Get answers from your peers along with millions of it pros who visit spiceworks. Data encryption is important for any backup environment. Backup exec provides advanced backup capabilities including. Find answers to how does backup exec 2012 and msl4048 lto4 work together as far as encryption from the expert community at experts exchange.
The service protects critical data by automatically streaming it, encrypted to symantecs secure, offsite data centers. If you use encryption keys with the intelligent disaster recovery option, special considerations apply. Technical supports primary role is to respond to specific queries about product features. How to setup encryption and keys for backup exec 2012. Backup exec 2012, symantec system recovery 2011, a backup exec 3600 appliance and a virtualonly backup exec vray edition. When restricted encryption keys are used to back up data, any users other than the key owner must enter the pass. My storage device is a dell powervault 124t autoloader. Find answers to server 2012 r2 encrypted backup from the expert community at experts exchange. Data encryption solutions for your backup environment. For encryption requirements and permissions, see backup encryption. Symantec backup exec 2012 vray edition better backup for all data sheet. Standard aes encryption to disk or tapebased storage devices, ensures your critical data is secure whether in transit or at rest. If you move a database from one media server to another media server, the encryption keys remain intact as long as the new media server meets the. So if your application can natively dump a backup file to cifs or nfs, youre golden.
You are required to provide the backup exec database encryption key for each of the following scenarios. Backup exec can encrypt data at a computer that uses the remote agent, and then transfer the encrypted data to the media server. Cobian backup is a popular free backup solution for the windows operating system. With backup exec 2012, there is no need for recovery environments, additional virtual machines, or other additional resources to recover granular data. This process was working perfectly fine under backup exec 2010 r2. Veritas backup exec is a data protection software product designed for customers who have. Backup exec administrator can set a default encryption key to use for all backup jobs, templates, and duplicate backup set jobs. Symantec backup exec blueprints 2 notice this backup exec blueprint presentation includes example diagrams that contain objects that represent applications and platforms from other companies such as microsoft and vmware. I am using backup exec 2012 v14 rev1798 64bit, running on windows 2008 server r2. Generally, we advise our clients not to use encryption on backup media. The sections below provide a brief introduction to the steps to encrypting the data during backup.
Jan, 2012 author and talk show host robert mcmillen explains how to change the default overwrite time for a backup device in backup exec 2012. Choosing a backup generator plus 3 legal house connection options transfer switch and more duration. If you enter the correct pass phrase, backup exec recreates the key. Now the person who set this all up, gave all the jobs to tape. Author and talk show host robert mcmillen explains how to setup networking and security for backup exec 2012.
Backup exec endpoint protection encryption pgp netbackup data loss prevention mobile security and management ssl certificates storage foundation high availability symantec. Create an encrypted backup sql server microsoft docs. With backup exec 16, you can save time, get faster backups and recoveries, and reduce costs. The person who creates the key becomes the owner of the key. Installing backup exec 15 on a windows server 2012 r2 system takes around 30 minutes. But i would like to know if there are any ways to use any type of encryption for a sql server 2012 databases. However, if the encryption key cannot be located, backup exec prompts you to provide the pass phrase for the encryption key that was used to back up the data. Dec, 20 i need to enable hardware encryption yet i dont want backup exec to manage any keys. The keys are also stored on the backup server which has free access to these keys so there is no issue during normal backuprestore.
Backups are stored in offsite data centers and run on a schedule or when file changes. Backup exec 15 and later stores sensitive information in the backup exec database using encryption. The risk associated with not being able to restore data is considered greater than the risk of data being stolen. The backup exec 2012 vray edition automatically configures backup and restore operations with intelligent defaults, drawn from both symantecs expertise in data protection and from the most successful policies and settings from the backup exec community. About encryption key management symantec backup exec. Protection for physical environments can be added to the backup exec 2012 vray edition, giving you backup and recovery across your entire environment. Enables support for tape libraries, or optical robotic libraries and library. You can use backup exec with microsoft system center operation manager scom 2007. How does backup exec 2012 and msl4048 lto4 work together. Symantec backupexec 2012 job queued solutions experts exchange. Symantec backup exec about using deduplication with encryption. How to backup encryption certificate and key in certificates manager.
