Encrypting Save Sets-Open VMS

[Joseph Drozdz]

I would like to encrypt all my backup savesets on Open VMS 7.3 using the BACKUP/ENCRYPT command. I know that this requires a key to be created. Is there a random key that the software can generate, and if so how can I find the key to decrypt in case of a restore.

[Hein van den Heuvel]

I'm sure that si nicely described in the Doc. Did you check there first (I did not)

google: +backup +encrypt + site:itrc.hp.com

read examples like:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1065568

You'll seen add +aes to the gogle string and find more detaield help. For example in:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1087810

hth,
Hein.

[Hoff]

The particular key is specified by the user. See the ENCRYPT /CREATE_KEY command, or the BACKUP /ENCRYPT qualifier. The operation typically expects a key specification, or it will tend to prompt the user for the key to use.

As for commands, you would use the ENCRYPT command to encrypt files, and would use the BACKUP /ENCRYPT=(VALUE=keyvalue) or /ENCRYPT=(NAME=keyname) command for BACKUP savesets.

If you specify just BACKUP /ENCRYPT with no particular key referenced, BACKUP will prompt you for the key to use.

On OpenVMS releases prior to V8.3, encryption uses DES. With V8.3, encryption can also use AES.

Encryption is licensed with OpenVMS V8.2 and later, and integrated in V8.3. On V7.3, you will need both an encryption license PAK and the installation of the encryption product itself.

Details on the encryption product (for releases prior to OpenVMS V8.3) are available in the left navigation of the OpenVMS documentation web site; look for the Encryption product manual that is available there. http://www.hp.com/go/openvms/doc/

Stephen Hoffman
HoffmanLabs

[Ian Miller.]

there is also an intro to this in VAU #5

http://www.openvms.org/pages.php?page=VAU-2007-02-20_05

[Jan van den Ende]

Joseph,

from your Forum Profile:


I have assigned points to 69 of 91 responses to my questions.

One of those threads dates back to 2004.

Maybe you can find some time to do some assigning?

http://forums1.itrc.hp.com/service/forums/helptips.do?#33

Mind, I do NOT say you necessarily need to give lots of points. It is fully up to _YOU_ to decide how many. If you consider an answer is not deserving any points, you can also assign 0 ( = zero ) points, and then that answer will no longer be counted as unassigned.
Consider, that every poster took at least the trouble of posting for you!

To easily find your streams with unassigned points, click your own name somewhere.
This will bring up your profile.
Near the bottom of that page, under the caption "My Question(s)" you will find "questions or topics with unassigned points " Clicking that will give all, and only, your questions that still have unassigned postings.
If you have closed some of those streams, you must "Reopen" them to "Submit points". (After which you can "Close" again)

Thanks on behalf of your Forum colleagues.

PS. - nothing personal in this. I try to post it to everyone with this kind of assignment ratio in this forum. If you have received a posting like this before - please do not take offence - none is intended!

PPS. - Zero points for this.

Proost.

Have one on me.

jpe

[Joseph Drozdz]

I am in the process of testing encryption. Thanks!