Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. Configuring data-in-transit encryption (DTE)
  5. Workflow to configure data-in-transit encryption
NetBackup™ Security and Encryption Guide

Workflow to configure data-in-transit encryption

This topic provides the steps to carry out data-in-transit encryption (DTE) in your NetBackup environment. The DTE configuration comprises the following two primary options:

  • Global DTE mode

  • Client DTE mode

Table: Workflow of DTE configuration

Step number

Step

Reference topic

Step 1

Review the configuration settings of the global DTE mode option and configure the option as per your DTE requirements

See Configure the global data-in-transit encryption setting.

Step 2

Review the configuration settings of the client DTE mode option and configure the option as per your DTE requirements

See Configure the DTE mode on a client.

Step 3

Review how the decision about data encryption is made based on the NetBackup operation that you want to perform and the DTE configuration settings.

See How DTE configuration settings work in various NetBackup operations.

Note:

If you plan to modify any existing DTE configuration settings, you must review this topic to understand the impact on the NetBackup operations.

Apart from the primary DTE configuration settings, the following settings are used in certain scenarios:

  • Media server DTE mode

    See Configure the DTE mode on the media server.

  • Backup image DTE mode

    See Modify the DTE mode on a backup image.

    See DTE_IGNORE_IMAGE_MODE for NetBackup servers.

Feedback

Was this page helpful?
Previous

Data-in-transit encryption support

Next

Configure the global data-in-transit encryption setting

Feedback

Was this page helpful?