Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. NetBackup key management service
  5. Troubleshooting KMS
  6. Solution for backups not encrypting
NetBackup™ Security and Encryption Guide

Solution for backups not encrypting

If tape backups are not encrypted, consider the following solutions:

  • Verify that a backup is not encrypted by checking that the encryption key tag field is not set in the image record.

  • Verify that the key group and volume pool names are an exact match.

  • Verify that there is a key record in the key group with an active state.

Other non-KMS configuration options to look at include:

  • Verify that everything that is related to traditional media management is configured properly.

  • Is the NetBackup policy drawing a tape from the correct volume pool.

  • Does the encryption-capable tape drive have encryption capable media available. For example is LTO4 media installed in the LTO4 tape drive?

Feedback

Was this page helpful?
Previous

Troubleshooting KMS

Next

Solution for restores that do not decrypt

Feedback

Was this page helpful?