KMS database encryption settings
Table: Required information for the encryption database describes the settings to configure the NetBackup Key Management Service database and the encryption keys for your cloud storage. This information protects the database that contains the keys that NetBackup uses to encrypt the data. Key groups and key records also are required for encryption. The Cloud Storage Server Configuration Wizard and the Disk Pool Configuration Wizard configures the encryption for you.
Table: Required information for the encryption database
Field Name | Required information |
|---|---|
This field displays the name of your NetBackup master server. You can only configure KMS on your master server. This field cannot be changed. If KMS is not configured, this field displays . | |
Enter the key that protects the database. In KMS terminology, the key is called a passphrase. | |
Re-enter the host master key. | |
The ID is a label that you assign to the master key. The ID lets you identify the particular host master key. You are limited to 255 characters in this field. To decipher the contents of a keystore file, you must identify the correct Key Protection Key and Host Master Key. These IDs are stored unencrypted in the keystore file header. You can select the correct ones even if you only have access to the keystore file. To perform a disaster recovery you must remember the correct IDs and the pass phrases that are associated with the files. | |
Enter the password that protects the individual records within the KMS database. In KMS terminology, the key is called a passphrase. | |
Re-enter the key protection password. | |
The ID is a label that you assign to the key. The ID lets you identify the particular key protection key. You are limited to 255 characters in this field. To decipher the contents of a keystore file, you must identify the correct Key Protection Key and Host Master Key. These IDs are stored unencrypted in the keystore file header. You can select the correct ones even if you only have access to the keystore file. To perform a disaster recovery you must remember the correct IDs and the pass phrases that are associated with the files. |
After you configure the storage server and disk pool, Veritas recommends that you save a record of the key names.
See Saving a record of the KMS key names for NetBackup cloud storage encryption.