Encrypting backups from the deduplication shell
To encrypt backups on a WORM or an MSDP storage server, you can configure the Key Management Service (KMS) or MSDP encryption.
Note:
Do not use KMS and MSDP encryption together.
Use the following procedures to configure encryption for your backups from the deduplication shell.
To configure KMS encryption
- Open an SSH session to the server as the msdpadm user, or for NetBackup Flex Scale, as an appliance administrator.
- Run the following command:
setting encryption enable-kms kms_server=<server> key_group=<key group>
Where <server> is the hostname of the external KMS server and <key group> is the KMS server key group name.
- To verify the KMS encryption status, run the setting encryption kms-status command.
To configure MSDP encryption
- Open an SSH session to the server as the msdpadm user, or for NetBackup Flex Scale, as an appliance administrator.
- Run the following command:
setting encryption enable
- To verify the MSDP encryption status, run the setting encryption status command.