Well, TSM does support encryption and works well as its own key manager.
However, this does not encrypt the TSM database. For this, you will need
an external key manager to encrypt database tapes. Of course, this
starts the whole discussion of then how do you backup the key manager
that's encrypting the backup server. So do you setup a 2nd backup
instance to backup the key manager which is encrypting the backups? And
so on and so on ...

If you want my advice, let TSM encrypt all your storage pool volumes and
send off the TSM database unencrypted via 2nd pickup with courier of
your choice. For the ultra-secure-sensitive type, select a second
courier service all together solely for database tapes.

- Chris


-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Martin Panggabean
Sent: Wednesday, December 03, 2008 4:08 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: [ADSM-L] Encryption in TSM ??

Dear TSM practitioner,

I want to ask what is best practice Encrytion in TSM ? I have plann to
encrypt every database backup using TSM, how many percent it would
effect the performance comparing backup not using encryption?

--
Best Regards,


Martin Panggabean
Technical Consultant
PT. Niaga Prima Paramitra
Ahmad Dahlan Avenue 25
Kebayoran Baru, Jakarta Selatan 12130
Indonesia
Ph     : +(6221)72799949
URL    : www.niagaprima.com
E-mail : martin.panggabean AT niagaprma DOT com