Sponsored Content
Operating Systems AIX Best method to encrypt AIX LTO6 tape backups? Post 303002296 by c3rb3rus on Monday 21st of August 2017 05:12:53 PM
Old 08-21-2017
Question Best method to encrypt AIX LTO6 tape backups?

Hello,

I need to be able to encrypt LTO tapes that our AIX writes to for backups.

We have a tape library (IBM TS3100) that our AIX host uses to write to LTO6 tapes. We then take those tapes off-site and restore to another AIX system using a 3580-H6S LTO6 tape drive - this is a very simple environment (single AIX host with a tape library/drive directly attached).

I know that the TS3100 has capabilities to encrypt the tapes that we can activate in the web interface of the tape library - however since we need to restore using a 3580-H6S tape drive I don't think this will work.

So from my research it looks like we need to leverage application managed encryption (AME) as this is the only supported form of encryption on the 3580-H6S. It appears we need IBM Security Key Lifecycle Manager (ISKLM) but what I am failing to understand is how all this ties in together. If I install the ISKLM on Windows - do I update the driver configuration on AIX to poll ISKLM for encryption keys (which I would think would be transparent to the backup application as its being done at the driver level). There seems to be a lot of information on various products to make this work and I am just not getting it.

My goal is to encrypt the data offloaded to LTO6 tapes and to make it transparent to the backup application running within AIX (lets assume this is a shell script/wrapper around the tar command).

If anyone could point me to the right direction that would be great.

Last edited by c3rb3rus; 08-21-2017 at 06:54 PM..
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Multiple backups on one tape

For those with backup tapes (and I just bought and installed a Seagate one for my FreeBSD box) I want to know how to get the most out of each tape by placing multiple backups on each tape (potentially 20GB). Please correct me if I'm wrong: First, retension the tape: # mt retension next, turn... (3 Replies)
Discussion started by: WIntellect
3 Replies

2. AIX

backups getting it so the tape doesn't rew.

Currently am running the backup command for AIX 5L and see that the tape is rewinding after the completion of the back. backup -0 -u -f /dev/rmt0 / >> $file 2>&1 What can I do to stop allow the backup to rew after the completion of this job? Any thoughts? Thanks again. (2 Replies)
Discussion started by: justinburbridge
2 Replies

3. UNIX for Dummies Questions & Answers

verifying tape backups

Hello all, how would i go about verifying that a tape is backing up data correctly other than restoring the backup. for example, what command would i use to check the tape for errors? Any and all help is appreciated -Coffee (0 Replies)
Discussion started by: coffeebrown
0 Replies

4. Filesystems, Disks and Memory

Tape drives used for taking backups

Hi, I am a abit new in AIX system administration field. I want to gather knowledge about backup techniques. As per my knowledge we use Tape archives for taking backups. Can anyone pls explain me in detail abt tape archive? Whether these tape archives come along with the systems or we have to... (1 Reply)
Discussion started by: forumsrahul
1 Replies

5. Solaris

Remote Backups to a Tape

My tape library is broken but backups still need to go on .I have 2 boxes running Solaris 10 Got SCSI tape drive attached to the DEV box ( my PROD Box has only fibre) I want to take the prod backup from the DEV box using ufsdump. ie /usr/sbin/ufsdump 0uvf DEV:/dev/rmt/1n... (2 Replies)
Discussion started by: Msororaji
2 Replies

6. AIX

How to optimize our tape backups ?

Hi, I am currently looking at how we can optimize and speed up our backups here. I am just a beginner operator and our system admin hardly knows anything (long term interim). There is this particular TAR backup of DB backups that for a 10.5Gb amount of files, it takes 5 hours to do the backup on... (6 Replies)
Discussion started by: Browser_ice
6 Replies

7. AIX

Tape backups: do you always verify them after doing them ?

