We are working on setting up encryption with LTO4's and we are using multiple
backup products so there are several different methods to control encryption.
Several emails in the recent past talk about how to encrypt or not using the
tools within TSM.
If you are not using tsm's application encryption support you can control
encryption with bar code rules if using a 3584 tape library.
If you are using netbackup or networker you can use the volume pool id data
written in the tape label for this control.
For TS3310 tape libraries there is no bar code support that I have found.
Len
PS The last time I checked hardware encryption in lto4's is at no extra cost.
If going by the rule of a new lto tape drive every two years the lto5 tape
drive should have been release in 2009. Rumor has it that they should be
released in 2010.
See the url www.lto.org for a little bit more info.
len
-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Howard Coles
Sent: Wednesday, January 20, 2010 12:59 PM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: [ADSM-L] Encryption
Good question, I was about to ask that same thing.
We're about to put in LTO4's at our main DC (wanted to go VTL or Disk,
but . . . ). My boss has already spec'd and priced out getting the
Hardware encryption, but I'd like to know if that's the best route. The
question is if we did that how would we create an unencrypted backupset
(for example if it had to be produced for a legal proceeding)? I'm
thinking the encryption options would depend on TSM application
encryption, or did I miss some of that previous thread?
See Ya'
Howard Coles Jr.
John 3:16!
-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Scott Bellew
Sent: Wednesday, January 20, 2010 11:34 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: [ADSM-L] Encryption
Hi Joni,
We use Application Managed Encryption, with IBM 3584 library and LTO4
drives. This only works for a storage pool with DRIVEENCRYPTION=ON. It
does not encrypt the db backup tape. TSM handles the keys. We use this
for off-site archive tapes. Currently in the process of recalling all
LTO2 archive tapes and moving them to LTO4 tapes in this Encrypted
storage pool.
Not hard to set up. Checkout this link:
http://www-01.ibm.com/support/docview.wss?rs=663&uid=swg27009625
-------------------
Scott Bellew
Systems Programmer
Informatin Systems
Regional Health
-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Moyer, Joni M
Sent: Tuesday, January 12, 2010 6:51 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: [ADSM-L] Encryption
Hello everyone,
I am beginning the process of deciding upon a method of encryption. I
was just wondering if anyone utilizes TSM to encrypt data? It seems to
be quite a cumbersome method of encryption...
I was also wondering if anyone was using hardware encryption in their
environments? And what type of set up do you have?
Thanks in advance!!!!
Joni Moyer
Storage Administrator III
(717)302-9966
joni.moyer AT highmark DOT com
________________________________
This e-mail and any attachments to it are confidential and are intended
solely for use of the individual or entity to whom they are addressed.
If you have received this e-mail in error, please notify the sender
immediately and then delete it. If you are not the intended recipient,
you must not keep, use, disclose, copy or distribute this e-mail without
the author's prior permission. The views expressed in this e-mail
message do not necessarily represent the views of Highmark Inc., its
subsidiaries, or affiliates.
|
