Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. External key management service
  5. Determining a key group name during storage configuration
NetBackup™ Security and Encryption Guide

Determining a key group name during storage configuration

NetBackup uses the preconfigured keys from an external KMS during storage configuration.

Ensure that the keys are created in an external KMS server with an attribute x-keygroup and are assigned to a key group name.

For every storage configuration, NetBackup determines the key group name as follows:

MSDP

Specify the key group name

Cloud

The key group name is Name_of_storage_server:Name_of_disk_volume

Tapes

The volume pool name is used as a key group name

For tapes, the volume pool should have ENCR as a prefix.

AdvancedDisk

For UNIX: Name_of_storage_server:Name_of_disk_volume

For Windows: Name_of_storage_server

Feedback

Was this page helpful?
Previous

Listing keys

Next

Working with multiple KMS servers

Feedback

Was this page helpful?