About MSDP encryption
NetBackup provides encryption for the deduplicated data. It is separate from and different than NetBackup policy-based encryption. By default, MSDP encryption is disabled.
Table: MSDP encryption options describes the encryption options.
A different topic describes the interaction of the encryption and the compression settings for MSDP.
See MSDP compression and encryption settings matrix.
Table: MSDP encryption options
| Option | Description |
|---|---|
|
Backup encryption |
For backups, the deduplication plug-in encrypts the data after it is deduplicated. The data remains encrypted during transfer from the plug-in to the NetBackup Deduplication Engine on the storage server. The Deduplication Engine writes the encrypted data to the storage. For restore jobs, the process functions in the reverse direction. The MSDP
See Configuring encryption for MSDP backups. Note: Do not enable backup encryption by selecting the option on the Attributes tab of the Policy dialog box. If you do, NetBackup encrypts the data before it reaches the plug-in that deduplicates it. Consequently, deduplication rates are very low. Also, NetBackup does not use the Deduplication Multi-Threaded Agent if policy-based encryption is configured. |
|
Duplication and replication encryption |
For duplication and replication, the deduplication plug-in on MSDP servers encrypts the data for transfer. The data is encrypted during transfer from the plug-in to the NetBackup Deduplication Engine on the target storage server and remains encrypted on the target storage. The MSDP
Duplication and replication encryption does not apply to clients. NetBackup chooses the least busy host to initiate and manage each duplication job and replication job. See Configuring encryption for MSDP optimized duplication and replication. |
NetBackup 8.0 introduced the Advanced Encryption Standard 256 bit, CTR (AES) encryption algorithm to Media Server Deduplication Pool (MSDP). The AES encryption algorithm replaces the older Blowfish encryption algorithm.