topic Re: Backup Encryption in StoreEver Tape Storage

Backup Encryption

steve hasler — Tue, 26 May 2009 14:43:26 GMT

Hi,

I am looking for a simple hardware backup encryption solution that would be compatible with VMS and Tru64, simple hardware solution which would involve no changes/additions to our current backup methods / software, so therefore I have been looking at LTO4 with MSL encryption kit ??
I cannot find any detailed info, can this kit plug straight into a single (external) LTO4 tape drive?
any help / advice appreciated
Thanks
Steve

Re: Backup Encryption

Mark Poeschl_2 — Tue, 26 May 2009 16:03:43 GMT

I don't think this is a separate "kit." The LTO-4 drive supports native encryption. There are several ways to manage the keys used for the encryption/decryption process. See:

http://h20195.www2.hp.com/v2/GetPDF.aspx/4AA1-4878ENW.pdf

The cheapest (and least secure) method of using LTO4 native encryption is the "set it and forget it" method described in the whitepaper above. This method requires no H/W or S/W beyond the LTO4 drive itself. Other methods require that either your backup app is smart enough to manage the keys or require extra H/W.

Re: Backup Encryption

steve hasler — Wed, 27 May 2009 07:25:13 GMT

Mark

Thanks for the prompt reply, this option looks good. Can I just ask, if we needed to read the tapes on another LTO4 drive (DR scenario, original tape drive developes a fault etc) is it just a case of entering the same encryption key again ?

Thanks
Steve

Re: Backup Encryption

Wickedsunny — Wed, 27 May 2009 11:32:30 GMT

Hi,

I have attached the Product Kit and the user guide with this email for your reference. This will make you understand that how this whole thing works.

Regards,
Sunny

P:S - Rate solutions with points. It keeps us going.

Re: Backup Encryption

sselaya — Wed, 27 May 2009 13:09:34 GMT

How can this be enabled (set it and forget it) if we are using a stand alone LTO-4 attached to the HP D2D4004i product. Everything I read here only applies if are attached to a tape library

Re: Backup Encryption

Curtis Ballard — Mon, 01 Jun 2009 20:35:46 GMT

Set and forget requires some software support for entering the keys and isn't a very secure method since a lot of events can clear the encryption settings so HP doesn't offer utilities for using set and forget.

The LTO4 MSL encryption kit is the simplest solution but as you have found requires at least a 1/8 G2 autoloader.

For standalone drives you have to have some sort of software solution. I don't know which VMS or True64 software has encryption control capability. It's almost certain that your current software won't so the autoloader or MSL library is probably the best solution.

Re: Backup Encryption

Tom O'Toole — Wed, 09 Sep 2009 18:55:53 GMT

You can try using the program I posted here...

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1171171

Re: Backup Encryption

steve hasler — Wed, 14 Oct 2009 12:41:24 GMT

Hi All

Thanks for your help / comments, I think I will look at LTO4+Encryption kit.

Regards
Steve