IBM Support

Multiple encryption keys with the Tivoli Storage Manager Client

Question & Answer


Question

Can multiple encryption keys be saved by the Tivoli Storage Manager client?

Answer

The Tivoli Storage Manager client is only capable of saving one encryption key password. If the client option ENCRYPTKEY SAVE is placed in the Tivoli Storage Manager client options file (dsm.opt), the encryption key password used on the very first operation will be used for all subsequent operations and objects included in those operations.

Example:

An initial backup is taken and file1.txt is encrypted with password "KEY1". Subsequent incremental operations against this file, or any others included for encryption, will automatically use the same encryption key password "KEY1" to encrypt that file. Likewise, restore operations will also automatically use the saved password "KEY1" to decrypt any encrypted files, provided that the encryption key is still saved in the TSM.PWD file or Windows registry.



Note that if files are encrypted with different encryption keys during backup (ie. via the use of the ENCRYPTKEY PROMPT option), then the restore operation will prompt for the encryption key password for each file which does not match the last previously known encryption key password value.

[{"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"Client","Platform":[{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"},{"code":"PF025","label":"Platform Independent"}],"Version":"All Supported Versions","Edition":"","Line of Business":{"code":"LOB26","label":"Storage"}}]

Product Synonym

TSM ADSM ITSM IBM Spectrum Protect

Document Information

Modified date:
17 June 2018

UID

swg21571082