Experience, no.
Support, maybe. TSM supports 3592 drive encryption. It's important to
make sure you have some way, external to TSM, to store the keys so you can
get at the tapes in a recovery scenario.
AES encryption from the API should work fine, though I'm not sure you have
a way of initially encrypting the key. I think the server can generate
and manage the keys for you, but I've not gotten that to work on baclient,
let alone API.
-Josh
On Thu, 22 Mar 2007, Allen S. Rout wrote:
Date: Thu, 22 Mar 2007 15:14:29 -0400
From: Allen S. Rout <asr AT UFL DOT EDU>
Reply-To: "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: TDPO and encryption
On Thu, 22 Mar 2007 10:24:32 +0100, Hans Christian Riksheim <HCR AT STERIA DOT
NO> said:
does anyone have any experience with rman/tdpo and encryption?
The last docs I saw about it, when distilled down, said "It might
work. If it doesn't, then it's not supported.".
Underwhelming, but I understand that much of the API workflow is just
plain different than the B/A client flow.
- Allen S. Rout
|