Results 1 to 5 of 5
  1. #1
    Member chris_magic's Avatar
    Join Date
    May 2007
    Location
    Quebec, Qc, Canada
    Posts
    178
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Question The best solution for data encryption ??

    Guys,

    I would like to know what is the best solution for data encryption.

    By the library or by TSM?

    Thanks in advance.
    Christophe Chirat - TSM Consultant for LGS Inc
    Tivoli Storage Manager 6.2 "Implementation" Certified
    ITIL Certified
    LinkedIn

  2. #2
    Moderator
    Join Date
    Dec 2007
    Location
    Brisbane, Australia
    Posts
    322
    Thanks
    0
    Thanked 1 Time in 1 Post

    Default

    Chris,

    I've only done encryption via LTO4 drives with TSM managing the keys, and from my experience it works ok. The major issue is that the TSM database holds the keys, and thus you can't encrypt the DB backup tape. Performance is good, as the encryption is done in hardware it's almost as fast as regular LTO4.

    I can't speak for LME, or for client-side encryption, perhaps someone else here could share their opinions...
    -Chris

  3. #3
    Member dangel42's Avatar
    Join Date
    May 2007
    Location
    Wisconsin
    Posts
    69
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Default

    We also have TSM manage encryption and have had no issues.

  4. #4
    Member chris_magic's Avatar
    Join Date
    May 2007
    Location
    Quebec, Qc, Canada
    Posts
    178
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    I ask this because I want to encrypt only the data who are in my LTO storage pool who is going in vault.

    My TSM server is on Windows 2003 server and the version is 5.5.4.1

    Is it possible to encrypt only a specific storage pool (LTO) ?
    Christophe Chirat - TSM Consultant for LGS Inc
    Tivoli Storage Manager 6.2 "Implementation" Certified
    ITIL Certified
    LinkedIn

  5. #5
    Moderator
    Join Date
    Dec 2007
    Location
    Brisbane, Australia
    Posts
    322
    Thanks
    0
    Thanked 1 Time in 1 Post

    Default

    Quote Originally Posted by chris_magic View Post
    I ask this because I want to encrypt only the data who are in my LTO storage pool who is going in vault.

    My TSM server is on Windows 2003 server and the version is 5.5.4.1

    Is it possible to encrypt only a specific storage pool (LTO) ?

    You setup encryption on the DEVCLASS. So for your offsite pool, you'd create a new device class (LTO_ENCRYPT or something like that), and make sure DRIVEE=on. Then create a new storage pool for your offsite tapes using that devclass.

    You can update an existing devclass to encryption on, however it will be turned on for all storage pools using that devclass.
    -Chris

Similar Threads

  1. Encryption af data during backup ?
    By bipsen in forum Backup / Archive Discussion
    Replies: 1
    Last Post: 05-02-2013, 06:34 PM
  2. Implementing Data Encryption
    By deany in forum TSM Security and Regulatory Compliance
    Replies: 2
    Last Post: 08-17-2007, 09:27 AM
  3. Solution
    By lidra in forum TSM Server
    Replies: 1
    Last Post: 10-23-2006, 05:40 PM
  4. Data Encryption issues
    By bernardb in forum TSM Security and Regulatory Compliance
    Replies: 1
    Last Post: 03-08-2006, 03:05 PM
  5. data encryption on tapes
    By br4msc in forum Backup / Archive Discussion
    Replies: 2
    Last Post: 11-28-2002, 09:45 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •