IBM Support

Can NDMP backups be configured for tape drive encryption.

Question & Answer


Question

The NAS device class where "DEVTYPE=NAS" does not provide the same option as the LTO device class to allow drive encryption. Is there a way to configure NDMP backups to provide drive encryption.

Answer

The NDMP standard is supported by each NAS vendor and is not something where Tivoli Storage Manager development can make changes. Check with your NAS vendor to see if their NDMP code provides an option to implement drive encryption.

Tivoli Storage Manager does provide the option for backing up a NAS NDMP file server by sending the NAS backup data over the LAN to the Tivoli Storage Manager Server. Using this NDMP configuration the data is sent over the LAN to the server in much the same way the Tivoli Storage Manager backup archive client works. This NDMP configuration allows the data to be stored on any of the Tivoli Storage Manager server native storage pools such as random disk, sequential tape, or file type devices. If the data is sent to a native storage pool of device class type LTO that has drive encryption enabled then the data will be encrypted on tape.

Note that when the data is sent over the LAN from the NAS filer, the data is not encrypted while in flight over the LAN. When the data is restored the server will decrypt the data, and then send the data from the Tivoli Storage Manager Server to the NAS filer.

[{"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"Server","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Supported Versions","Edition":"All Editions;Enterprise","Line of Business":{"code":"LOB26","label":"Storage"}}]

Document Information

Modified date:
17 June 2018

UID

swg21672809