Veritas-bu

[Veritas-bu] Encryption.

2005-06-01 11:33:26
Subject: [Veritas-bu] Encryption.
From: Gregory.Geyer AT Avnet DOT com (Geyer, Gregory)
Date: Wed, 1 Jun 2005 08:33:26 -0700
This is a multi-part message in MIME format.

------_=_NextPart_001_01C566BF.40C48DBC
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I believe the encryption push is due to Iron Mountain having 'misplaced'
tapes recently with sensitive customer data.  I doubt your storage
company is looking at your tapes.  Rather they're trying to protect
themselves in case they screw up and lose your tapes.  They can say
"Well the data was encrypted you don't have to worry about security
issues."
=20
See this article:
=20
___________________________________________________________

Computerworld Wrap-Up

May 6, 2005

___________________________________________________________

* Missing Backup Tapes Spur Encryption At Time Warner

 http://www.computerworld.com/newsletter/0,4902,101589,00.html?nlid=3DPM
<http://www.computerworld.com/newsletter/0,4902,101589,00.html?nlid=3DPM>=
=20

=20


________________________________

From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of Bobby
Williams
Sent: Wednesday, June 01, 2005 3:53 AM
To: 'Jim Langston'; veritas-bu AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] Encryption.


I am working with one client out of 500 that uses encryption.  It backs
up over a wide area connection and is not slowed down by the encryption
software.  (It may be more noticeable if the backup were going on a 1Gig
network).
=20
This client system has personnel information on it.  We have tested
restoring from the master to an alternate device.  It does not work.
You get an error saying that the encryption key is not valid.
=20
You will have to have an extra level of DR for the system that is using
encryption.  The client systems Administrator will need to keep the
encryption software and security key offsite.  The admin on the client
sets up the encryption software.  The only thing that is set on the
Master server is the check box in the GUI for encrypted backup.  If they
loose the security key (this is set by the user, not provided by
Veritas), the data can't be recovered.
=20
The problem that I have is trying to get my updated software.  No one
inside Veritas seems to know what the part number is.  I have gotten
multiple copies of the 4.5FP6 Master media kit.  I had to get the
encryption software media part numbers from this list.
=20
New Sku Tier FootNote DescriptionECCN #

N09812C --- --- NetBackup DataCenter,Cross Platform,40-Bit
Encryption,v4.5,Feature Pack 3,English,Media Kit 5D992

N09813C --- --- NetBackup DataCenter,Cross Platform,56-Bit
Encryption,v4.5,Feature Pack 3,English,Media Kit 5D992

=20

Another suggestion:  If your storage company knows that you aren't using
encryption, get another storage company.  It would appear that they are
looking at your tapes.

=20


Bobby Williams=20
2205 Peterson Drive=20
Chattanooga, Tennessee  37421=20
423-296-8200=20

=20

________________________________

From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of Jim
Langston
Sent: Tuesday, May 31, 2005 4:13 PM
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] Encryption.


=20
We received some correspondence from our off-site storage facility last
week suggesting that we start encrypting our backups to prevent
inadvertent disclosure of our data.  I'd like to hear from anyone who is
using encryption and if it has caused any issues with your backups,
especially from a bandwidth perspective and a recovery perspective.
Also, is the encryption layered software from Veritas a worth while
investment when it is all said and done?
=20
Thanks in advance for your replies,
=20
Jim

------_=_NextPart_001_01C566BF.40C48DBC
Content-Type: text/html;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2627" name=3DGENERATOR></HEAD>
<BODY>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D351442915-01062005><FONT =
face=3D"Courier New"=20
color=3D#0000ff size=3D2>I believe the encryption push is due to Iron =
Mountain=20
having 'misplaced' tapes recently with sensitive customer data.&nbsp; I =
doubt=20
your storage company is looking at your tapes.&nbsp; Rather they're =
trying to=20
protect themselves in case they screw up and lose your tapes.&nbsp; They =
can say=20
"Well the data was encrypted you don't have to worry about security=20
issues."</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D351442915-01062005><FONT =
face=3D"Courier New"=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D351442915-01062005><FONT =
face=3D"Courier New"=20
color=3D#0000ff size=3D2>See this article:</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D351442915-01062005><FONT =
face=3D"Courier New"=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D351442915-01062005><FONT =
size=3D2>
<P>___________________________________________________________</P>
<P>Computerworld Wrap-Up</P>
<P>May 6, 2005</P>
<P>___________________________________________________________</P>
<P>* Missing Backup Tapes Spur Encryption At Time Warner</P>
<P>&nbsp;</FONT><A=20
href=3D"http://www.computerworld.com/newsletter/0,4902,101589,00.html?nli=
d=3DPM"><U><FONT=20
color=3D#0000ff=20
size=3D2>http://www.computerworld.com/newsletter/0,4902,101589,00.html?nl=
id=3DPM</U></FONT></A></P>
<P><FONT size=3D2></FONT>&nbsp;</P></SPAN></DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma size=3D2><B>From:</B> =
veritas-bu-admin AT mailman.eng.auburn DOT edu=20
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] <B>On Behalf Of =
</B>Bobby=20
Williams<BR><B>Sent:</B> Wednesday, June 01, 2005 3:53 AM<BR><B>To:</B> =
'Jim=20
Langston'; veritas-bu AT mailman.eng.auburn DOT edu<BR><B>Subject:</B> RE: =
[Veritas-bu]=20
Encryption.<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>I am working with one client out of 500 that =
uses=20
encryption.&nbsp; It backs up over a wide area connection and is not =
slowed down=20
by the encryption software.&nbsp; (It may be more noticeable if the =
backup were=20
going on a 1Gig network).</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>This client system has personnel information on =
it.&nbsp;=20
We have tested restoring from the master to an alternate device.&nbsp; =
It does=20
not work.&nbsp; You get an error saying that the encryption key is not=20
valid.</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>You will have to have an extra level of DR for =
the system=20
that is using encryption.&nbsp; The client systems Administrator will =
need to=20
keep the encryption software and security key offsite.&nbsp; The admin =
on the=20
client sets up the encryption software.&nbsp; The only thing that is set =
on the=20
Master server is the check box in the GUI for encrypted backup.&nbsp; If =
they=20
loose the security key (this is set by the user, not provided by =
Veritas), the=20
data can't be recovered.</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>The problem that I have is trying to get my =
updated=20
software.&nbsp; No one inside Veritas seems to know what the part number =

