Re: [Networker] Encrpyption
2008-01-10 16:38:54
Hi Bruce
I'll start the reply, and others will correct and amplify.
There are at least three tape drives that offer encryption today:
- IBM LTO4
- IBM TS1120 (aka 03592 E05)
- STK T10000A
All of these require a supporting environment to provide key management, drive
configuration, etc. For the TS1120 and T10000A at least, this adds tens of
thousands of dollars to the cost of the drive itself, in my experience.
NetWorker supports encryption at the client only, during backup. So NetWorker
doesn't provide the ability to encrypt during the clone operation.
But, if the target of your clone operation is a tape drive that provides
encryption, then you can encrypt during the clone operation. Just know that
NetWorker will not be involved in the key management; this will happen
out-of-band to NetWorker.
Hope this helps.
tl
Terry Lemons
Backup Platforms Group
EMC²
where information lives
4400 Computer Drive, MS D239
Westboro MA 01580
Phone: 508 898 7312
Email: Lemons_Terry AT emc DOT com
-----Original Message-----
From: EMC NetWorker discussion [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On
Behalf Of Bruce McClung
Sent: Thursday, January 10, 2008 1:55 PM
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Subject: [Networker] Encrpyption
I am getting ready to explain the pros and cons of encryption for us. I
know that we weill have to upgrade to at least 7.3. Is encrpytion any
better or worse for 7.4? I heard the LTO4 can use HW encryption. One last
question, is it possible to encrypt just the clones. If I clone by command
line?
Thanks
To sign off this list, send email to listserv AT listserv.temple DOT edu and
type "signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems with this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
To sign off this list, send email to listserv AT listserv.temple DOT edu and
type "signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems with this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
|
|
|