Discussions related to exporting backups to tape and backing up directly to tape.
Post Reply
brupnick
Expert
Posts: 196
Liked: 13 times
Joined: Feb 05, 2011 5:09 pm
Full Name: Brian Rupnick
Location: New York, USA
Contact:

VBR v7 - Backup to Tape Encryption

Post by brupnick »

I know that this feature was just announced this morning and because v7 isn't out yet, I'm somewhat expecting the "we're not allowed to say just yet" answer, but I'm going to ask anyway.

Based on the video that was posted, it looks like hardware compression will be supported by this new feature, but unless I missed it, I didn't see anything relating to encryption. Will the files that are written to tape have the option to be encrypted? Unless feature announcement 6 or 7 is the introduction of encrypting the native VBR files (which would be awesome, BTW), I'll have unencrypted files being written to unencrypted tapes. If you're like me and store your tapes at an offsite location (and you're not responsible for transporting them there), I'm sad to say that I won't be able to use this feature until there's a mechanism to encrypt the native files or tapes.

Personally, I'd love to see the ability to encrypt my VBR files, so if that's not one of the remaining two feature announcements, please consider this a +1 for that feature request.

As always, thanks for listening!
tsightler
VP, Product Management
Posts: 6009
Liked: 2843 times
Joined: Jun 05, 2009 12:57 pm
Full Name: Tom Sightler
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by tsightler »

It will support hardware based tape encryption only in the case that the encryption is transparent to the application, i.e. system managed or library managed hardware based encryption will work fine.
oswanson
Lurker
Posts: 1
Liked: never
Joined: Jan 31, 2011 9:15 pm
Full Name: Ole Swanson
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by oswanson »

We recently decided to use MS bitlocker to our backups drives that go offsite. Tip: Make sure that you store the encryption keys somewhere else on your network, plus somewhere else outside of your network (in case of a real disaster). Also drives will encrypt much faster if they have been freshly fomatted.
phil.p
Novice
Posts: 5
Liked: 1 time
Joined: May 14, 2009 11:37 am
Full Name: Phil P
Contact:

[MERGED] V7 Backup to Tape Encryption Support

Post by phil.p »

Hi, I'm looking forward to testing the tape functionality in v7 but would like to know if there will be support for on the fly encryption for these backups?

As tapes often go offsite, having the media encrypted is simply good practice but unlike backup to disk, we can't create pre-encrypted volumes on tapes to store the backups on. We currently use the inbuilt encryption options in BackupExec and it would be nice if we could switch to 100% Veeam backups instead but without encryption this isn't going to be possible.

Thanks,
Phil
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by foggy »

Phil, please see Tom's answer above. Veeam B&R v7 will not provide built-in encryption, however you will have the ability to use hardware-based encryption while offloading backup files to tapes with it. Hope this helps.
peterssachs
Lurker
Posts: 1
Liked: never
Joined: Aug 30, 2011 9:48 pm
Full Name: Peter S Sachs
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by peterssachs »

Unfortunately, our LTO-5 library does not implement Hardware Encryption management though the library itself. I know the higher end units have this feature but I inherited this equipment. Saying that Veeam allows tape encryption if completely implemented on the library level is like saying NTBackup in Windows NT 2000 supports Tape Encryption.

In all honesty in 2013 all tapes should be encrypted in any serious Enterprise. If Veeam 7.0 does nothing to address this I may need to buy Arcserve, BackupExec and similar products invented in the last century.

If anyone knows of a software product that can control the encryption of a LTO-4/5 Library in the background I would love to know. There is no backup at my new company and staring out %100 Veeam would be awesome! I am using two Tandberg LTO-5 1U Storageloaders.
strupp3003
Lurker
Posts: 1
Liked: never
Joined: Nov 18, 2013 2:31 pm
Full Name: Stephan Rupp
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by strupp3003 »

Hello everyone,

we'd also need some type of encryption for our tapes. Reading that Veeam 7 would be capable of using the hardware encryption offered by the drive, i purchased a HP StoreEver Ultrium 6250 LTO-6 SAS drive that is directly (HBA) connected to our Backup-Server running Veeam 7.0 R2. The drive offers hardware Encyption, but i'm not able to find any way to activate it. From the HP Support i only got the Information that i need some kind of Key management System that is integrated in some backup Software (i.e. HP Data Protector). Is there any way of getting some additional Key Management Software to handle the encryption, while using Veeam for the Backups? (Backup to tape itself works fine...)

