We are working on setting up encryption with LTO4's and we are using multiple backup products so there are several different methods to control encryption.
Several emails in the recent past talk about how to encrypt or not using the tools within TSM. If you are not using tsm's application encryption support you can control encryption with bar code rules if using a 3584 tape library. If you are using netbackup or networker you can use the volume pool id data written in the tape label for this control. For TS3310 tape libraries there is no bar code support that I have found. Len PS The last time I checked hardware encryption in lto4's is at no extra cost. If going by the rule of a new lto tape drive every two years the lto5 tape drive should have been release in 2009. Rumor has it that they should be released in 2010. See the url www.lto.org for a little bit more info. len -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[email protected]] On Behalf Of Howard Coles Sent: Wednesday, January 20, 2010 12:59 PM To: [email protected] Subject: Re: [ADSM-L] Encryption Good question, I was about to ask that same thing. We're about to put in LTO4's at our main DC (wanted to go VTL or Disk, but . . . ). My boss has already spec'd and priced out getting the Hardware encryption, but I'd like to know if that's the best route. The question is if we did that how would we create an unencrypted backupset (for example if it had to be produced for a legal proceeding)? I'm thinking the encryption options would depend on TSM application encryption, or did I miss some of that previous thread? See Ya' Howard Coles Jr. John 3:16! -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[email protected]] On Behalf Of Scott Bellew Sent: Wednesday, January 20, 2010 11:34 AM To: [email protected] Subject: Re: [ADSM-L] Encryption Hi Joni, We use Application Managed Encryption, with IBM 3584 library and LTO4 drives. This only works for a storage pool with DRIVEENCRYPTION=ON. It does not encrypt the db backup tape. TSM handles the keys. We use this for off-site archive tapes. Currently in the process of recalling all LTO2 archive tapes and moving them to LTO4 tapes in this Encrypted storage pool. Not hard to set up. Checkout this link: http://www-01.ibm.com/support/docview.wss?rs=663&uid=swg27009625 ------------------- Scott Bellew Systems Programmer Informatin Systems Regional Health -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[email protected]] On Behalf Of Moyer, Joni M Sent: Tuesday, January 12, 2010 6:51 AM To: [email protected] Subject: [ADSM-L] Encryption Hello everyone, I am beginning the process of deciding upon a method of encryption. I was just wondering if anyone utilizes TSM to encrypt data? It seems to be quite a cumbersome method of encryption... I was also wondering if anyone was using hardware encryption in their environments? And what type of set up do you have? Thanks in advance!!!! Joni Moyer Storage Administrator III (717)302-9966 [email protected] ________________________________ This e-mail and any attachments to it are confidential and are intended solely for use of the individual or entity to whom they are addressed. If you have received this e-mail in error, please notify the sender immediately and then delete it. If you are not the intended recipient, you must not keep, use, disclose, copy or distribute this e-mail without the author's prior permission. The views expressed in this e-mail message do not necessarily represent the views of Highmark Inc., its subsidiaries, or affiliates.
