of their dreams", Eleanor Roosevelt
"Courage is not having the strength to go on;
it is going on when you don't have the strength.", Theodore Roosevelt
[EMC-DataProtection-L] Identify AES Encrypted saveset ?
December 08, 2016 10:53AM
In regard to: [EMC-DataProtection-L] Identify AES Encrypted saveset ?,...:

[quote]Did anyone once play with directive-based AES Saveset encryption ?
[/quote]
We have it enabled for a particular folder on one Windows client,
to ensure that the data is encrypted as it is sent over the network.
It's been so long since we set this up that I don't recall whether
we had any trouble at the start.

[quote]Any way to identify/verify/query about encrypted saveset(s) ?
[/quote]
In our case, it's only part of a saveset that gets AES applied, so
there isn't really any way (that I'm aware of) with mminfo or other
tools to identify that AES has been applied to part of the saveset.

IIRC, we actually had to use tcpdump or wireshark to be somewhat convinced
that encryption was being applied to part of the savestream. I think
you could also manually run uasm (even on a Windows client) in verbose
mode to verify that it's applying the aes directive to the parts of the
saveset you care about.

Tim
--
Tim Mooney Tim.Mooney < at > ndsu.edu
Enterprise Computing & Infrastructure 701-231-1076 (Voice)
Room 242-J6, Quentin Burdick Building 701-231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164

--
This list is hosted as a public service at Temple University by Stan Horwitz
If you wish to sign off this list or adjust your subscription settings, please do so via http://listserv.temple.edu/archives/emc-dataprotection-l.html
If you have any questions regarding management of this list, please send email to owner-emc-dataprotection-l < at > listserv.temple.edu
Sorry, only registered users may post in this forum.

Click here to login