Okay, thanks for the information. I have also been looking at NetBackup Media Server Encryption. It looks quite neat, compresses before encryption and has very nice key management which is a big tick in the box for me.
The only caveat is that is software based and has fairly heavy host CPU requirement. Regards, Tal -----Original Message----- From: judy_hinchcli...@administaff.com [mailto:judy_hinchcli...@administaff.com] Sent: 02 March 2010 14:42 To: Shekel Tal; jpis...@lucidpixels.com; kc.on.the....@gmail.com Cc: veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] Sun/StorageTek based LTO4 encryption I am now using kms, and because the tape drive does the compression and the tape drive does the encryption, I have not noticed any loss in compression yet ( only have had it running for about 1 week) that was something I was also concerned about. You have to compress before you encrypt, and as far as I could find out the tape drive knows that. -----Original Message----- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Shekel Tal Sent: Tuesday, March 02, 2010 7:39 AM To: Justin Piszcz; Kevin C Cc: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption I have also been looking at this as an option. One of the considerations is the effect encryption has on compression. I have heard you loose the ability to compress effectively when using compression. Have you noticed an effect on your tape drive compression when using tape drive based encryption? Regards, Tal -----Original Message----- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Justin Piszcz Sent: 01 March 2010 21:26 To: Kevin C Cc: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] Sun/StorageTek based LTO4 encryption On Mon, 1 Mar 2010, Kevin C wrote: > Sorry if this topic is been discussed before. > > Looking for members who have implemented LTO4 based encryption on > Sun/StorageTek/Oracle platforms, any useful comments/journeys/guidance. We > are on HP LTO4 drives with SL500/SL3000 libraries. From what I understand, > this pretty much limits us to the StorageTek Crypto Key Management System w/ > KMA appliances at each library site. The other option, today, is NetBackup's > KMS software. > > Thank you. > I have using the IBM LTO-4 drives with STK libraries, works great, as long the firmware is version 7BG2, I have seen the drive reset itself if the firmware is any other version (more recent ones). Also using NBU & KMS. It works good, note you can only have 2 volume pools that use encryption. Justin. _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu