Enabling Veritas Data Deduplication encryption
Access Appliance supports Veritas Data Deduplication encryption for all backup and deduplication jobs. This section describes how to enable encryption for the backup jobs.
You can do it in two different ways.
Method 1:
Note:
In NetBackup long-term data retention (LTR) use case, the server side refers to Access Appliance and the client refers to the media server.
For details on the MSDP compression and encryption settings, see the MSDP compression and encryption settings matrix section in the Configuring deduplication chapter in the Veritas NetBackup Deduplication Guide on SORT.
For details on configuring encryption for MSDP backups, see the Configuring encryption for MSDP backups section in the Configuring deduplication chapter in the Veritas NetBackup Deduplication Guide on SORT.
Method 2:
You can use the Access Appliance command line to enable the encryption feature on Veritas Data Deduplication servers. If encryption is enabled in the Veritas Data Deduplication server, then any data coming from any media server is encrypted.
To enable encryption on Veritas Data Deduplication server
- To enable encryption on the deduplication storage server, enter the following:
dedupe> encryption enable config_name
This command should be run on the Veritas Data Deduplication server. To enable encryption, the Veritas Data Deduplication server should be in start state. Once encryption is enabled, it encrypts the forthcoming data segments of data containers.
The config_name parameter is an optional parameter for the dedupe encryption enable command when only one deduplication server is present in the cluster. It is mandatory if more than one deduplication server is present.
The encryption crawler searches all MSDP pools to check for unencrypted data. It traverses all the existing data containers and if a data segment is found to be not encrypted, that segment is encrypted by the encryption crawler.
To enable the encryption crawler on Veritas Data Deduplication server
- To enable encryption crawler on the deduplication storage server, enter the following:
dedupe> encryption crawler enable config_name
This command should be run on the Veritas Data Deduplication server. To enable encryption crawler, encryption should be enabled on the Veritas Data Deduplication server.
The config_name parameter is an optional parameter for the dedupe encryption crawler enable command when only one deduplication server is present in the cluster. It is mandatory if more than one deduplication server is present.
To display the status of the encryption crawler of all deduplication servers
- To display the status of the encryption crawler of all deduplication servers, enter the following:
dedupe> encryption crawler status
To display the status of the encryption crawler of a specific deduplication server
- To display the status of the encryption crawler of a specific deduplication server, enter the following:
dedupe> encryption crawler status <dedup_server>