Hardwarebased disk encryption a relatively new approach to providing encryption of stored data hardwarebased encryption moves the encryptiondecryption function inside the hard disk drive isolating the encryption functions and keys in the disk drive subsystem, where they are not accessible by the. Backup exec does not encrypt backup exec metadata or ondisk catalog file and directory information. Create an encryption key while creating the backup job. Encryption will, of course, slow down the backup and restore times. The program has made it into our free backup software list thanks to its feature set and the fact that it is regularly updated by the developing company. Backup exec has an installation process that is well automated. If you do decide to encrypt your backups, make sure you keep copies of the password in multiple, secure locations. If backup exec cannot locate an encryption key while a catalog job is processing, backup exec sends an alert. In order to secure access to your data backups, you must encrypt them. How does backup exec 2012 and msl4048 lto4 work together as. When a user creates an encryption key, backup exec marks that key with an identifier based on the loggedon users security identifier. For windows server 2012 and later computers, you cannot install backup exec or the agent for windows on a volume that is enabled for deduplication in windows or an refs volume.
Cobian backup 11, now with backup encryption ghacks tech. Click on the browse button, navigate to where you want to save the backup to, enter a file name you want for the backup, click on save, and click on next. I noticed that in the past on other backup software, that if the qekm server is down the backup will not happen. Unable to delete the encryption key from backup exec. Author, teacher, and talk show host robert mcmillen shows you how to use encryption to backup data in backup exec 15. For a complete walkthrough of the different steps of encrypting your backup using transactsql, see create an encrypted backup.
How to change the default overwrite time for a backup device. Jan 17, 2012 author and talk show host robert mcmillen explains how to setup networking and security for backup exec 2012. Symantec vision 2012 backup exec has changed with the environment and the requirement lower budgets with fewer people doing more rearchitecting in order to cut costs. How to use encryption to backup data in backup exec 15. Solved backup exec 2012 encryption symantec spiceworks. The ca arcserve r16 and backup exec 2012 imagebased backup components can both create snapshots as often as every 15 minutes.
However, it is possible to override the default key for a specific job. Server 2012 r2 encrypted backup solutions experts exchange. The installation wizard can be started from the backup exec installation media or the management console to push agents out to the physical servers, hypervvmware virtual machines, applicationdatabase systems hosting active directory, exchange. For more information regarding the terms and usage used in this document, please. Backup exec 2012 windows small business edition standard license essential, 1 year bands. To enable fips compliance, select the use fips 1402 compliant software encryption option in the network and security settings use software compression with encryption if the data must be compressed. See exporting the backup exec database encryption key. The restore selection list in popup box is not visible under job setup backup selection list section as this section is for backup selections not restore selections. Technical support symantec technical support maintains support centers globally. Seamless migration from 2010, 2012, 2014 and 15 backup exec maintains older. Backup exec 2012s approach uses symantec volume snapshot provider vsp or. There are several different data encryption solutions to choose from.
You are required to provide the backup exec database encryption key for each of the. Realistically, the issue is a people issue not a technological one. Unifying cloud and onpremises security to provide advanced threat protection and information protection across all endpoints, networks, email, and cloud applications. T10 encryptionsupport for lto tape drives which utilize t10 encryption. Set up in three steps using our webbased management console. Run backup exec services in fips mode and use 256bit aes encryption to be fipscompliant. Hardware encryption is supported only on tape drives with a footnote. Take a closer look at the new key features and innovations introduced in backup exec 16 and previous versions of backup exec outlined in the table below. Backup and disaster recovery overview symantec backup exec 2012 is one integrated product that protects virtual and physical environments, simplifies both backup and disaster recovery, and recovers data or systems at any scale, from an individual item to an entire server.
About restoring encrypted data symantec backup exec. Use the following steps to create an encrypted backup of a database to a local disk. How to setup networking and security for backup exec 2012. Backup exec is available in several configurations that can accommodate networks of all sizes. The developers of cobian backup have released a beta version of the upcoming cobian backup 11 today, which gives everyone an opportunity to test the new. Installs the backup exec administrators guide in a pdf file format. Powered by vray technology, backup exec 2012 vray edition offers unparalleled capabilities for virtual backup. When you install backup exec, the installation program installs the necessary encryption software on the media server and on remote computers that use the remote agent. Symantec white paper symantec backup exec 3600 appliance. Windows storage server 2008 the operating system included on the backup exec 3600 appliance. You are required to provide the database encryption key for disaster recovery and migration scenarios, for example. Dxiseries configuration and best practices guide for backup exec from veritas this guide seeks to help quantum customers who own dxiseries systems dxi4000series, dxi6000series, dxi8000series, dxi9000series, and dxi vseries, and who also use backup exec from veritas, get the most out of their investment. Any possible way to encrypt sql server 2012 database or. Backup exec is a highperformance data management solution for windows servers networks.
