BackBox H4.00 Tape Encryption Option

Configuration
33 BackBox H4.00 Tape Encryption
• Select the Volume Group tab
• Select or Create a Volume Group ID
• In the Class Information
o Select the AES-GCM-256 in the Encryption Algorithm drop down list
box
o Select the target Key Manager ID from it drop down list box
• If the setup is for VLE, the Volume Group Media Type must be LTO 4
IMPORTANT: If you already have a Volume Group that you have been using
and want to encrypt content on its media from now on using VLE-CLIM Client,
you can simply modify its Media Type to LTO 4. From that point forward, all
new uses of SCRATCH volumes in the Volume Group (such as for new
backups) will mount as LTO 4 media to be encrypted. Existing ASSIGNED
media will also be mounted as LTO 4 and be read by NonStop applications,
such as RESTORE, even if not encrypted. If the Volume Group uses the
DSM/TC tape catalog, the following MEDIACOM command must be performed
on the Pool associated with that Volume Group:
MEDIACOM
> ALTER POOL vt-pool-name, TYPE ANY
> ALTER TAPEVOLUME *, POOL vt-pool-name, TYPE LTO 4
• Click on the Update Volume Group button at the very bottom of the page
• Repeat for other required Volume Group
• Click on the Save link
Testing BackBox software encryption
configuration
Validate BackBox configuration with the Key Manager
Test functionality
It is a good practice to validate encryption configuration before trying to do
encryption. For a Key Manager ID, the overall configuration and the connectivity to
the key server is verified by clicking the Test link in the Configuration Key Manager
page.