Chat now with support
Chat with Support

NetVault Plug-in for Advanced Encryption 11.4 - User Guide

Using the plug-in

•
Encrypting all backups
•
Performing job-level encryption

Encrypting all backups

If encryption is enabled for all backups performed from a particular NetVault Backup Client, there are no additional requirements for encrypting backups. For more information about the backup and restore procedures, see the user’s guide for the relevant plug-in.

Performing job-level encryption

The job-level encryption option can be used to encrypt the primary backup, secondary copy, or both. Encrypting both the primary backup and secondary copy is beneficial when security requirements dictate that the backup must be encrypted while it transfers across the network or while it is stored on a disk-based backup device even if the disk-based backup device is located within the corporate network.

The job-level encryption setting is specified in the Backup Advanced Options Set. For more information about creating an Advanced Options Set for a backup job, see the Quest NetVault Backup Administrator’s Guide.

Encrypting primary backup
To enable job-level encryption for a primary backup:
1
Start the Backup Job Wizard, and open the Advanced Options page.
For more information, see the Quest NetVault Backup Administrator’s Guide.
2
Click Additional Options.
3
In the Additional Options dialog box, select the Enable Encryption check box.
Encrypting a Secondary Copy

NetVault Backup offers the following methods for creating Secondary Copies:

•
Duplicate: The Duplicate method creates an exact copy which is linked to the original backup. This method breaks down the backup into segments and copies the segments to the storage device. During restore, the segments from the primary backup and secondary copy are interchangeable. As it is not possible to mix unencrypted segments with encrypted segments during restore, you cannot enable or disable encryption for the Duplicate. If the original saveset is encrypted, the Duplicate method creates an encrypted copy. If the original saveset is not encrypted, this method creates an unencrypted copy.
•
Data Copy: The Data Copy method breaks down the backup into segments and copies the segments to the backup device. During restore, either the primary backup or the secondary copy is used to recover data; the segments from the primary backup and secondary copy are not interchangeable. Therefore, it is possible to enable encryption for the Data Copy when the primary copy is unencrypted. This option is useful when you want to use the deduplication option for primary backups.
To enable job-level encryption for a Secondary Copy:
1
Start the Backup Job Wizard, and open the Advanced Options page.
For more information, see the Quest NetVault Backup Administrator’s Guide.
2
Click Secondary Copy.
3
In the Secondary Copy dialog box, select the Create Secondary Copy check box.
4
Select the Encrypt Secondary Copy Only check box.
This option can only be used with the Data Copy method.
 
* 
IMPORTANT:  
•
If the primary copy is encrypted, the Data Copy method automatically creates an encrypted saveset whether you select the Encrypt Secondary Copy Only check box or not. Therefore, this option is only useful when you want to create an encrypted secondary copy from an unencrypted primary copy.
•
Encrypted primary backups are not encrypted again if you select the Encrypt Secondary Copy Only check box for a Data Copy.
•
To restore data from an encrypted Data Copy, you must use the primary copy’s Encryption Key.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating