> one master key for each client wouldn't make that much sense, since you
> could just the client keys in a safe place. I have one master key for
> everything. But I don't keep the private key on the director. I have it
> on a pen drive and (to be extra sure) printed out in a safe on site and
> on an encrypted pen drive that I always carry with me.

So, the master key is a second key that can be used to decrypt the backup then. 
 The people whose severs I'm backing up might not want me to have access to 
their data, so those users would have to manage their own master keys, correct?

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Tim Gustafson                                                tjg AT soe.ucsc 
DOT edu
Baskin School of Engineering                                     831-459-5354
UC Santa Cruz                                         Baskin Engineering 317B
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users