Guys i'm upgrading existing backup infrastructure by introducing a new server and upgrading NBU to 6.5.4 on Solaris.
I've then got to install and configure MSEO 6.1 so we can encrypt some database backups. I've been reading through all the pdf's and its just a bit of a minefield. Is there any simplistic steps anywhere anyone has done to install? I'm hoping i don't need to change much from defaults, but all documentation points towards security server, pem server, pem client etc. I've basically got one master/media server combined where i need to install this on. I can't see mentioned anywhere in the docs how it is done on a single machine. I have seen standalone config mentioned for the pem and security server though. Anyway can someone explain or help me understand the following :- 1. From what i gather there is a master access file with a clear text password in it. I'm not entirely sure what this is for, but i'd assume its critical to be not put on a none encrypted backup anywhere? 2. RSA keys are used to encrypt and decrypt the AES keys which are dynamically created to encrypt data blocks. Is this right? We have the requirement to restore a backup taken at one site on another site, so i was hoping to create a separate key for each site and then import the production key into the DR site MSEO system so that tapes written on production could be read and restored. Is this understanding correct? I don't want to overwrite the existing default keys each time but am not sure if the default key will be used to write backups. 3. I have multiple backup jobs writing to the same tape pools and not all these jobs need encrypting. From what i see the encryption is done by adding <MSEO> tags into the keyword section of the policy. Do i need to put these keywords in ALL policies but simply omit the KeyType bit but leave in Compress=xxx if i want other policies to compress but not encrypt? Or do i leave the keyword section blank. If i leave blank does compression still work as i gather the /dev/rmt/0cbn links are changed by the MSEO virtual device paths. 4. Are there a list of these variables for netbackup.keyword anywhere? From what i gather the default xml file produced contains attributes that will have the netbackup.keyword.<variable> in them. The word 'netbackup.keyword' is not then referenced elsew section. This confuses me a little as i seehere and only the <variable> bit is referenced in the policy keyword other built in variables in the docs e.g netbackup.policy netbackup.pool, but don't then know how to reference them or if i need to. Has anyone a basic example they could post me at all of configuration? Sorry this is long, i'm just venting because its all a bit mental and as always deadlines mean it needs doing asap. Any pointers would be great. Cheers _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu