So the data is not decrypted at the tsm server before being written to
tape? 

Therefore if I set this for all my windows 5.3 clients all data that is
backed up to disk then migrated to tape will be encrypted?

And if I need to rebuild (meaning reinstall windows) that client for any
reason or restore files from that client to any other client I assume
the client doesn't need the decryption keys?

-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Stapleton, Mark
Sent: Wednesday, April 13, 2005 9:25 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: Encryption of data written to tape

You can set

        include.encrypt *:\...\*

in a client option file (or client option set). Encryption is generated
at the client and sent to the TSM server. Deencryption takes place after
the server sends the encrypted data back to the client.

Note: this is only for Windows clients and (with 5.3) the TDP clients
for Windows.

--
Mark Stapleton (stapleton AT berbee DOT com)
IBM Certified Advanced Deployment Professional
Tivoli Storage Management Solutions 2005
Office 262.521.5627  

>-----Original Message-----
>From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On 
>Behalf Of Dearman, Richard
>Sent: Wednesday, April 13, 2005 9:16 AM
>To: ADSM-L AT VM.MARIST DOT EDU
>Subject: Encryption of data written to tape
>
>Is these anyway within TSM to Encrypt all data that is written to tape?
>
> 
>
>thanks
>
>
>**************************EMAIL DISCLAIMER***************************
>
>This email and any files transmitted with it may be 
>confidential and are
>intended solely for the use of the individual or entity to 
>whom they are
>addressed.  If you are not the intended recipient or the individual
>responsible for delivering the e-mail to the intended recipient, any 
>disclosure, copying, distribution or any action taken or omitted to be 
>taken in reliance on it, is strictly prohibited.  If you have 
>received this
>e-mail in error, please delete it and notify the sender or 
>contact Health 
>Information Management 312.413.4947.
>
> 
>

**************************EMAIL DISCLAIMER***************************

This email and any files transmitted with it may be confidential and are
intended solely for the use of the individual or entity to whom they are
addressed.  If you are not the intended recipient or the individual
responsible for delivering the e-mail to the intended recipient, any 
disclosure, copying, distribution or any action taken or omitted to be 
taken in reliance on it, is strictly prohibited.  If you have received this
e-mail in error, please delete it and notify the sender or contact Health 
Information Management 312.413.4947.