We used Hardware Encryption with no access option for Direct Media Access. With this option, data can be recovered only if you have both database and backup tape.
Other option is Via Media Password. This option stores a copy of the encryption key in the media. This gives the ability to use Media Explorer utility to recover the data from tape.
From Commvault BOL:
Use Hardware Encryption
If selected, hardware encryption of data will be enabled if the tape drives associated with the data path support encryption.
Enable this option only when the drives associated with the data path support encryption. If this option is enabled and the hardware does not support encryption, jobs using the data path will fail.
<![if !supportLists]>ˇ <![endif]>
Direct Media Access (Media Explorer)
The following options are available for key management, which is useful for recovering data using Media Explorer. Note that by default a copy of the encryption key is stored in the CommServe Database Engine and will be used by all data recovery operations using the CommCell Console.
<![if !supportLists]>o <![endif]>
Via Media Password
Specifies that a copy of the encryption key will be stored in the media. Enabling this option will ensure that the data is retrievable using Media Explorer.
Make sure a valid Media Password is specified when selecting this option.
<![if !supportLists]>o <![endif]>
No Access
Specifies that a copy of the encryption key will be not stored in the the media. This option can be used in cases where security is a priority and do not want the data exposed when the media is lost.
Regards,
Subramanian
From: commvault < at > yahoogroups.com [mailto:commvault < at > yahoogroups.com]
On Behalf Of Paul Hutchings
Sent: Friday, January 27, 2012 9:43 AM
To: 'commvault < at > yahoogroups.com'
Subject: RE: [commvault] Encrypting Backups?
Thanks, so on Data Path Properties which options did you choose please? I’m waiting for the new library but I’m not quite clear what combo of options on the storage policy copy I need to choose.
Thanks,
Paul
From: commvault < at > yahoogroups.com [mailto:commvault < at > yahoogroups.com]
On Behalf Of Subramanian
Sent: 26 January 2012 01:47
To: commvault < at > yahoogroups.com
Subject: RE: [commvault] Encrypting Backups?
We have LTO4 encryption with Key management done in Commvault (No passphrase option). I have also tested the similar scenario you specified. Successfully restored data using IBM L700 Tape library using GEN4 tape drives from a backup done on iScalar Library using GEN4 drives, both using Commvault Key management for enc ryption. Backup and restore was done on different commcells (used capture/merge operation to bring the metadata over to the destination commcell).
Regards,
Subramanian
From: commvault < at > yahoogroups.com ([email]commvault < at > yahoogroups.com[/email]) [mailto:commvault < at > yahoogroups.com] ([email][mailto:commvault < at > yahoogroups.com][/email])
On Behalf Of Paul Hutchings
Sent: Wednesday, January 25, 2012 7:59 AM
To: 'commvault < at > yahoogroups.com'
Subject: [commvault] Encrypting Backups?
Does anyone have any experience of encrypting backups with Commvault?
Specifically, doing a second aux copy from a d2d backup to an LTO4 library, and encrypting the tape copy?
Our tape library doesn’t have the optional key management module, but my understanding is that Commvault can manage its own keys without that. What I want to be sure of is what happens if I end up in a scenario where all I have is a DR Set, a set of encrypted tapes, and a new tape library that is not the one the tapes were written on.
Thanks,
Paul
MIRA Ltd
Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration GB 100 1464 84
The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited.
__._,_.___
Reply to sender ([email]gvsmanian < at > hotmail.com?subject=RE%3A%20%5Bcommvault%5D%20Encrypting%20Backups%3F[/email]) | Reply to group ([email]commvault < at > yahoogroups.com?subject=RE%3A%20%5Bcommvault%5D%20Encrypting%20Backups%3F[/email]) |
Reply via web post |
Start a New Topic
Messages in this topic (7)
Recent Activity:
Visit Your Group
Commvault Documentation here:
http://documentation.commvault.com/
Text-Only ([email]commvault-traditional < at > yahoogroups.com?subject=Change Delivery Format: Traditional[/email]), Daily Digest ([email]commvault-digest < at > yahoogroups.com?subject=Email Delivery: Digest[/email]) • Unsubscribe ([email]commvault-unsubscribe < at > yahoogroups.com?subject=Unsubscribe[/email]) •
Terms of Use
.
[img]http://geo.yahoo.com/serv?s=97359714/grpId=7450851/grpspId=1707277520/msgId=5460/stime=1327716289/nc1=4025321/nc2=5191955/nc3=4507179[/img]
__,_._,___
