Encrypted backups

If you use an encrypting tape drive, you can use save commands or Backup, Recovery, and Media Services (BRMS) to perform an encrypted backup. However, if you use the software encryption method, you must use BRMS to perform the encrypted backup.

Loading and setting save/restore master key
The save/restore master key is a special purpose master key used to encrypt all the other master keys when you save them in a Save System (SAVSYS) operation. The save/restore master key itself is not saved. The save/restore master key has a default value. So, for optimum security, the save/restore master key should be set to another value.
Saving and restoring master keys
If a master key is lost, all keys encrypted under that master key, and consequently all data encrypted under those keys, are lost. Therefore, it is important to backup your master keys.
Backing up encrypted auxiliary storage pools
Disk encryption enables you to encrypt data stored in user auxiliary storage pools (ASPs) and independent ASPs. You back up an encrypted ASP in the same way as for an unencrypted ASP. However, if the data in the system ASP or independent ASP is lost, you need to perform additional recovery steps.

Parent topic: Backing up your system

Related information:

Managing master keys