Re: Help Please :0)
In article [EMAIL PROTECTED], "Barth, Terry (MBS)" [EMAIL PROTECTED] says: Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Hello Terry The TSM 4.1 windows client will encrypt the data before sending it on to the TSM server. Otherwise the data is in the clear, but may be harder to read if it was compressed. len
Re: Help Please :0)
Hi Mark: From a practical (security) point of view, is there a difference? Have you ever tried to read a tape? How would you go about it and would you see, for example, the ASCII text of a NT or AIX script? [EMAIL PROTECTED] 10/11/00 03:52PM Yes this is true but the data on the tape is not encrypted per se... It's just not usable without the database... -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:41 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: I've been known to be wrong, but this was a question that was raised and my understanding was the tapes are not readable without the database. [EMAIL PROTECTED] 10/11/00 03:26PM Larry, I do not think that the data on the tape is encrypted. There was some discussion about this on the list a while back, you may want to check the archives. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately.
Re: Help Please :0)
Hi Larry, I think that encryption is encryption is encryption, any way you cut it. If the data on the tape is not encrypted, then it is not encrypted. If someone said took one of your tapes and said to you, "Larry, is the data on this tape encrypted?" what would you say? No of course. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 12, 2000 8:36 AM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: From a practical (security) point of view, is there a difference? Have you ever tried to read a tape? How would you go about it and would you see, for example, the ASCII text of a NT or AIX script? [EMAIL PROTECTED] 10/11/00 03:52PM Yes this is true but the data on the tape is not encrypted per se... It's just not usable without the database... -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:41 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: I've been known to be wrong, but this was a question that was raised and my understanding was the tapes are not readable without the database. [EMAIL PROTECTED] 10/11/00 03:26PM Larry, I do not think that the data on the tape is encrypted. There was some discussion about this on the list a while back, you may want to check the archives. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately.
Re: Help Please :0)
Is having something thats unencrypted but unreadable the same as something that is encrypted but readable? OR: Can you use IBM tape drivers to read usable information from ADSM tapes? Matt Warren. -Original Message- From: Remeta, Mark [mailto:[EMAIL PROTECTED]] Sent: 12 October 2000 02:50:PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Larry, I think that encryption is encryption is encryption, any way you cut it. If the data on the tape is not encrypted, then it is not encrypted. If someone said took one of your tapes and said to you, "Larry, is the data on this tape encrypted?" what would you say? No of course. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 12, 2000 8:36 AM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: From a practical (security) point of view, is there a difference? Have you ever tried to read a tape? How would you go about it and would you see, for example, the ASCII text of a NT or AIX script? [EMAIL PROTECTED] 10/11/00 03:52PM Yes this is true but the data on the tape is not encrypted per se... It's just not usable without the database... -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:41 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: I've been known to be wrong, but this was a question that was raised and my understanding was the tapes are not readable without the database. [EMAIL PROTECTED] 10/11/00 03:26PM Larry, I do not think that the data on the tape is encrypted. There was some discussion about this on the list a while back, you may want to check the archives. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately.
Re: Help Please :0)
Hi Matthew, If the tape is unreadable, you might as well throw it in the garbage and hope you have another copy! Mark -Original Message- From: Warren, Matthew James [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 12, 2000 11:09 AM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Is having something thats unencrypted but unreadable the same as something that is encrypted but readable? OR: Can you use IBM tape drivers to read usable information from ADSM tapes? Matt Warren. -Original Message- From: Remeta, Mark [mailto:[EMAIL PROTECTED]] Sent: 12 October 2000 02:50:PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Larry, I think that encryption is encryption is encryption, any way you cut it. If the data on the tape is not encrypted, then it is not encrypted. If someone said took one of your tapes and said to you, "Larry, is the data on this tape encrypted?" what would you say? No of course. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 12, 2000 8:36 AM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: From a practical (security) point of view, is there a difference? Have you ever tried to read a tape? How would you go about it and would you see, for example, the ASCII text of a NT or AIX script? [EMAIL PROTECTED] 10/11/00 03:52PM Yes this is true but the data on the tape is not encrypted per se... It's just not usable without the database... -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:41 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) Hi Mark: I've been known to be wrong, but this was a question that was raised and my understanding was the tapes are not readable without the database. [EMAIL PROTECTED] 10/11/00 03:26PM Larry, I do not think that the data on the tape is encrypted. There was some discussion about this on the list a while back, you may want to check the archives. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately. Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain co
Re: Help Please :0)
1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry
Re: Help Please :0)
4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Terry - Here's what we've learned thus far about this general subject, as accumulated in my notes at http://people.bu.edu/rbs/ADSM.QuickFacts: Security in *SM First, *SM was not designed for physically insecure environments. Userid/Password: Rather rudimentary, in that there is no distinction between upper and lower case. But it uses a "double-handshake" authentication process that's pretty robust and relatively tough to crack. Tapes: They are in proprietary, undefined format, with no customer tools for directly interpreting them. Richard
Re: Help Please :0)
Larry, I do not think that the data on the tape is encrypted. There was some discussion about this on the list a while back, you may want to check the archives. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately.
Re: Help Please :0)
Thanks Lawrence - For #1, how would I go about setting it up? Do I send the archives directly to a copy pool? or, do I just create an archive pool and then if so, will DRM handle sending them offsite? For #2, I tried it - I am sorry, I should have made it clearer - I want to know also how you depict it in the opt file to backup the registry - if I manually back it up, it works fine - but I noticed that the registry is not being backed up by default. -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry
Re: Help Please :0)
Hi Mark: I've been known to be wrong, but this was a question that was raised and my understanding was the tapes are not readable without the database. [EMAIL PROTECTED] 10/11/00 03:26PM Larry, I do not think that the data on the tape is encrypted. There was some discussion about this on the list a while back, you may want to check the archives. Mark -Original Message- From: Lawrence Clark [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 11, 2000 3:11 PM To: [EMAIL PROTECTED] Subject: Re: Help Please :0) 1). Yes, you can checkout volumes from the tape library and store them offsite. 2). Yes. I believe it copies the registery then backs it up. Try your gui client and select system objects for NT. 3). Never did that but I can't see why not. 4).Yes, the data on the tape is encrypted. [EMAIL PROTECTED] 10/11/00 03:06PM Hello fellow *SMrs: I have a few questions that have recently popped up, that I am having a hard time finding the direct response. 1 - If we create archives, do these tapes always have to stay onsite? -We have over 250 servers and to keep this sort of data month after month for three to seven years, we just do not have that capacity. Therefore, I was wondering how I may accomplish creating archives and sending the tapes offsite and not having one onsite. I need long term data storage - I was working with backupsets, but they are time consuming and I really hate the idea that only 1 backupset goes to 1 tape - Ex: - if I have 2 gigs of information, I just wasted almost all of the tape for these 2 gigs. 2 - I know with NT that you can backup the registry. However, can the registry be backed up when the system is online and can you restore the registry to another location. 3 - Can you schedule a backup for just the registry - we have a situation, that we may want to back up just the registry of a particular server once every hour. 4 - The security team brought an interesting question to my attention. Is the data that we send offsite, via copy pool, encrypted to where someone could not just take the tape and view the data. My thoughts are that the data is encrypted and cannot be recovered without the TSM database and in order to restore the TSM database to another server, I would think there is some sort of security there. Any help on these matters would be greatly appreciated. Thanks Terry Confidentiality Note: The information transmitted is intended only for the person or entity to whom or which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please delete this material immediately.
