TSM Data Security

[OKTSMGURU21]

How can you find out if your data ( onsite or offsite ) is encryted ?



Does TSM have built-in encrytion, especially for its offsite volumes ?



Thank You !

 

[Jeroen]

The data on the tapes is (almost?) unreadable without the TSM database.

For extra security you could enable encryption on the client.

 

[cheffern]

Hi okt -



TSM has encrytion capabilities, but you have to turn it on.

One way to check for it being used is in the node's dsm.opt file for:



encryptkey prompt

or

encryptkey save



This is valid on all *nix & windows nodes...



-Chef.

 

[nbs03]

Okt,

Consider the implication of using TSM client encryption. Your client will experience increased CPU utilization during backup and the data will have minimum compression on tape.

You might want to consider a Decru or similar encryption appliance in the path to your tape drives or a drive such as IBM's TS1120 for encryption. If you are concerned about the security of transmission from client to TSM server, you might consider a dedicated ethernet encryption device for all communications.



cheers,

Neil