Manual retention to protect key file pass phrases
Manual retention is the most secure method for protecting your key file pass phrases.
When you add a phrase by using the bpkeyutil command, complete manual retention as follows:
Write the phrase on paper.
Seal the paper in an envelope
Put the envelope into a safe.
If you subsequently need to restore from encrypted backups and you have lost the key file, do the following:
Reinstall NetBackup.
Use bpkeyutil to create a new key file by using the pass phrases from the safe.