Highlighted
shiri1
1 Nickel

NDMP data or media tape encryption

EMC networker : 7.6

Media: LTO Ultrium-4


We are looking for backup data encryption s/w or at Tape level .


Almost 95% of our backup are via NDMP (Netapp Filer)  .


aes ASM - But is applicable for UNIX and Windows FS only .


Please assist with better approach which can be implemented .




Tags (3)
0 Kudos
4 Replies
bingo.1
4 Tellurium

Re: NDMP data or media tape encryption

This is a challenge. A NDMP Filer does not allw to install any software.

So there will be no (client) software to run that task on the NetWorker NDMP client.

You may think about using NDMP-DSA devices which may allow encryption from the active storage node/NW server.

But to make sure, please ask support.

0 Kudos
shiri1
1 Nickel

Re: NDMP data or media tape encryption

We have "Quantum ADIC - Scalar i500" library .

What about enabling encryption on it via "Encryption Key Management" .


Please assist if someone already did this and impact easiness 


Thanks

shirish

0 Kudos
wlee4
2 Iron

Re: Re: NDMP data or media tape encryption

Because NDMP is used to backup your NAS, then backup software cannot encrypt the data.  Even though you are using NetWorker, the actual backup command (i.e. tar or dump) is run on the NAS itself.

Based on the information that I found (see below links), your options are to use hardware encryption at the NetApp or at the tape library level.  Please contact their technical support for assistance on this matter.

Questions about encryption

http://community.netapp.com/t5/FAS-and-V-Series-Storage-Systems-Discussions/Questions-about-encrypti...

Can I encrypt NDMP data during backup or auxiliary copy?

If the NDMP data is directed to a NDMP Remote Server-enabled MediaAgent for data protection or auxiliary copy you can software and hardware encrypt the data. For NDMP data sent directly to a filer-attached library only hardware encryption is supported. Filer direct Hardware encryption requires a 3rd party key management system.

NetApp encryption solutions continue to protect your data when it is backed up to disk or tape.

http://www.netapp.com/us/solutions/a-z/storage-security/security-backup.aspx

Hardware Encryption

http://docs.snapprotect.com/netapp/v10/article?p=features/data_encryption/hardware_encryption.htm

Quantum Scalar i500 User Guide, Chapter 7, page 171, "KMIP-compliant Encryption Key Management"

http://downloads.quantum.com/scalar/S500/i8.5.1/6-01210-07_RevA_Scalari500_UG_EN.pdf

0 Kudos
bingo.1
4 Tellurium

Re: NDMP data or media tape encryption

If you can use hardware encryption, it will work on the tape drive itself but not the dat transfer.

0 Kudos