To enable hardware encryption (AME or library-managed), you need the
encryption feature on your 3584 library, LTO4 drives, and LTO4 media. LTO2
and LTO3 drives cannot encrypt. You can write an LTO3 cart with an LTO4
drive, but it can't be encrypted.
Or you can use TS1120/TS1130 (son of 3592) drives and media.
Or you can buy an encryption appliance that sits between your server and
your tape drives, but that could potentially be more expensive than
replacing your LTOx drives.
Or you can encrypt as you said, with the TSM client software.
If you decide to turn on TSM client encryption in dsm.opt, be sure to turn
on compression as well. Compressed data can be encrypted by the tape drive,
but encrypted data can't be compressed.
On Wed, Jan 21, 2009 at 11:05 AM, Jim Young <jimyoung AT cattles.co DOT uk>
wrote:
> Hi
>
> Short and sweet question.
>
> 3584 Library with 6 LTO2 and 6 LTO3 drives.
> Server V 5.4.4.0
> Clients from 5.3.2.0 to 5.5.1.6
>
> Can encryption of backups be performed any other way than at client source
> (dsm.opt)?
>
> I'm unsure if I can utilise Application Managed Encryption (AME)
>
> Any pointers welcome, though i've tried to read 'Building a secure
> environment' pdf.
>
> Cheers
>
> Jim
>
>
> Jim Young - Computer Operations Coordinator
> IT Operations, Cattles Group IT.
> Ext. 2424
>
>
> Cattles plc Registered in England No: 133540
> Kingston House, Centre 27 Business Park,
> Woodhead Road, Birstall, Batley, WF179TD.
>
> The views and opinions expressed herein are those of the author and not of
> Cattles plc or any of its subsidiaries.The content of this e-mail is
> confidential, may contain privileged material and is intended solely for the
> recipient(s) named above.
>
> If you receive this in error, please notify the sender immediately and
> delete this e-mail.
>
> Please note that neither Cattles plc nor the sender accepts any
> responsibility for viruses and it is your responsibility to scan the email
> and attachments(if any). No contracts or agreements may be concluded on
> behalf of Cattles plc or its subsidiaries by means of email communications.
>
> This email has been verified Virus free
> by Cattles and Sophos Puremessage scanning service.
>
|