To resolve this issue create a new restore job and select the restore selection list from selection list drop down. Recovering the entire cluster using a manual disaster recovery procedure. You can then recreate the missing encryption key if you know the pass phrase. Ssl encryption technology, and requires a trust relationship between the agent and the. If you were using encryption then you have to add the same encryption passphrases into 2012 to do the restore. With advanced hostbased virtual protection and integrated deduplication, the vray edition gives you worryfree backup and recovery for virtual machines and virtualized applications. If playback doesnt begin shortly, try restarting your device. Both ca arcserve r16 and backup exec 2012 offer snapshotimagebased backups. Encrypting backup tapes with symantec backupexec 12. If you have not exported the database encryption key, you should do so to ensure that you can access the backup exec database later.
With its clientserver design, backup exec provides fast, reliable backup and restore capabilities for servers, applications, and workstations across the network. A database master key for the master database, and a certificate or asymmetric key available on the instance of sql server. How to export the encryption keys in backup exec 15 youtube. Veritas, the veritas logo, and backup exec are trademarks or registered. Backup exec gives you fast, simple, complete, costeffective protection and recovery for your data, wherever it lives. Easily manage a growing backup exec 2012 infrastructure from single servers, windows data centers, vmware and hyperv environments, and remote offices from one console. The backup exec software included on the backup exec 3600 appliance is based upon backup exec 2012. Symantec backupexec 2012 job queued solutions experts. Exporting the backup exec database encryption key refreshing. With backup exec 2012, you dont need to be a backup expert to run expert backups. The information in this document is provided as a supplement to the information contained in the customizing backup options about encryption section of the administrators guide.
I noticed that in the past on other backup software, that if the qekm server is. Author, teacher, and talk show host robert mcmillen shows you how to export the encryption keys in backup exec 15. These diagrams may or may not match or resemble actual implementations found in end user environments. Quantums has a qekm, quantum encryption key manager server, that handles all the key. Author and talk show host robert mcmillen explains how to setup encryption and keys for backup exec 2012. Symantec backup execs awardwinning ability to rapidly back up to disk while eliminating repetitive backup windows, combined with the benefits of exagrid systems compression and bytelevel data deduplication, save you money over standard disk solutions. Symantec backup exec 2012 better backup for all data sheet. A database encryption key is used to encrypt information such as login account credentials and the keys that are used for encrypted backup jobs, for example. With backup exec 15, you can save time, get faster backups and recoveries, and reduce costs. Backup exec 12 encryption solutions experts exchange. Create use an encryption key along with a backup set template or duplicate backup job template.
Both the core backup exec software, as well as the agent software required to protect physical servers, are included in the backup exec 3600 appliance. Backup exec 2012 small business edition is designed to accommodate those small business customers and includes the most commonly deployed microsoft application agents exchange, sql, sharepoint and active directory making it the ideal solution for backup exec customers that are currently licensed for backup exec small business server. How to use encryption to backup data in backup exec 15 youtube. Limitedtime offer applies to the first charge of a. If you require immediate assistance please call support using the division contacts below. Veritas backup exec 16 delivers a marketleading backup and recovery. We dont have sql server 2014 or later versions, so i cant take advantage of the backup encryption enhancement available in those. Symantec backup exec 2012 vray edition is designed to completely protect your vmware or hyperv virtual environments. I am using backup exec 15 fp1 on server 2012 r2, restoring on backup exec 15 fp1 on server 2008 r2 if that is of any use. When the export has successfully finished, click on ok. Backup exec version key features 16 15 2014 2012 2010. I need to enable hardware encryption yet i dont want backup exec to manage any keys. Be found and configured the storage device with no apparent problems.
Recover encrypted backup exec data, without encryption key. Includes intelligent defaults for backup and recovery. How to create, replace or delete an encryption key in. I then turned encryption on for both backup sets and ran the backup again, this time getting a compression ratio of 1.
528 864 8 1051 1399 1026 1057 1142 1437 917 1527 1359 388 1091 943 10 505 683 143 603 835 291 1513 1447 1231 1008 757 455 1385 588 1498 1329 886 1634 279 936 1149 912 440 201 455 197 408