Looking through the documents i can't seem to see a "How to" guide on implementing encrypting backups.
As i understand there are 2 methods of encryption. Drive-based encryption which is hardware based and encrypts the backup straight to tape but requires LTO4 or LTO5. This is not applicable to us as we unfortunately still use LTO2 drives.
So the only option is Software encryption. As i understand you can encrypt the connection between the Client and the Cell server AND you can encrypt the data before it's written to disk. Do both options require licencing?
Also where do i set the encryptrion? Within the Client properties i can see Encrypted control communication which when ticked shows the certifcate chain etc and you can turn that on. I assume this is the encrypting the connection between the client and the cell manager. With this enabled does this only encrypt the data being transfered to the cell manager but it's decrypted and written to tape unencrypted? Or is it encrypted onto tape as well?
There's also the option within the backup specification under options > filesystem options > advanced > other > data security - here you can select none, 256AES, encode. Is this option the software encryption to tape?
yes it requires a license per client you want to have the encryption for. Please keep in mind that communication at all (the control commands) do not need the encryption license, it can be enabled as a feature. Only when backed up data needs to be encryptes as well you have to order this license.