Veritas NetBackup™ AdvancedDisk Storage Solutions Guide
- Introducing AdvancedDisk
- Licensing AdvancedDisk
- Configuring AdvancedDisk
- Configuring the AdvancedDisk option
- About AdvancedDisk file system requirements
- Configuring credentials for CIFS storage and disk storage units
- About AdvancedDisk storage servers
- About AdvancedDisk data movers
- About AdvancedDisk preferred or required read servers
- About data encryption for AdvancedDisk storage
- About key management for encryption of NetBackup AdvancedDisk storage
- Configuring key management for NetBackup AdvancedDisk storage encryption
- Configuring an AdvancedDisk storage server
- About AdvancedDisk disk pools
- Configuring a CIFS disk volume for AdvancedDisk encryption
- Configuring an AdvancedDisk disk pool
- Configuring an AdvancedDisk storage unit
- About storage lifecycle policies
- Creating a storage lifecycle policy
- Creating a backup policy
- Resilient Network properties
- Specifying resilient connections
- Managing AdvancedDisk
- Managing AdvancedDisk storage servers
- Managing AdvancedDisk disk pools
- Viewing AdvancedDisk disk pools
- About changing the AdvancedDisk disk pool size
- Adding volumes to an AdvancedDisk disk pool
- Changing AdvancedDisk disk pool properties
- Determining AdvancedDisk disk pool state
- Changing AdvancedDisk disk pool state
- Determining AdvancedDisk disk volume state
- Changing AdvancedDisk disk volume state
- Merging AdvancedDisk disk pools
- Removing a volume from an AdvancedDisk disk pool
- Inventorying a NetBackup disk pool
- Deleting an AdvancedDisk disk pool
- About monitoring AdvancedDisk storage capacity and usage
- Monitoring NetBackup disk activity
- Viewing AdvancedDisk disk reports
- Displaying detailed AdvancedDisk storage usage information
- Displaying KMS key information for AdvancedDisk encryption
- Toubleshooting AdvancedDisk
Saving a record of the KMS key names for NetBackup AdvancedDisk storage encryption
Veritas recommends that you save a record of the encryption key names and tags. The key tag is necessary if you need to recover or recreate the keys.
See Configuring key management for NetBackup AdvancedDisk storage encryption.
To save a record of the key names
- To determine the key group names, use the following command on the master server:
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkgs
Windows: install_path\Program Files\Veritas\NetBackup\bin\admincmd\nbkmsutil.exe -listkgs
The following is example output:
Key Group Name : UX_Host.example.com:backups Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Oct 01 01:00:00 2013 Last Modification Time: Tues Oct 01 01:00:00 2013 Description : - FIPS Approved Key : Yes
Key Group Name : Win_Host.example.com: Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Oct 01 01:05:00 2013 Last Modification Time: Tues Oct 01 01:05:00 2013 Description : - FIPS Approved Key : Yes
- For each key group, write all of the keys that belong to the group to a file. Run the command on the master server. The following is the command syntax:
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkeys -kgname key_group_name > filename.txt
Windows: install_path\Program Files\Veritas\NetBackup\bin\admincmd\nbkmsutil.exe -listkeys -kgname key_group_name > filename.txt
The following is example output:
nbkmsutil.exe -listkeys -kgname UX_Host.example.com:backups > encrypt_keys_UX_Host.example.com_backups.txt
Key Group Name : UX_Host.example.com:backups Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Oct 01 01:00:00 2013 Last Modification Time: Tues Oct 01 01:00:00 2013 Description : - FIPS Approved Key : Yes Key Tag : 867d710aa7f4c64dcdd2cec6...cce d0c831c1812c510acd05 Key Name : AdvDisk_Key Current State : ACTIVE Creation Time : Tues Oct 01 01:05:00 2013 Last Modification Time: Tues Oct 01 01:05:00 2013 Description : - FIPS Approved Key : Yes Number of Keys: 1 - Include in the file the pass phrase that you used to create the key record.
- Store the file in a secure location.