Display KMS key information for AdvancedDisk encryption
You can use the nbkmsutil command to list the following information about the key groups and the key records:
|
Key groups | |
|
Keys |
Note:
Cohesity recommends that you keep a record key information. The key tag that is listed in the output is necessary if you need to recover keys.
To display KMS key group information
- To list all of the key groups, use the nbkmsutil with the -listkgs option. The following is the command format:
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkgs
Windows: install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil -listkgs
The following is example output on UNIX hosted storage. On Windows, the volume name is not used.
Key Group Name : AdvDiskServer1.example.com:AdvDisk_Volume Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Jan 01 01:00:00 2013 Last Modification Time: Tues Jan 01 01:00:00 2013 Description : -
To display KMS key information
- To list all of the keys that belong to a key group name, use the nbkmsutil with the -listkgs and -kgname options. The following is the command format:
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkeys -kgname AdvDiskServer1.example.com:AdvDisk_Volume
Windows: install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil -listkeys -kgname AdvDiskServer1.example.com:
The following is example output on UNIX hosted storage. On Windows, the volume name is not used.
Key Group Name : AdvDiskServer1.example.com:AdvDisk_Volume Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Wed Nov 30 16:53:48 2011 Last Modification Time: Wed Nov 30 16:53:48 2011 Description : - Key Tag : 867d710aa7f4c64dcdd2cec6...cced0c831c1812c510acd05 Key Name : dp-key Current State : ACTIVE Creation Time : Tues Jan 01 01:00:00 2013 Last Modification Time: Tues Jan 01 01:00:00 2013 Description : - Number of Keys: 1