Configuring encryption for MSDP backups
Two procedures exist to configure encryption during backups for MSDP, as follows:
|
Configure encryption on individual hosts |
Use this procedure to configure encryption on individual MSDP hosts. The ENCRYPTION parameter in the MSDP |
|
Configure encryption for all Client Direct clients |
Use this procedure to configure encryption for all of your clients that deduplicate their own data (that is, client-side deduplication). If you use this procedure, you do not have to configure each client-side deduplication client individually. The ServerOptions parameter in the MSDP See “To configure backup encryption for all backups targeted to this MSDP pool”. |
To ensure that encryption occurs for all backups jobs, configure it on all MSDP hosts. MSDP hosts include the MSDP storage server, the MSDP load balancing servers, and the NetBackup Client Direct deduplication clients.
To configure backup encryption on a single host
- Use a text editor to open the pd.conf file on the host.
The pd.conf file resides in the following directories:
(UNIX) /usr/openv/lib/ost-plugins/
(Windows) install_path\Veritas\NetBackup\bin\ost-plugins
- For the line that begins with #ENCRYPTION, remove the pound sign ( or hash sign, #) in column 1.
- In that same line, replace the 0 (zero) with a 1.
Note:
The spaces to the left and right of the equal sign (=) in the file are significant. Ensure that the space characters appear in the file after you edit the file.
- On the client-side deduplication clients and on the MSDP load balancing servers, ensure that the LOCAL_SETTINGS parameter in the pd.conf file is set to 1. Doing so ensures that the setting on the current host has precedence over the server setting.
- Save and close the file.
- If the host is the storage server or a load balancing server, restart the NetBackup Remote Manager and Monitor Service (nbrmms) on the host.
To configure backup encryption for all backups targeted to this MSDP pool
On the storage server, open the
contentrouter.cfgfile in a text editor; it resides in the following directory:(UNIX)
storage_path/etc/puredisk(Windows)
storage_path\etc\puredisk
- Add encrypt to the ServerOptions line of the file. The following line is an example:
ServerOptions=fast,verify_data_read,encrypt
Encryption is enabled for all data stored on the server, which includes the MSDP storage server, the MSDP load balancing servers, and the NetBackup Client Direct deduplication clients.