Probably the best way to do TSM db encryption would be with an external in-line encryption device (like, say, a NetApp DataFort box) to encrypt the disk that the db resides on. -- Mark Stapleton ([EMAIL PROTECTED]) CDW Berbee System engineer 7145 Boone Avenue North, Suite 140 Brooklyn Park MN 55428-1511 763-592-5963 www.berbee.com
> -----Original Message----- > From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf > Of Chris Koster > Sent: Wednesday, December 03, 2008 9:39 AM > To: [email protected] > Subject: Re: [ADSM-L] Encryption in TSM ?? > > Well, TSM does support encryption and works well as its own key > manager. > However, this does not encrypt the TSM database. For this, you will > need > an external key manager to encrypt database tapes. Of course, this > starts the whole discussion of then how do you backup the key manager > that's encrypting the backup server. So do you setup a 2nd backup > instance to backup the key manager which is encrypting the backups? And > so on and so on ... > > If you want my advice, let TSM encrypt all your storage pool volumes > and > send off the TSM database unencrypted via 2nd pickup with courier of > your choice. For the ultra-secure-sensitive type, select a second > courier service all together solely for database tapes. > > - Chris > > > -----Original Message----- > From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf > Of > Martin Panggabean > Sent: Wednesday, December 03, 2008 4:08 AM > To: [email protected] > Subject: [ADSM-L] Encryption in TSM ?? > > Dear TSM practitioner, > > I want to ask what is best practice Encrytion in TSM ? I have plann to > encrypt every database backup using TSM, how many percent it would > effect the performance comparing backup not using encryption? > > -- > Best Regards, > > > Martin Panggabean > Technical Consultant > PT. Niaga Prima Paramitra > Ahmad Dahlan Avenue 25 > Kebayoran Baru, Jakarta Selatan 12130 > Indonesia > Ph : +(6221)72799949 > URL : www.niagaprima.com > E-mail : [EMAIL PROTECTED]
