I have used it, and installed it at many customers. It's easy the 2nd and third time you do, difficult the first time. You actually install Tivoli Key LifeCycle manager on a Server (should be on two servers), and you create a set of keys and store them in the keystore. Then on the 2nd server, you restore that Keystore, so both servers can serve up the same keys for reading and writing. Note, we haven't gotten to the 3rd server yet, which would be at your DR or HA site.
IBM I doesn't do any hardware encryption, it is actually the tape drive that connects via Ethernet to the TKLM Server and requests the keys. You need to order your tape drives with the Transparent Encryption option to do Encryption. The tape drive can be a SAS or Fibre connected back to the IBM i, but not SCSI. I have used the TS3100 and TS2900 and they work great.
Pete
--
Pete Massiello
iTech Solutions
http://www.itechsol.com
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of lketzes@xxxxxxxxxxx
Sent: Monday, June 25, 2012 1:44 PM
To: Midrange Systems Technical Discussion
Subject: RE: BRMS
Pete,
Have you actually used the LTO tape drive hardware encryption? Is it easy to implement? I would imagine it is easier than software. Do you have software keys to admin with the tape drive based encryption? How may questions can I ask in this paragraph?
thanks, Larry
Larry Ketzes
Lead Enterprise Infrastructure Engineer
lketzes@xxxxxxxxxxx
302-594-2146
From:
Pete Massiello - ML <pmassiello-ml@xxxxxxxxxxxx>
To:
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date:
06/25/2012 12:42 PM
Subject:
RE: BRMS
Sent by:
midrange-l-bounces@xxxxxxxxxxxx
BRMS has an OPTIONAL software encryption component, it will be much slower than hardware encryption.
Pete
--
Pete Massiello
iTech Solutions
http://www.itechsol.com
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of lketzes@xxxxxxxxxxx
Sent: Monday, June 25, 2012 9:25 AM
To: midrange-l@xxxxxxxxxxxx
Subject: BRMS
Hello group,
I've not used BRMS in many years and I have a question. I've been told that BRMS does encryption for backups. Is this true, and if so, does it do it through the software or just control the encryption to the tape drive that would do it?
thanks, Larry
Larry Ketzes
Lead Enterprise Infrastructure Engineer
lketzes@xxxxxxxxxxx
302-594-2146
The information contained in this message may be CONFIDENTIAL and is for the intended addressee only. Any unauthorized use, dissemination of the information, or copying of this message is prohibited. If you are not the intended addressee, please notify the sender immediately and delete this message.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
The information contained in this message may be CONFIDENTIAL and is for the intended addressee only. Any unauthorized use, dissemination of the information, or copying of this message is prohibited. If you are not the intended addressee, please notify the sender immediately and delete this message.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
midrange.com
