EMC networker : 7.6
Media: LTO Ultrium-4
We are looking for backup data encryption s/w or at Tape level .
Almost 95% of our backup are via NDMP (Netapp Filer) .
aes ASM - But is applicable for UNIX and Windows FS only .
Please assist with better approach which can be implemented .
This is a challenge. A NDMP Filer does not allw to install any software.
So there will be no (client) software to run that task on the NetWorker NDMP client.
You may think about using NDMP-DSA devices which may allow encryption from the active storage node/NW server.
But to make sure, please ask support.
We have "Quantum ADIC - Scalar i500" library .
What about enabling encryption on it via "Encryption Key Management" .
Please assist if someone already did this and impact easiness
Because NDMP is used to backup your NAS, then backup software cannot encrypt the data. Even though you are using NetWorker, the actual backup command (i.e. tar or dump) is run on the NAS itself.
Based on the information that I found (see below links), your options are to use hardware encryption at the NetApp or at the tape library level. Please contact their technical support for assistance on this matter.
Questions about encryption
If the NDMP data is directed to a NDMP Remote Server-enabled MediaAgent for data protection or auxiliary copy you can software and hardware encrypt the data. For NDMP data sent directly to a filer-attached library only hardware encryption is supported. Filer direct Hardware encryption requires a 3rd party key management system.
NetApp encryption solutions continue to protect your data when it is backed up to disk or tape.
Quantum Scalar i500 User Guide, Chapter 7, page 171, "KMIP-compliant Encryption Key Management"