Networker

Re: [Networker] Encrpyption

2008-01-10 21:41:31
Subject: Re: [Networker] Encrpyption
From: David Magda <dmagda AT EE.RYERSON DOT CA>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Thu, 10 Jan 2008 21:38:11 -0500
On Jan 10, 2008, at 16:35, lemons_terry AT emc DOT com wrote:

All of these require a supporting environment to provide key management, drive configuration, etc. For the TS1120 and T10000A at least, this adds tens of thousands of dollars to the cost of the drive itself, in my experience.

I'm probably missing something, but why can't Networker do the key management?

I would think that the logical way to implement encryption for these tape drives to have a SCSI command where you send a key and say "enable encryption". The back up software would then keep the key in its database and tie it to the back up session.

Then, when you want to restore or clone, Networker (or whatever) would look up the file's save set, get the key, send it to the drive, and tell it to decrypt the data as it comes off the media.

Does anyone know of any documents or white papers that describes the architecture of this?

To sign off this list, send email to listserv AT listserv.temple DOT edu and type 
"signoff networker" in the body of the email. Please write to networker-request 
AT listserv.temple DOT edu if you have any problems with this list. You can access the 
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER

<Prev in Thread] Current Thread [Next in Thread>