Volume encryption for OCI
You can encrypt disks in OCI using the following methods:
Default encryption, using Platform Managed Key (PMK).
Customer Managed Encryption Key (CMK), using OCI Master Encryption Key
For more information about OCI encryption, see Oracle Documentation.
Note:
When using VMs with CMK encrypted disks, ensure that the Key Management Service (KMS) in OCI is available. Otherwise, NetBackup may identify the disks as deleted. If this issue occurs, restore the KMS service in OCI, and then run a discovery at the OCI provider plug-in level. This process allows NetBackup to correctly rediscover the disks.
Table: Encryption for creating snapshots
Disk encryption | Snapshot encryption |
|---|---|
PMK | Same PMK is used as the source disk. |
CMK | Same CMK is used as the source disk. |
Table: Encryption for restoring snapshots
Snapshot encryption | Restored disk encryption |
|---|---|
PMK | Same PMK is used as the snapshot. |
CMK | Same CMK is used as the snapshot. |
Table: Encryption for restoring from backup
Snapshot encryption | Restored disk encryption |
|---|---|
PMK | Same PMK is used as the source disk. |
CMK | Same CMK is used as the source disk. |
Table: Encryption during VM restore from snapshot or backup
Snapshot encryption | Restored disk encryption |
|---|---|
PMK | Encryption on disk can be PMK/CMK as per user selection during restore. |
CMK | Encryption on disk can be PMK/CMK as per user selection during restore. |