BackBox H4.00 Tape Encryption Option

Configuration
11 BackBox H4.00 Tape Encryption
How it works with the BackPak Domain
A BackPak license key must be installed that allows encryption for the VTCs that will
encrypt.
Whether the client to the Key manager, CLIM for VLE or VTC for non-VLE, the user
must configure the BackPak domain in the same way:
• the encryption is enabled in the Volume Group configuration by choosing an
encryption algorithm (AES-GCM 256 bits)
• the Key Manager must be registered under an arbitrary Key manager ID and
its clients defined
• the setup must be verified by the Test function available Key Manager
configuration page
• the BackPak license key contains a maximum number of encryption drives
concurrently active. The tape work load requiring encryption should be
anticipated, especially in the case of a VLE setup where VLE drives cannot be
used to write non-encrypted backups.
The Key manager ID and encryption algorithm are memorized in the BackPak catalog
of virtual volumes, to known how to decrypt each volume, independently of
configuration changes to the Volume Group, or to the Key Manager server.