Re: [Veritas-bu] KMS Key Rotation

2010-03-12 Thread judy_hinchcliffe
2010 1:22 PM To: veritas-bu@mailman.eng.auburn.edu Cc: harpreet_si...@ctl.creative.com Subject: RE: [Veritas-bu] KMS Key Rotation > Once you have setup the KMS and assuming you want to restore them. > What is > the necessary info required to restore. > > Pool Name ?? > Key

Re: [Veritas-bu] KMS Key Rotation

2010-03-12 Thread bob944
> Once you have setup the KMS and assuming you want to restore them. > What is > the necessary info required to restore. > > Pool Name ?? > Key Name = ?? > Key Tag ?? > etc > > Phase-1 and Phase-2 don't show this info. > > From where we will get this info for the restore. Why are you importing

Re: [Veritas-bu] KMS Key Rotation

2010-03-11 Thread Justin Piszcz
e.com] > Sent: Wednesday, March 10, 2010 8:20 PM > To: Judy Hinchcliffe > Cc: da...@stanaway.net; veritas-bu@mailman.eng.auburn.edu; > veritas-bu-boun...@mailman.eng.auburn.edu > Subject: Re: [Veritas-bu] KMS Key Rotation > > Dear All, > > Once you have setup the KMS a

Re: [Veritas-bu] KMS Key Rotation

2010-03-11 Thread judy_hinchcliffe
ssage- From: Harpreet SINGH [mailto:harpreet_si...@ctl.creative.com] Sent: Wednesday, March 10, 2010 8:20 PM To: Judy Hinchcliffe Cc: da...@stanaway.net; veritas-bu@mailman.eng.auburn.edu; veritas-bu-boun...@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] KMS Key Rotation Dear All, Once you

Re: [Veritas-bu] KMS Key Rotation

2010-03-10 Thread Harpreet SINGH
-boun...@mailman.eng.auburn.edu] On Behalf Of David Stanaway Sent: Monday, March 08, 2010 9:36 PM To: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] KMS Key Rotation The limitation for the number of 'active' keytags in the keygroup dictates that you don't rotate they k

Re: [Veritas-bu] KMS Key Rotation

2010-03-09 Thread judy_hinchcliffe
date of a key/passphrase in case I come across an old tape. From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of David Stanaway Sent: Monday, March 08, 2010 9:36 PM To: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] KM

Re: [Veritas-bu] KMS Key Rotation

2010-03-08 Thread David Stanaway
The limitation for the number of 'active' keytags in the keygroup dictates that you don't rotate they keys too often. It is pretty easy to cycle the keys out of the keygroup and recover them back in if you need, so don't let that stifle your desired rotation config. Just make sure you have a bullet

Re: [Veritas-bu] KMS Key Rotation

2010-03-08 Thread Adams, Dwayne
Hello, I am working on setting up KMS. If you are using KMS in your environment, do you rotate keys with your data sets? (Monthly, Yearly???) I have read that it is a "Best Practice" to rotate your keys as the data encrypted with that key expires. Are people really doing this with KMS? It is