Support for data-in-transit encryption (DTE)
Starting with version 10.0, NetBackup supports data-in-transit encryption (DTE).
You can configure the DTE mode at various levels: global level (primary server-level) and client level.
After you configure the required DTE modes, data-in-transit is encrypted during communication between NetBackup hosts - primary servers, media servers, and clients. The TLS 1.2 or a later protocol is used for data encryption.
To achieve an end-to-end encryption of data within the NetBackup boundary, all NetBackup hosts must be upgraded to 10.0 or later. For more information about configuring data-in-transit encryption, see the NetBackup Security and Encryption Guide.