NetBackup and key records from KMS
The first step in configuring NetBackup to work with KMS is to set up a NetBackup-supported, encryption-capable tape drive and the required tape media.
The second step is to configure NetBackup as you would normally, except that the encryption-capable media must be placed in a volume pool with the identical name as the key group you created when you configured KMS.
Note:
For AdvancedDisk and tape storage, the Key Management feature requires the key group name and NetBackup volume pool name match identically and both be prefixed with ENCR_. For Cloud Storage and PureDisk key group name should be storage_server_name:volume_name. This method of configuration-enabled encryption support to be made available without requiring major changes to the NetBackup system management infrastructure.