Networker

Re: [Networker] Encryption Questions

2009-03-17 21:59:42
Subject: Re: [Networker] Encryption Questions
From: David Magda <dmagda AT EE.RYERSON DOT CA>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Tue, 17 Mar 2009 21:54:13 -0400
On Mar 17, 2009, at 21:35, Stan Horwitz wrote:

You can do it. I don't think will benefit from compression by using LTO-4's encryption though. Note that IBM has a utility that manages LTO-4 encryption keys. You might also talk with your tape library vendor to see if they have any key management tools for LTO-4. Also, Spectralogic has a key management feature in some of their LTO-4 tape libraries that might be worth looking
at.

From what I know, LTO-4 does hardware compression first, and then AES encryption (if enabled): compression of a "random" byte stream usually isn't that useful.

Well, I'm currently looking into upgrading our drives and leaving the rest of the library alone (drives will be pricey enough :). Having Networker do this without having to purchase third-party KMS hardware, or also buying a new library that does KMS built-in, would be a quick win to get security.

I'm sure EMC will add this functionality eventually (since NetBackup and TSM already do it), I was just hoping it was already out (and I missed the announcement) or if someone knew of a timeline for it.


Anyway, thanks for the info regarding some of the other available options: I'll examine them and see if they're viable for my situation.

To sign off this list, send email to listserv AT listserv.temple DOT edu and type 
"signoff networker" in the body of the email. Please write to networker-request 
AT listserv.temple DOT edu if you have any problems with this list. You can access the 
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER