> -----Original Message-----
> From: EMC NetWorker discussion 
> [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On Behalf Of Stan Horwitz
> Sent: Saturday, August 15, 2009 11:30 PM
> To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
> Subject: Re: [Networker] Encryption Questions
> 
> > From: "Coty, Edward" <Edward.Coty AT AIG DOT COM>
> > Reply-To: EMC NetWorker discussion 
> <NETWORKER AT LISTSERV.TEMPLE DOT EDU>, "Coty,
> > Edward" <Edward.Coty AT AIG DOT COM>
> > Date: Sat, 15 Aug 2009 19:05:18 -0400
> > To: <NETWORKER AT LISTSERV.TEMPLE DOT EDU>
> > Subject: Re: [Networker] Encryption Questions
> > 
> > On this subject. Any additional costs with using Networker software
> > encryption? Any issues with scanning in a tape that was 
> encrypted with
> > networker and recovering the data?
> 
> I have never tried scanning in a tape that was encrypted with 
> NetWorker;
> however, since the tape labels aren't encrypted, I would be 
> surprised if
> scanning in such a tape was a problem. The encryption 
> capability offered by
> NetWorker is built-in and it does not require any extra 
> licenses, but there
> is no key management, which is a big problem for a lot of 
> people. The only
> extra cost is the extra tape media your backups will require because
> encryption and compression don't play well together.
> 
We are using Quantum's encryption key manager, Q-EKM.  It's a relabel of IBM's 
EKM.  It's fairly straight forward to set up and once installed, it's mostly a 
"set it and forget it" system.  Make an occasional backup of the key manager 
components and key file to media and store appropriately.  All of the 
encryption activity is between the Q-EKM software, the library, and the tape 
drives.  I still get excellent compression on my LTO-4 tapes.  We are 
considered to be a small-medium operation.  The cost of encryption is 
affordable - as Stan said, we don't want tapes falling out the back of the 
offsite transport truck and becoming a news story.

Patti Clark
DOE/OSTI

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER