NetApp NDMP Hardware Encryption

Encrypting backup data written to tape provides the security needed to prevent unauthorized access to that data in the event physical security of the media is compromised. Data on the tape cannot be accessed without a valid encryption key, which is stored separately from the encrypted media.

DPX supports NDMP hardware encryption for tape drives attached to a NetApp storage system. With hardware encryption, the tape device encrypts data as it is written to the tape.

Encryption keys are generated through the keyring function. See Configuring Keyrings.

Restoring from encrypted tapes is transparent; the encryption keyring is read from the tape volser and the tape is automatically decrypted for restore.

NDMP hardware encryption is described in the following topics:

• Requirements and Considerations for NDMP Hardware Encryption Backups

• Defining Backups for NDMP Hardware Encryption

• Running an NDMP Backup with Hardware Encryption

• Running an NDMP Restore from Encrypted Tapes