Probably the best way to do TSM db encryption would be with an external
in-line encryption device (like, say, a NetApp DataFort box) to encrypt
the disk that the db resides on.
 
--
Mark Stapleton (mark.stapleton AT cdw DOT com)
CDW Berbee
System engineer
7145 Boone Avenue North, Suite 140
Brooklyn Park MN 55428-1511
763-592-5963
www.berbee.com
 

> -----Original Message-----
> From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf
> Of Chris Koster
> Sent: Wednesday, December 03, 2008 9:39 AM
> To: ADSM-L AT VM.MARIST DOT EDU
> Subject: Re: [ADSM-L] Encryption in TSM ??
> 
> Well, TSM does support encryption and works well as its own key
> manager.
> However, this does not encrypt the TSM database. For this, you will
> need
> an external key manager to encrypt database tapes. Of course, this
> starts the whole discussion of then how do you backup the key manager
> that's encrypting the backup server. So do you setup a 2nd backup
> instance to backup the key manager which is encrypting the backups?
And
> so on and so on ...
> 
> If you want my advice, let TSM encrypt all your storage pool volumes
> and
> send off the TSM database unencrypted via 2nd pickup with courier of
> your choice. For the ultra-secure-sensitive type, select a second
> courier service all together solely for database tapes.
> 
> - Chris
> 
> 
> -----Original Message-----
> From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf
> Of
> Martin Panggabean
> Sent: Wednesday, December 03, 2008 4:08 AM
> To: ADSM-L AT VM.MARIST DOT EDU
> Subject: [ADSM-L] Encryption in TSM ??
> 
> Dear TSM practitioner,
> 
> I want to ask what is best practice Encrytion in TSM ? I have plann to
> encrypt every database backup using TSM, how many percent it would
> effect the performance comparing backup not using encryption?
> 
> --
> Best Regards,
> 
> 
> Martin Panggabean
> Technical Consultant
> PT. Niaga Prima Paramitra
> Ahmad Dahlan Avenue 25
> Kebayoran Baru, Jakarta Selatan 12130
> Indonesia
> Ph     : +(6221)72799949
> URL    : www.niagaprima.com
> E-mail : martin.panggabean AT niagaprma DOT com