2010 1:22 PM
To: veritas-bu@mailman.eng.auburn.edu
Cc: harpreet_si...@ctl.creative.com
Subject: RE: [Veritas-bu] KMS Key Rotation
> Once you have setup the KMS and assuming you want to restore them.
> What is
> the necessary info required to restore.
>
> Pool Name ??
> Key
> Once you have setup the KMS and assuming you want to restore them.
> What is
> the necessary info required to restore.
>
> Pool Name ??
> Key Name = ??
> Key Tag ??
> etc
>
> Phase-1 and Phase-2 don't show this info.
>
> From where we will get this info for the restore.
Why are you importing
e.com]
> Sent: Wednesday, March 10, 2010 8:20 PM
> To: Judy Hinchcliffe
> Cc: da...@stanaway.net; veritas-bu@mailman.eng.auburn.edu;
> veritas-bu-boun...@mailman.eng.auburn.edu
> Subject: Re: [Veritas-bu] KMS Key Rotation
>
> Dear All,
>
> Once you have setup the KMS a
ssage-
From: Harpreet SINGH [mailto:harpreet_si...@ctl.creative.com]
Sent: Wednesday, March 10, 2010 8:20 PM
To: Judy Hinchcliffe
Cc: da...@stanaway.net; veritas-bu@mailman.eng.auburn.edu;
veritas-bu-boun...@mailman.eng.auburn.edu
Subject: Re: [Veritas-bu] KMS Key Rotation
Dear All,
Once you
-boun...@mailman.eng.auburn.edu] On Behalf Of David
Stanaway
Sent: Monday, March 08, 2010 9:36 PM
To: veritas-bu@mailman.eng.auburn.edu
Subject: Re: [Veritas-bu] KMS Key Rotation
The limitation for the number of 'active' keytags in the keygroup dictates
that you don't rotate they k
date of a key/passphrase in case I come across an old
tape.
From: veritas-bu-boun...@mailman.eng.auburn.edu
[mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of David
Stanaway
Sent: Monday, March 08, 2010 9:36 PM
To: veritas-bu@mailman.eng.auburn.edu
Subject: Re: [Veritas-bu] KM
The limitation for the number of 'active' keytags in the keygroup
dictates that you don't rotate they keys too often. It is pretty easy to
cycle the keys out of the keygroup and recover them back in if you need,
so don't let that stifle your desired rotation config. Just make sure
you have a bullet
Hello,
I am working on setting up KMS. If you are using KMS in your
environment, do you rotate keys with your data sets? (Monthly,
Yearly???) I have read that it is a "Best Practice" to rotate your keys
as the data encrypted with that key expires. Are people really doing
this with KMS? It is