Any Help / Advice would be highly appreciated!! Thanks

Stephan
tsightler
VP, Product Management
Posts: 6009
Liked: 2843 times
Joined: Jun 05, 2009 12:57 pm
Full Name: Tom Sightler
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by tsightler »

Indeed, the hardware does the encryption, however, something has to manage that encryption. Veeam currently does not have native support for managing the hardware based encryption options which is why my note above specifically mentions that you need either a library or system managed option, i.e. something outside of Veeam itself, to manage the encryption. It sounds like you have a standalone drive which means that library managed encryption isn't going to be an option, so you're down to some type of software that runs on the OS to manage the encryption. Unfortunately, I have no idea if HP offers such software for standalone drives.
ephracis
Influencer
Posts: 10
Liked: never
Joined: Mar 12, 2014 10:42 am
Full Name: Christoffer Brodd-Reijer
Contact:

[MERGED] : Tape encryption

Post by ephracis »

Hi,

My company has just moved to Veeam for its backup solution and we would like our tapes to be encrypted. As I understand it, Veeam does not support encryption in the software, it only supports hardware based encryption (done by the tape drive itself). We use a Dell PowerVault 124T which supports hardware encryption. So I should be good to go, right?

But I can't find where in Veeam I enable hardware encryption on the tape drive. How do I start encrypting the tapes?
Dima P.
Product Manager
Posts: 14396
Liked: 1568 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Tape encryption

Post by Dima P. »

Hello Christoffer,

The hardware encryption (managed by your tape library/standalone driver) should be enabled somewhere in your device management console. You may require additional software installed (for managing encryption keys); I guess this info could be found in the device user guide.

From Veeam B&R, in most of the cases, it should work with no issues, as encryption/decryption would take place on hardware side.
Thank you.
tsightler
VP, Product Management
Posts: 6009
Liked: 2843 times
Joined: Jun 05, 2009 12:57 pm
Full Name: Tom Sightler
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by tsightler »

Exactly, something has to provide the encryption keys, this is the part that Veeam does not currently do. When using library managed encryption there are typically two options, some devices provide a simple USB "dongle" which contains the key and is used to encrypt all tapes. Other libraries use KMS software that is installed on a server in the environment (or in some cases a purpose build appliance) which manages the encryption keys independent of the application.

While I know that newer Dell libraries such as the TL and ML series have at least one of these options available, I'm not sure about the PV124T.
motoxrdr21
Influencer
Posts: 13
Liked: 1 time
Joined: Apr 30, 2014 10:52 am
Full Name: Steve
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by motoxrdr21 »

Is there any update on the availability of encryption key management within Veeam? Is it somewhere on a feature road map with an estimated release time frame? We'll be purchasing a new LTO6 library next year and I need to figure out whether I'm budgeting twice as much on the library plus the additional licensing to get library-managed encryption or if I can use application-managed when it's available in Veeam.

Hardware tape encryption aside I'm amazed we don't have the option to at the very least enable software encryption of vbk files.
veremin
Product Manager
Posts: 20270
Liked: 2252 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by veremin »

With v8 it will be possible to encrypt backup files offloaded to tape mediums by both tape jobs: be it backup to tape or files to tape one. Thanks.
motoxrdr21
Influencer
Posts: 13
Liked: 1 time
Joined: Apr 30, 2014 10:52 am
Full Name: Steve
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by motoxrdr21 »

v.Eremin wrote:With v8 it will be possible to encrypt backup files offloaded to tape mediums by both tape jobs: be it backup to tape or files to tape one. Thanks.
Thanks v.Eremin! Any estimated time frame for a v8 release?
veremin
Product Manager
Posts: 20270
Liked: 2252 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: VBR v7 - Backup to Tape Encryption

Post by veremin »

Check the latest community digest:
Gostev wrote:v8 release which is planned for early Q4
Post Reply

Who is online

Users browsing this forum: No registered users and 16 guests