1. Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING) Click the link to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This message will disappear after you have made at least 12 posts. Thank you for your cooperation.

Please help with backupsets encryption using EKM

Discussion in 'BCP / DRP' started by reddy, Nov 7, 2008.

  1. reddy

    reddy New Member

    Joined:
    Mar 15, 2006
    Messages:
    164
    Likes Received:
    1
    Hi All,

    Can anyone post which method is the best for Backupset encryption among LME(library talks to EKM host for the key) and SME (in which atape devdrvr talks to EKM host for the key)..... and why?

    We are planning to implement encryption for backupsets but not sure where/how to start on sending keys to DR.
    To dr site, is it ok to send EKM host backup for recvering encrypted data or we need to send anything else with backupsets?

    Any help is appreciated.
     
  2.  
  3. reddy

    reddy New Member

    Joined:
    Mar 15, 2006
    Messages:
    164
    Likes Received:
    1
    TSM gurus and senior members....please help me.

    Thanks in advance!
     
  4. julien.sauvanet

    julien.sauvanet New Member

    Joined:
    Apr 13, 2004
    Messages:
    23
    Likes Received:
    0
    Hi reddy,

    i'm actually working on same case.
    After many investigation we choose the AME method for encryption. in that mode backupset, dbbackup and export are not encrypted ...
    about your question, i think the best way is to use IBM EKM or TKLM ( Tivoli ).
    For your recovery, just send EKM server data, configure your DR Library pointing to your backup EKM, insert backupset and restore it!
    using LME and EKM, the only thing you need is that your library reach the EKM to deal the key for the backupset label.
     
: ekm, encryption

Share This Page