Creating a KMS key for NetBackup AdvancedDisk storage encryption
Creating a KMS key is the third and the final task in the process of configuring the NetBackup Key Management Service manually.
Each key group requires at least one key record. The key record contains the encryption key itself and information about the key. The key is used to encrypt and decrypt data.
Note:
If you create more than one key for a key group, only the last key remains active.
To create a KMS key
- On the NetBackup master server, create a key record by using the nbkmsutil command and the -createkey option.
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -createkey -keyname keyname -kgname key_group_name -activate
Windows: install_path\Veritas\NetBackup\bin\admincmd\nbkmsutil -createkey -keyname keyname -kgname key_group_name -activate
Use the key group name that you configured when you created the key group.
See Creating a KMS key group for NetBackup AdvancedDisk storage encryption.
You are prompted to enter a pass phrase:
Enter a passphrase:
- Enter and then re-enter a pass phrase; this pass phrase should differ from any pass phrases that you entered already.
- Save a record of the pass phrase.
See Saving a record of the KMS key names for NetBackup AdvancedDisk storage encryption.