Set up the KMS database for NetBackup AdvancedDisk storage encryption
Setting up the KMS database is the first task in the process of configuring the NetBackup Key Management Service by using NetBackup commands.
To set up the KMS database
- On the NetBackup primary server, create the KMS database by running the nbkms command with the -createemptydb option, as follows:
UNIX: /usr/openv/netbackup/bin/nbkms -createemptydb
Windows: install_path\Veritas\NetBackup\bin\nbkms.exe -createemptydb
The following prompt appears:
Enter the Host Master Key (HMK) passphrase (or hit ENTER to use a randomly generated HMK). The passphrase will not be displayed on the screen. Enter passphrase :
- Enter a passphrase for the host master key (HMK) or press Enter to create a randomly generated key.
After you enter the Host Master Key passphrase, the following prompt appears:
An ID will be associated with the Host Master Key (HMK) just created. The ID will assist you in determining the HMK associated with any key store. Enter HMK ID :
- Enter an ID for the HMK. This ID can be anything descriptive that you want to use to identify the HMK.
After you enter the Host Master Key ID, the following prompt appears:
Enter the Key Protection Key (KPK) passphrase (or hit ENTER to use a randomly generated KPK). The passphrase will not be displayed on the screen. Enter passphrase :
- Enter a pass phrase for the Key Protection Key or press Enter to create a randomly generated key.
After you enter the Key Protection Key passphrase, the following prompt appears:
An ID will be associated with the Key Protection Key (KPK) just created. The ID will assist you in determining the KPK associated with any key store. Enter KPK ID :
- Enter an ID for the KPK. The ID can be anything descriptive that you want to use to identify the KPK.
- In the Activity monitor, start the NetBackup Key Management Service on the primary server.
After you start the service, the initial database setup is complete.
- After you set up the database, create key groups for the volumes in the disk pool.
See Create a KMS key group for NetBackup AdvancedDisk storage encryption.