Can Archive Shuttle migrate encrypted data? (4377700)

Understanding what Archive Shuttle can and cannot do when it comes to encrypted data. 

Issues can arise with encryption depending on how the systems involved encrypt data. 

Encrypted Items in Archive Shuttle

• What Archive Shuttle Can Do:

  • Archive Shuttle can migrate encrypted emails as long as the encrypted content is readable (e.g., metadata is accessible, and the encryption method is supported by the target system).
  • The encryption itself remains intact during migration if no decryption occurs on the source side.

• When It Fails:

  • If the metadata (e.g., subject, sender, recipient, etc.) of the encrypted item is inaccessible because of encryption, Archive Shuttle cannot process the item.
  • Some encryption methods (e.g., S/MIME, PGP) store decryption keys separately. If these keys are not available or the source system cannot expose decrypted metadata, Archive Shuttle may fail to process such items.

Difference Between Handling and Processing

1. Handled Items:

   • If encrypted items are structurally intact and the metadata is readable, Archive Shuttle migrates them as-is.
   • The migrated items remain encrypted, and access to them in the target system requires the appropriate keys or certificates.

2. Unprocessed Items:

   • If the encrypted items are corrupted or if the source archive does not expose their metadata, Archive Shuttle logs them as failed items.
   • Corruption could also mean that the encrypted file was partially damaged during export from the source system.

How to Ensure Successful Migration of Encrypted Items

1. Verify Metadata Accessibility:

   • Ensure the source system (e.g., EMC SourceOne) exposes metadata like folder structure, headers, and basic properties, even for encrypted messages.

2. Decrypt If Necessary:

   • If decryption is required for the target archive to process the items, decrypt them before migration (if allowed by compliance requirements).

3. Target System Compatibility:

   • Confirm the target archive supports the same encryption protocols used by the source system (e.g., S/MIME or PGP).

4. Run a Pilot Test:

   • Include a subset of encrypted items in the pilot migration to confirm how they are handled.

5. Review Logs:

   • Look for errors related to encryption in Archive Shuttle logs to identify items that may need special handling.

Summary

• Archive Shuttle can migrate encrypted data if metadata is accessible and the encryption is supported in the migration process.
• Encrypted items that are corrupted or where metadata is inaccessible will fail to be processed.
• Pre-migration preparation (ensuring metadata visibility or decrypting as needed) is key to ensuring the successful handling of encrypted data.