It may seam a bit odd that I ask this question. After you have done your backups to tapes, do you verify the content of the tapes ? - never - sometimes - always The reason I am asking is that here in the office, all the backup procedures include verifying the content of the tapes (no... (5 Replies)
Discussion started by: Browser_ice
5 Replies

8. UNIX for Dummies Questions & Answers

Question about a tape write error doing backups

Hello all. UNIX dummy here :p Anyway I was trying to do a full backup of my work server SUN SPARC SERVER 1000 machine (yes we are actually using this dinosaur). I did the ufsdump comand and everything was fine until I got to the dumping of regular files. During the run I got the following... (7 Replies)
Discussion started by: hammerva
7 Replies

9. SCO

SCO tape backups won't restore in Ubuntu Linux environment

Hello folks. I have the following problem: I'm trying to create a tape backup of a list of files on a 10 year old server, running SCO Openserver 5.0.5 (the tape drive is a Seagate STD224000N, connected as a SCSI drive). I then want to restore the contents of this tape onto a new server... (6 Replies)
Discussion started by: klabelkholosh
6 Replies

10. AIX

Ejecting tape on AIX & Some Tape commands

I am trying to use this command to eject the tape mt -f /dev/rmt/0 unload but it gives me error mt -f /dev/rmt/0 unload mt: 0511-575 unload is not a recognized subcommand. Usage: mt Subcommand Valid subcommands are: weof eof fsf bsf ... (5 Replies)
Discussion started by: filosophizer
5 Replies
RESTOR(1M)																RESTOR(1M)

NAME
restor - incremental file system restore SYNOPSIS
restor key [ argument ... ] DESCRIPTION
Restor is used to read magtapes dumped with the dump command. The key specifies what is to be done. Key is one of the characters rRxt optionally combined with f. f Use the first argument as the name of the tape instead of the default. r or R The tape is read and loaded into the file system specified in argument. This should not be done lightly (see below). If the key is R restor asks which tape of a multi volume set to start on. This allows restor to be interrupted and then restarted (an icheck -s must be done before restart). x Each file on the tape named by an argument is extracted. The file name has all `mount' prefixes removed; for example, /usr/bin/lpr is named /bin/lpr on the tape. The file extracted is placed in a file with a numeric name supplied by restor (actually the inode number). In order to keep the amount of tape read to a minimum, the following procedure is recommended: Mount volume 1 of the set of dump tapes. Type the restor command. Restor will announce whether or not it found the files, give the number it will name the file, and rewind the tape. It then asks you to `mount the desired tape volume'. Type the number of the volume you choose. On a multivolume dump the recom- mended procedure is to mount the last through the first volume in that order. Restor checks to see if any of the files requested are on the mounted tape (or a later tape, thus the reverse order) and doesn't read through the tape if no files are. If you are working with a single volume dump or the number of files being restored is large, respond to the query with `1' and restor will read the tapes in sequential order. If you have a hierarchy to restore you can use dumpdir(1) to produce the list of names and a shell script to move the resulting files to their homes. t Print the date the tape was written and the date the filesystem was dumped from. The r option should only be used to restore a complete dump tape onto a clear file system or to restore an incremental dump tape onto this. Thus /etc/mkfs /dev/rp0 40600 restor r /dev/rp0 is a typical sequence to restore a complete dump. Another restor can be done to get an incremental dump in on top of this. A dump followed by a mkfs and a restor is used to change the size of a file system. FILES
default tape unit varies with installation rst* SEE ALSO
dump(1), mkfs(1), dumpdir(1) DIAGNOSTICS
There are various diagnostics involved with reading the tape and writing the disk. There are also diagnostics if the i-list or the free list of the file system is not large enough to hold the dump. If the dump extends over more than one tape, it may ask you to change tapes. Reply with a new-line when the next tape has been mounted. BUGS
There is redundant information on the tape that could be used in case of tape reading problems. Unfortunately, restor doesn't use it. RESTOR(1M)
All times are GMT -4. The time now is 04:02 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy