


Enabling encryption for backup-archive client users
If you configure the backup-archive client to encrypt data during backup and archive operations, and if you specify the option to store the encryption key password (encryptkey save), by default, only root and IBM® Storage Protect authorized users can use the stored password to encrypt or decrypt files. Authorized users include any non-root users who have read and write access to the stored password (TSM.sth file), or users who know the password and enter it interactively.