Well, TSM does support encryption and works well as its own key manager. However, this does not encrypt the TSM database. For this, you will need an external key manager to encrypt database tapes. Of course, this starts the whole discussion of then how do you backup the key manager that's encrypting the backup server. So do you setup a 2nd backup instance to backup the key manager which is encrypting the backups? And so on and so on ...
If you want my advice, let TSM encrypt all your storage pool volumes and send off the TSM database unencrypted via 2nd pickup with courier of your choice. For the ultra-secure-sensitive type, select a second courier service all together solely for database tapes. - Chris -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of Martin Panggabean Sent: Wednesday, December 03, 2008 4:08 AM To: [email protected] Subject: [ADSM-L] Encryption in TSM ?? Dear TSM practitioner, I want to ask what is best practice Encrytion in TSM ? I have plann to encrypt every database backup using TSM, how many percent it would effect the performance comparing backup not using encryption? -- Best Regards, Martin Panggabean Technical Consultant PT. Niaga Prima Paramitra Ahmad Dahlan Avenue 25 Kebayoran Baru, Jakarta Selatan 12130 Indonesia Ph : +(6221)72799949 URL : www.niagaprima.com E-mail : [EMAIL PROTECTED]
