Hi,

This is our procedure to set up encryption
on a new TSM (UNIX) client. It is not much, but maybe
it is of any use to you.

1) Make sure these lines are in dsm.sys:

PASSWORDACCESS          GENERATE
ENCRYPTKEY              SAVE
INCLEXCL                /usr/tivoli/tsm/client/ba/bin/inclexcl.lst

2) If you want to encrypt everything that is on the system
   the LAST line of inclexcl.lst should be:

include.encrypt         /.../*

3) Start the first incremental backup. When the client
   wants to back up the first file it encounters it asks
   for the encryption key.

Pitfall: When you add encryption to existing client that
has already made backups in the past an incremental backup
isn't going to encrypt the files that are already on tape.

Best regards,

Alexander


Simon Browne wrote:
>
> Hi There,
>
> Just wondering if anybody has written or knows of a step-by step guide to
> implementing TSM encryption for backup and archive ??
>
> As noticed by somebody else in this list the documentation for this
> function in the manuals is extremely light.
>
> Even a quick process outline by someone who has implemented TSM encryption
> would be appreciated.
>
> Thanks,
> Simon  Browne
> Technical Specialist (Storage)
> Strategic Outsourcing
>
> IBM (NZ) Ltd.
>
> Telephone: +64 4 5769787 extn. 9787
> Facsimile: +64 4 5765808 extn. 5808
> IBM e-mail: simonbr AT nz1.ibm DOT com
>
> ---------------------------------------------------------------------
> The contents of this e-mail are confidential.
> If you have received this communication by mistake,
> please advise the sender immediately and delete the message and
> any attachments.
> The views expressed in this e-mail are not necessarily the views of
> Westpac Banking Corporation.
> Westpac Banking Corporation is incorporated in New South Wales, Australia.
> ---------------------------------------------------------------------

--
-----------------------------------------------
-----------------------------------------------
Alexander Verkooijen        (alexander AT sara DOT nl)
Alexander Verkooijen        (alexander AT sara DOT nl)
Senior Systems Programmer
SARA High Performance Computing