We are obliged to be a DR center for several of our customers, and many of them require the use of encrypted tapes. We have a tape library with fiber drives, and have successfully restored data from customers using both TKLM and EKM for key managers.
We now have a customer that wants to test restoring data encrypted by using BRMS Software encryption. I've read the IBM techdocs explaining the process, and it doesn't seem to me to be optimized for DR backups intended to be restored on a different system. I'm curious if anyone has attempted this, general opinions, and were you successful or not? Does anyone know if the keystore gets updated every time a BRMS backup is made, which would require exporting a copy of the keystore (and all the steps needed to accomplish that) with every off-site tape? Or would we just need a relatively current copy of the customer's keystore?
Attention: This electronic document and associated attachments (if any) may contain confidential information of the sender (SHAZAM Network) and is intended solely for use by the addressee(s). Review by unintended individuals is prohibited. If you are not the intended recipient: (i) do not read, transmit, copy, disclose, store, or utilize this communication in any manner; (ii) please reply to the sender immediately, state that you received it in error and permanently delete this message and any attachment(s) from your computer and destroy the material in its entirety if in hard copy format. If you are the intended recipient, please use discretion in any email reply to ensure that you do not send confidential information as we cannot secure it through this medium. By responding to us through internet e-mail, you agree to hold SHAZAM, Inc. and all affiliated companies harmless for any unintentional dissemination of information contained in your message. Thank you. (2)