Hi Jakub,
Am 02.02.2026 um 16:16 schrieb Jakub Hudak:
Hello,
I was wondering if it is possible to use unique encryption key pair per
job.
Technically that would be possible, but I would do a lot to not have to
set up, manage and maintain such a thing -- you'd need a bit of extra
tooling around the Bacula-FD itself.
I even see a nice feature request -- use a similar approach to create
key material we use with SD encryption on the FD, and add support for
per-job keys like that. But that would not be something you can use this
month, I guess.
My use case is that sometimes I am writing a manual long term (5-10Y)
off-site job. These tapes are in a sense WORM tapes where I will never
reuse/write to them again. From security standpoint, a unique encryption
key pair would really help me.
Do you have particular reasons why volume encryption by the SD would not
be suitable?
Any advice is much appreciated.
As long as we're just talking, I'm sure you'll get lots of ideas and
brainstorming ;-)
Cheers,
Arno
Jakub
--
Arno Lehmann
IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück
_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
