1. Community Tip: Please Give Thanks to Those Sharing Their Knowledge.
    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.
  2. Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)
    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

TSM Image Backup Encryption

Discussion in 'TSM Client' started by dcz01, Apr 15, 2016.

  1. dcz01

    dcz01 ADSM.ORG Member

    Joined:
    Feb 18, 2014
    Messages:
    41
    Likes Received:
    2
    Occupation:
    IT-Administrator
    Location:
    Germany
    Hello togehter,

    is there an possibility to encrypt an image backup like the normal backup with something like this option for the dsm.opt for windows clients:

    include.encrypt * or include.encrypt ?:\...\*

    Here IBM is saying that all applications with API can encrypt the data: http://www-01.ibm.com/support/docview.wss?uid=swg21193435
     
  2.  
  3. marclant

    marclant ADSM.ORG Moderator

    Joined:
    Jun 16, 2006
    Messages:
    2,559
    Likes Received:
    358
    Occupation:
    Accelerated Value Specialist for Spectrum Protect
    Location:
    Canada
    That technote is for the API, you are using the BAClient. However, the same hold true that you would use 'include.encrypt". It should work fine with image backups, because an image backup is a backup, and include.encrypt works with backups.

    If you are using dedup on the TSM Server, just be aware that encrypted doesn't deduplicate. It will still get stored in a dedup pool, but not deduped.
     
  4. dcz01

    dcz01 ADSM.ORG Member

    Joined:
    Feb 18, 2014
    Messages:
    41
    Likes Received:
    2
    Occupation:
    IT-Administrator
    Location:
    Germany
    have you an example for the "include.encrypt" option in/for the dsm.opt file?
    or is the b/a client just encrypting the data like the normal incremental backup when backing up the logical disk by blocks with the "backup image" command?
     
  5. marclant

    marclant ADSM.ORG Moderator

    Joined:
    Jun 16, 2006
    Messages:
    2,559
    Likes Received:
    358
    Occupation:
    Accelerated Value Specialist for Spectrum Protect
    Location:
    Canada
    Correct, same include.encrypt works for it all

    But test to be sure. Do an image backup of a small disk without saving the encryption key, then try to restore it. If prompted for a key, it's encrypted
     
  6. dcz01

    dcz01 ADSM.ORG Member

    Joined:
    Feb 18, 2014
    Messages:
    41
    Likes Received:
    2
    Occupation:
    IT-Administrator
    Location:
    Germany
    well then ill test it soon.
    thanks for the help, but i wasn't sure if it would work so like the normal encryption.
     

Share This Page