08-20-2013 07:12 AM
I am using Dp6.21 with cell manager on windows 2003. Almost all clients are also windows only, except 3 Solaris clients.
Now we got a request from our management due to auditing request that " We need to encrypt communication between server & Cell manger and Encrypting data on tapes".
For that we have purchased the license also which is "BB618BAE". 10nos
Can anyone please help me out how to install these licenses with any documents availaible and is this license are ok for our both objectives?
Thanks for any support in advance.
Solved! Go to Solution.
08-20-2013 09:57 AM
You can install the license either from the GUI
- Go to the Client context, expand your list of clients, click on the hostname of your Cell Manager to high-light
Right-click on the hostname of the Cell Manager, click on Edit (top left corner of the screen), click Add,
Pick License, and type in the license string
or, my preference
- On your Cell Manger, edit the file using Notepad
Program Files -> Omniback -> Config -> Server -> Cell -> lic.dat
and either type in the license string, or Copy and Paste it from your e-mail. Since I am the world's worst typist, I prefer to
Copy / Paste
Save the file, stop and restart Data Protector. Check your license installation by running this fro the MS-DOS prompt on the Cell Manger
cd \Program Files\Omniback\bin
Enabling Encrypted Communications is done by right-clicking on the Cell Manager, and on each client, and clicking Enable Encrypted Communications
For more information, in your GUI, click Help -> List Topics, and search 'Encrypted', there is a lot there. Also, on the SSO site, which you used to make this inquiry, click on Manuals, click HP Data Protector, chose version 6.20. There is a whitepaper there that deals with Encrypted Communications Certificates that you should probably have
Finally, there have been a lot of problems reported with Encrypted Communications. Please be sure that your patches are up to date
08-21-2013 07:08 PM
"Finally, there have been a lot of problems reported with Encrypted Communications. Please be sure that your patches are up to date."
BOY, is THAT an understatement.
Also, make sure you understand the difference between ECC and encrypting the tapes - they are NOT the same thing.
Bob, for you, did one of the patches allow starting encryption on a "clean" (for lack of a better word) cell manager via the GUI? When I went through 6.2(1) and enabled ECC, I had to run a command line on the CM and then was able to add ECC for the rest of the clients in the cell.
08-21-2013 10:38 PM
Hello Bob & Ken,
Thanks for your feedback and suggstion on encrypting the data. I will go for the encrypted backup with the latest patches.
Ken, Also, make sure you understand the difference between ECC and encrypting the tapes - they are NOT the same thing.
As I am having LTO-3 Tape drive and I believe drive basd encryption is not supported on this, Hence If am using only the encrypted communication license "BB618BAE" is the data on tape is not encrypted?
08-22-2013 08:49 AM
Ken, while the 2 most current sets of patches fixed ECC problems (specifically, the Core patch), none addressed the particular issue that you are talking about
Syed, HW encryption was not made available until LTO-4
08-22-2013 08:55 AM
Then how my backup data on tape will get encrypted as I have LTO3 only. Will software encryption not encrypt my backup on tape?
08-22-2013 10:28 AM
Yes it will be encrypted on tapes with software encryption.
Software encryption encrypts at the Disk Agent level, so right at the begining. Data stays encrypted on the wire and then on tape. This correspond to the licenses you bough. So it protects your data during transport and on storage.
Hardware encryption encrypts data when it arrives in the drive. It protects your data only on storage, not during transport. This is not subject to license in DP.
You might also consider Encrypting Commands and Control. This is the commands from Cell Manager to clients and backwards. This protects the command traffic, not data. This is not subject to license in DP.