Modify the DTE mode on a backup image
The data-in-transit (DTE) feature of NetBackup introduces an additional image attribute (DTE mode) when a backup image is created.
Primarily, the global DTE mode and the client DTE mode decide whether the data-in-transit encryption takes place or not for a NetBackup operation. If the data is encrypted during backup, the DTE mode attribute of the associated NetBackup image is set to On.
If based on the global DTE mode and the client DTE mode, the data cannot be encrypted during backup, the DTE mode attribute of the image is set to Off.
The image DTE mode should be honored and retained for all subsequent operations on that image. For example, restore and secondary operations like duplication, replication, import and so on. If the image DTE mode is set to On, subsequent operations always encrypt the data for DTE supported hosts.
If the host does not support DTE, then the job fails. If the image DTE mode is set to Off, the DTE for subsequent operations is decided based on the global and client DTE modes at that point of time. This is the default behavior.
In certain cases, you may want to modify the image DTE mode that was set at the time of its creation.
RESTful API to be used to modify the image DTE mode:
PATCH - /catalog/images/{backupId}
To modify the image DTE mode
- Run the following command:
bpimage -update -image_dtemode Off|On
You can also change the image DTE mode using the NetBackup Web UI > Catalog node.