I recenetly inherited a HP DP admininistration role and I was tasked with proucing a report on our bakcup and verifying that our tapes are properly encrypted.
We are running HP DP 8.12 at at six locations with a MoM at the primary site. Most sites have direct-attached HP MSL2024 tape libraires with LTO5 drives. All tapes should be encrypted.
I beleive I should be able to check the encryption of a tape by using:
omnimm -list_media <tapename> -encryptioninfo
However, when I run this, every meida returns:
Encryption KeyID-StoreID : -
When I look in the MSL2024 managment interface, the tape drives all show 'Encryption not Enabled' and 'Server key not present' under the drive informaton screens.
If I run 'omnikeytool -list -active', I do see several dozen keys. (I am not sure if this is per server or if it is for all servers as they are conencted via MoM).
I searched the HP DP 8.1 Installation and Licensing guide and the only refrence to drive-based encryption is in the appendix where is is noted that it is supported. Seaching the HP DP Help .chm file returns similar results: lots of info on encrypting client-server sessions and alsmot nothing on tape encryption.
I have opened a ticket with HP support and their Costa Rica section is (as usual) less-than-helpful.
Can anyone provide info on how I might be able to verifiy if the tapes written by HP DP are beign encrypted?
Does anyone know of tape drive encryption documetion for use with HP DP? (Specifically how to setup encryption between HP DP and a HP tape library.)