Re: Any backup solutions that offer password protected tapes?



Michael Vilain <vilain@xxxxxxxxxxx> wrote in news:vilain-
C1CD5D.13454213012006@xxxxxxxxxxxxxxxxxxxxxxxx:

> In article <1137182501.480041.14420@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
> tonij67@xxxxxxxxxxx wrote:
>
>> Turns out we are persuing a "cheap" alternative here. By that I mean,
>> backing up to disk then encrypting the data using something like GPG
on
>> tape.
>>
>> I have just begun to look into this and I have very little experience
>> with GPG...
>>
>> Does this appear to be a sound idea? It looks good on paper, getting
>> it to work is another thing entirly (at least for me!)
>
> At first blush, here are a few thoughts:
>
> - How would they do restores on bare-metal hardware with or without the
> password?
>
> - I think you'll going to need a fast machine with lots of CPU to do
the
> streaming encryption.
>
> - This is a custom backup system outside the normal and usual tools any
> sysadmin would be expected to know walking into a job. How will they
> maintain or make changes to it? Train users? Write documentation? As
> long as it's in production, they'll have to do these things.
>
> - It is conceivable you could modify some PD backup software (amanda,
> star, etc.) to encrypt the output to tape and decrypt the input from
> tape for restores. Would you need a password vault of some sort to
> manage passwords? This isn't a small project in my mind. I hope you
> charge accordingly.
>
> - Usually, "cheap" means they either don't have money or don't want to
> spend money. I hope they're paying you all you can get away with
> charging for this. Don't deliver anything until the cashiers check
> clears the bank.
>
> - What if you're hit by bus (or die of Bird Flu or smallpox)?
>

In the past week I have gone thru Veritas netbackup business version 4.5,
I remember seeing the ability to set a password on the backup volume.
Can't swear where but I know I saw it in there...
.



Relevant Pages

  • Re: Any backup solutions that offer password protected tapes?
    ... backing up to disk then encrypting the data using something like GPG on ... tape. ...
    (comp.unix.solaris)
  • Re: Gnugpg
    ... encrypting with x.509 digital certificates. ... Gpg seems kludgey to me. ... The algorithms used in later versions of PGP and now GPG are much more secure, and I'd rather use just one system for my encryption and signing that works. ... The needed packages are mozilla-thunderbird-enigmail, gnupg. ...
    (Ubuntu)
  • Re: Nice GUI/CLI Password Manager for Linux
    ... vim can be configured to automatically use gpg to decrypt *.gpg files ... never touches the disk (though encrypting your swap partition too wouldn't ... autocmd BufReadPre,FileReadPre *.gpg set noswapfile ... " Switch to binary mode to read the encrypted file ...
    (Debian-User)
  • Re: Any backup solutions that offer password protected tapes?
    ... > backing up to disk then encrypting the data using something like GPG on ... I have the key backed-up on a pen drive and a remote system both gpg ... look at aespipe which comes with loop-aes specifically the script: ...
    (comp.unix.solaris)
  • Re: EKM and Hash Keys
    ... using a KEY to encrypt data on tape; ... Usually you use HASH when are encrypting data using a PUBLIC certificate ... You can declare HASH mode in SMS dataclas or in DD JCL. ...
    (bit.listserv.ibm-main)