Example of setting up NetBackup to use tape encryption
The following example sets up two NetBackup volume pools created for encryption (with the ENCR_ prefix).
The following figure shows the NetBackup Administration Console with two volume pools with the correct naming convention to use KMS.
Figure: NetBackup Change Policy dialog box with KMS volume pool shows a NetBackup Policy that is configured to use the volume pool ENCR_testpool, which is the same name as the key group that you configured earlier.
When a NetBackup image has been encrypted, the key tag is recorded and associated with the image. You can see this information through the NetBackup Administration Console reports, or in the output of the bpimmedia and bpimagelist commands.