Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Deduplication Guide
  3. Configuring deduplication
  4. About MSDP Encryption using NetBackup KMS service
  5. Enabled KMS encryption for Local LSU
Veritas NetBackup™ Deduplication Guide

Enabled KMS encryption for Local LSU

To enable KMS encryption configurations for local LSU, you can create a configuration file and then run the nbdevconfig command.

Configuration file contents for updating encryption configurations are as follows:

Configuration setting

Description

V7.5 "operation" "set-local-lsu-kms-property" string

You can only update the KMS status from disabled to enabled.

V7.5 "encryption" "1" string

Specifies encryption status. This value must be 1.

V7.5 "kmsenabled" "1" string

Specifies the KMS status. This value must be 1.

V7.5 "kmsservertype" "0" string

Specifies the KMS server type. This value must be 0.

V7.5 "kmsservername" "" string

KMS server name that is shared among all LSUs.

V7.5 "keygroupname" "" string

Key group name must have valid characters: A-Z, a-z, 0-9, _ (underscore), - (hyphen), : (colon), . (period), and space.

Example to enable KMS status for local LSU:

V7.5 "operation" "set-local-lsu-kms-property" string
V7.5 "encryption" "1" string
V7.5 "kmsenabled" "1" string
V7.5 "kmsservertype" "0" string
V7.5 "kmsservername" "xxxxxx" string
V7.5 "keygroupname" "xxxxx" string 

Note:

All encrypted LSUs in one storage server must use the same keygroupname and kmsservername. KMS server must be configured. Key group and Key exist in KMS server.

Feedback

Was this page helpful?
Previous

Upgrading KMS for MSDP

Next

About MSDP Encryption using external KMS server

Feedback

Was this page helpful?