is.&nbsp; I have gotten multiple copies of the 4.5FP6 Master media =
kit.&nbsp; I=20
had to get the encryption software media part numbers from this=20
list.</FONT></SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005><FONT =
face=3DArial=20
color=3D#0000ff size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D609220710-01062005>
<P><FONT face=3DArial color=3D#0000ff size=3D2>New Sku Tier FootNote =
DescriptionECCN=20
#</FONT></P>
<P><FONT face=3DArial color=3D#0000ff size=3D2>N09812C --- --- NetBackup =

DataCenter,Cross Platform,40-Bit<SPAN class=3D609220710-01062005>=20
</SPAN>Encryption,v4.5,Feature Pack 3,English,Media Kit 5D992</FONT></P>
<P><FONT face=3DArial color=3D#0000ff size=3D2>N09813C --- --- NetBackup =

DataCenter,Cross Platform,56-Bit<SPAN class=3D609220710-01062005>=20
</SPAN>Encryption,v4.5,Feature Pack 3,English,Media Kit 5D992</FONT></P>
<P><FONT face=3DArial color=3D#0000ff size=3D2></FONT>&nbsp;</P>
<P><SPAN class=3D609220710-01062005><FONT face=3DArial color=3D#0000ff =
size=3D2>Another=20
suggestion:&nbsp; If your storage company knows that you aren't using=20
encryption, get another storage company.&nbsp; It would appear that they =
are=20
looking at your tapes.</FONT></SPAN></P></SPAN></DIV>
<DIV>&nbsp;</DIV><!-- Converted from text/rtf format --><BR>
<P><SPAN lang=3Den-us><FONT face=3DArial color=3D#008080 size=3D2>Bobby=20
Williams</FONT></SPAN> <BR><SPAN lang=3Den-us><FONT face=3DArial =
color=3D#008080=20
size=3D2>2205 Peterson Drive</FONT></SPAN> <BR><SPAN lang=3Den-us><FONT =
face=3DArial=20
color=3D#008080 size=3D2>Chattanooga, Tennessee&nbsp; =
37421</FONT></SPAN> <BR><SPAN=20
lang=3Den-us><FONT face=3DArial color=3D#008080 =
size=3D2>423-296-8200</FONT></SPAN> </P>
<DIV>&nbsp;</DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma size=3D2><B>From:</B> =
veritas-bu-admin AT mailman.eng.auburn DOT edu=20
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] <B>On Behalf Of </B>Jim 
=

Langston<BR><B>Sent:</B> Tuesday, May 31, 2005 4:13 PM<BR><B>To:</B>=20
veritas-bu AT mailman.eng.auburn DOT edu<BR><B>Subject:</B> [Veritas-bu]=20
Encryption.<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><SPAN class=3D125180020-31052005><FONT face=3DArial size=3D2>We =
received some=20
correspondence from our off-site storage facility last week suggesting =
that we=20
start encrypting our backups to prevent inadvertent disclosure of our=20
data.&nbsp; I'd like to hear from anyone who is using encryption and if =
it has=20
caused any issues with your backups, especially from a bandwidth =
perspective and=20
a recovery perspective.&nbsp; Also, is the encryption layered software =
from=20
Veritas a worth while investment when it is all said and=20
done?</FONT></SPAN></DIV>
<DIV><SPAN class=3D125180020-31052005><FONT face=3DArial=20
size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D125180020-31052005><FONT face=3DArial size=3D2>Thanks =
in advance=20
for your replies,</FONT></SPAN></DIV>
<DIV><SPAN class=3D125180020-31052005><FONT face=3DArial=20
size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D125180020-31052005><FONT face=3DArial=20
size=3D2>Jim</FONT></SPAN></DIV></BODY></HTML>

------_=_NextPart_001_01C566BF.40C48DBC--

<Prev in Thread] Current Thread [Next in Thread>