About configuring legacy encryption from the client
The following table contains the legacy encryption-related configuration options that are on a NetBackup client. Ensure that these options are set to the appropriate values for your client. These are set if you run the bpinst -LEGACY_CRYPT command from the server to the client name.
Table: Legacy encryption configuration options
Option | Value | Description |
|---|
CRYPT_OPTION = option
|
| Defines the encryption options on NetBackup clients. The possible values for option follow:
|
|
| denied|DENIED
| Specifies that the client does not permit encrypted backups. If the server requests an encrypted backup, it is considered an error.
|
|
| allowed|ALLOWED
| (The default value) Specifies that the client allows either encrypted or unencrypted backups.
|
|
| required|REQUIRED
| Specifies that the client requires encrypted backups. If the server requests an unencrypted backup, it is considered an error.
|
CRYPT_KIND = kind
|
| Defines the encryption type on NetBackup clients. The possible values for kind follow:
|
|
| NONE
| Neither standard encryption nor legacy encryption is configured on the client.
|
|
| LEGACY
| Specifies the legacy encryption type, either 40-bit DES or 56-bit DES. This option is the default if the legacy encryption type is configured on the client, and the standard encryption type is not configured.
|
|
| STANDARD
| Specifies the cipher encryption type, which can be either 128-bit encryption or 256-bit encryption.
|
CRYPT_STRENGTH = strength
|
| Defines the encryption strength on NetBackup clients. The possible values for strength follow:
|
|
| des_40|DES_40
| (The default value) Specifies 40-bit DES encryption.
|
|
| des_56|DES_56
| Specifies the 56-bit DES encryption.
|
CRYPT_LIBPATH = directory_path
|
| Defines the directory that contains the encryption libraries on NetBackup clients.
The install_path is the directory where NetBackup is installed and by default is C:\VERITAS.
|
|
| /usr/openv/lib/
| The default value on UNIX systems.
|
|
| install_path\NetBackup\bin\
| The default value on Windows systems
|
CRYPT_KEYFILE = file_path
|
| Defines the file that contains the encryption keys on NetBackup clients.
|
|
| /usr/openv/var/keyfile
| The default value on UNIX systems.
|
|
| install_path\NetBackup\var\keyfile.dat
| The default value on Windows systems.
|
