There is no additional encryption performed by the TSM server. The 
encrypted data sent by the client remains, of course, encrypted when it is 
copied to a copy storage pool or backup set (or anywhere else in the TSM 
hierarchy).

Files that were encrypted when they were backed up can not be restored 
without the encryption key. The encryption key is not stored on the TSM 
server. Therefore, someone intercepting the TSM server database and 
storage pool volumes could not restore the data without the encryption key 
(unless they can hack it, but then any encryption scheme is subject to 
hacking).

Except for TSM client encryption, there are no other TSM-enabled means of 
encrypting the data.

Regards,

Andy

Andy Raibeck
IBM Software Group
Tivoli Storage Manager Client Development
Internal Notes e-mail: Andrew Raibeck/Tucson/IBM@IBMUS
Internet e-mail: storman AT us.ibm DOT com

The only dumb question is the one that goes unasked.
The command line is your friend.
"Good enough" is the enemy of excellence.




Pétur Eyþórsson <peddi AT ITN DOT IS>
Sent by: "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>
04/02/2002 07:57
Please respond to "ADSM: Dist Stor Manager"

 
        To:     ADSM-L AT VM.MARIST DOT EDU
        cc: 
        Subject:        RE: don´t aynone know anything about Encryption in      
        TSM.

 

My question was conserning 2 things.


If you use Encryption. Cant people who get a hold of the TSM Database and
the Copy Storage Pools, restore the data, whether the data was back up 
with
Encrytpion or not?

If you make a bakup set from the data back up. is ther Encryption on that
data? if not is ther posible to make the backup sets more secure?


I have read about Encryption, witch sais that the data is Encrypted before
the data is sent on the TSM Server. i haven´t read anything about 
Encrytpion
on the acctual TSM server data, whether the data uses encryption there or
not. It does not matter if the data is Encrypted on the way to the TSM, it
only matters if i can secure the data offsite? And i havent read anything
about that in TSM only about Encryption in TSM for clients.


Kvedja/Regards
Petur Eythorsson
Taeknimadur/Technician
IBM Certified Specialist - AIX
Tivoli Storage Manager Certified Professional
Microsoft Certified System Engineer

peddi AT itn DOT is

 Nyherji Hf              Simi TEL: +354-569-7700
 Borgartun 37            105 Iceland
 URL:                    http://www.nyherji.is