210 - Ist es möglich, die Dateien mit ISP verschlüsselt abzulegen oder zu übertragen?
Yes, you can back up encrypted files using ISP. However, encryption must first be configured on the ISP client.
Bear in mind that without the encryption password, it is no longer possible to restore the encrypted data.
Setting up encryption
Setting up SP encryption consists of three steps:
Allow encryption in client option file
dsm.opt
(Windows) and in client system option filedsm.sys
(Linux). Two lines must be inserted for this:encryptkey <keytype> ENCRYPTIONTYPE <type>
Keytype
has one of the valuesprompt
,save
orgenerate
.save
only applies when usingpasswordaccess generate
and is required when using ISP schedules.
Type has one of the valuesAES256
,AES128
orDES56
.
Example:passwordaccess generate encryptkey save ENCRYPTIONTYPE AES128
- Insert the specification for the objects to be encrypted in the
inclexcl
file. This can be done usinginclude.encrypt <specification>
entries. Example:include.encrypt /tmp/Encrypt/*
- Start the ISP client and back up a file from one of the directories to be encrypted. During the first encrypted backup, ISP will request the encryption password and store it in encrypted form in the file
TSM.PWD
.
If the encryption password is lost, there is no way to recover the data. For this reason, keep the encryption password safe.
Checking the encryption
Via the command line:
dsmc query backup <file specification> -subdir=yes -detail
Example:
dsmc query backup /tmp/Encrypt/d -detail
Detailed information about the file is output:
Größe Sicher.-Datum Verw.klasse A/I Datei ----- ------------- ----------- --- ----- 72 B 25.02.2013 13:44:56 DEFAULT A /tmp/Encrypt/d Geändert: 25.02.2013 13:35:17 Zugegriffen: 25.02.2013 13:35:17 Komprimiert: NEIN Verschlüsselungstyp: 128-Bit-AES Vom Client dedupliziert: NEIN
You can see in the penultimate line that the encryption type (= Verschlüsselungstyp:
128-Bit-AES
) is active.
Größe Sicher.-Datum Verw.klasse A/I Datei ----- ------------- ----------- --- ----- 72 B 18.02.2013 13:51:34 DEFAULT A /tmp/Encrypt/d Geändert: 18.02.2013 13:51:28 Zugegriffen: 18.02.2013 13:49:39 Komprimiert: NEIN Verschlüsselungstyp: Keine
Here you can see that no encryption type has been set (= Verschlüsselungstyp: Keine) a
nd that the file has not been encrypted accordingly.
Graphical client:
Select a file that you have backed up in encrypted form. Right-click to open “File information” from the menu. Among other things, the encryption type is displayed: Encryption type: 128-bit AES (= Verschlüsselungstyp:
128-Bit-AES
)
If the above setup was not successful, ISP shows that no encryption type has been set by displaying Encryption type: NONE (= Verschlüsselungstyp: Keine)
.