NetVault 13.1.2 - Administration Guide

You can view and modify the NetVault Client settings by clicking Choose Machine on the Server Settings page or from the Manage Clients link in the Navigation pane.

Other configuration utilities

You can also use the Txtconfig utility to customize default settings for the server and client machines.

Txtconfig

The Txtconfig utility provides a text-based interface to customize various settings for the server and client machines. This utility is available on all supported operating systems. The Txtconfig utility resides in the bin directory under the NetVault installation directory. You must be logged-in with Administrator privileges on Windows and root user privileges on Linux and UNIX to use the Txtconfig utility. For more information, see Configuring default settings using Txtconfig.

Configuring encryption settings

Before you can start using the Plug-in for Standard Encryption or Plug-in for Advanced Encryption, you must configure the encryption settings, which specify the encryption algorithm and encryption key that you want to use. You can configure these settings from the Change Settings link.

The encryption plug-ins provide support for CAST-128, CAST-256, non FIPS compliant AES-256, and FIPS compliant AES-256 algorithms to meet regulatory backup security requirements. You can install these plug-ins on the NetVault Server or Clients to perform encrypted backups for that machine. For more information about these plug-ins, see the Quest NetVault Built-in Plug-ins User’s Guide.

To configure default settings for the encryption plug-ins:

In the Navigation pane, click Change Settings.

On the NetVault Server Settings page, complete one of the following actions:

•

To configure default settings for the NetVault Server, go to Step 3.

•

To configure default settings for a NetVault Client, click Clients. In the NetVault Clients table, select the client, and click Next.

Under Plugins, click Encryption, and configure the following settings.

Table 118. Default settings for encryption plug-ins

Setting

Description

Encrypt ALL Backups on this Client

Once the Plug-in for Standard Encryption or Plug-in for Advanced Encryption is installed on a client, you can do either of the following:

•

Encrypt all backups performed for that client

•

Encrypt specific backups performed for that client

To enable encryption for all backups, select this check box. When you enable encryption for all backups, you cannot change the setting on a per-job basis.

For more information about performing job-level encryption, see Specifying additional options.

NOTE: To perform job-level encryption for backups originating from a NetVault Server or Client, the plug-in should not be configured for encrypting all backups.

Encryption Key String

Type the string that serves as the encryption key for the NetVault machine.

Different platforms allow varying characters and password lengths. We recommend that you use passwords of 32 characters or less. You can use characters from the following set: “A–Z”, “a–z”, “0–9”, and “_”. Key strings that do not conform to these specifications may work on one platform, but may be invalid in another environment.

Available Encryption Algorithms

Select the encryption algorithm that you want to use for backups and restores. Depending on the products that you have installed, the list includes the following options:

•

AES256_OLD (non FIPS compliant)

•

AES256 (FIPS compliant)

•

CAST256

•

CAST128

Click Apply to apply the new settings and close the dialog box.


	NOTE: An encrypted backup can be restored to the original client or an alternate client. In both cases, the plug-in must be installed on the target client and it must be configured as it was when the backup was performed — using the same Encryption Key String and Encryption Algorithm.