Wow, Gabe! While
the might solve the problem, that’s about the scariest most convoluted key
management system I’ve ever heard! Too many keys to lose for my
tastes.
I have to say it again.
Wow.
I think the fumes from
the coke plants in Philly have gotten to your brain, dude.
;)
(For those playing at
home, that’s coal or petroleum coke (see http://en.wikipedia.org/wiki/Coke_(fuel)),
and http://en.wikipedia.org/wiki/Petroleum_coke)
not Cocaine or Coca-Cola, OK?)
________________________________________________________
Curtis Preston |
VP Data Protection
GlassHouse
Technologies, Inc.
T: +1 760 710 2004 | C: +1 760 419 5838 | F: +1 760
710 2009
cpreston AT glasshouse DOT com
| www.glasshouse.com
Infrastructure ::
Optimized
From:
veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Rosenkoetter,
Gabriel
Sent: Thursday, July
31, 2008 5:45 AM
To:
ken_zufall AT goodyear DOT com; veritas-BU
Subject: Re: [Veritas-bu] Disable alternate
client restores
Enable client-side encryption (and
compression) for all clients. Create a unique key on each client, and make the
administrator(s) of that client responsible for maintaining their key (and a
backup at least of its passphrase through ANOTHER means). Exclude the key data
from backups.
All of those are client-side
configurations.
--
gabriel rosenkoetter
Radian
Group Inc, Unix/Linux/VMware Sysadmin / Backup &
Recovery
gabriel.rosenkoetter AT radian DOT biz, 215 231 1556
From:
ken_zufall AT goodyear DOT com [mailto:ken_zufall AT goodyear DOT com]
Sent: Wednesday, July 30, 2008 6:38
PM
To: veritas-BU
Subject: [Veritas-bu] Disable alternate
client restores
Running 6.5.1, have been asked
if it's possible to restrict the Master server from restoring a particular
client's images to alternate clients. I know we can restrict one client
from restoring another client's data; I know I can prevent the Master from
writing to a particular client. What I haven't been able to determine is
if I can keep the Master from writing clientA's data to clientB.
Thanks,
Ken Zufall
Technical
Analyst
D660C
The Goodyear Tire & Rubber
Company