UNSOLVED
J
JWeinsheimer
91 Posts
0
1364
May 29th, 2012 18:00
How is encrypted data handled during replication?
A couple of questions regarding encrypted replication and how it's handled during replication.
If I have an Avamar server using at-rest encryption it is my understanding that the encryption key is only held locally.
If the data were to be replicated to a new system, would it first have to be decrypted for transmission then re-encrypted on the target Avamar server?
Could at-rest encrypted data be replicated to a server not using at-rest encryption? And vice versa?
Do these same principles apply for a root-to-root replication?
Thanks.
Sandeep_Sinha
307 Posts
265
0
Posted June 4th, 2012 09:00
Hello,
If you are using at-rest encryption, then any reads/writes from disk will require encryption processing.
So, the data will be processed before replication and then transferred to target Avamar grid, the data transfer between source and target avamar server will be encrypted
If at-rest encryption is enabled on the target server, then data gets encrypted after reaching there.
At-rest encrypted data can be replicated to a server not using at-rest encryption and vice versa and these same principles apply for root-to-root replication.
Thanks.