Am 26.05.2011 17:24, schrieb Tim Gustafson:
> Hi there,
> 
> I was just looking at the following documentation page:
> 
> http://www.bacula.org/en/dev-manual/main/main/Data_Encryption.html
> 
> That page contains information about generating a "master" key and then also 
> a set of "client" keys.  However, the page is not clear whether you're 
> supposed to use the same master key for all your clients, or if you should 
> have a different master key for each client.  Should I be sharing the 
> master.cert file with each client and keeping the master.key file on my 
> bacula-dir server, or does each client need its own master.cert and 
> master.key file?
> 

Hi,

one master key for each client wouldn't make that much sense, since you
could just the client keys in a safe place.

I have one master key for everything. But I don't keep the private key
on the director. I have it on a pen drive and (to be extra sure) printed
out in a safe on site and on an encrypted pen drive that I always carry
with me.


Regards,
Christian Manal

------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users