I am now using kms, and because the tape drive does the compression and
the tape drive does the encryption, I have not noticed any loss in
compression yet ( only have had it running for about 1 week) that was
something I was also concerned about.  You have to compress before you
encrypt, and as far as I could find out the tape drive knows that.


-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Shekel
Tal
Sent: Tuesday, March 02, 2010 7:39 AM
To: Justin Piszcz; Kevin C
Cc: veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption

I have also been looking at this as an option.
One of the considerations is the effect encryption has on compression.

I have heard you loose the ability to compress effectively when using
compression.

Have you noticed an effect on your tape drive compression when using
tape drive based encryption?

Regards,
Tal

-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Justin
Piszcz
Sent: 01 March 2010 21:26
To: Kevin C
Cc: veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption



On Mon, 1 Mar 2010, Kevin C wrote:

> Sorry if this topic is been discussed before.
>
> Looking for members who have implemented LTO4 based encryption on
> Sun/StorageTek/Oracle platforms, any useful
comments/journeys/guidance. We
> are on HP LTO4 drives with SL500/SL3000 libraries. From what I
understand,
> this pretty much limits us to the StorageTek Crypto Key Management
System w/
> KMA appliances at each library site. The other option, today, is
NetBackup's
> KMS software.
>
> Thank you.
>

I have using the IBM LTO-4 drives with STK libraries, works great, as
long 
the firmware is version 7BG2, I have seen the drive reset itself if the 
firmware is any other version (more recent ones).  Also using NBU & KMS.
It works good, note you can only have 2 volume pools that use
encryption.

Justin.
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu


_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu