Running an NDMP Restore from Encrypted Tapes

Running an NDMP restore from encrypted tapes is similar to any other restore, with exception of the first step. Briefly, the steps are:

1. On the management console Function Tab Bar, select Restore, then click NDMP.

2. In the Sources pane, select a backup instance.

3. In the Destinations pane, select a destination.

4. On the Task Panel on the left, select Run or Run and Monitor.

DPX reads the keyring from the tape volser and the tape is automatically decrypted for restore.

Warning! When a restore job completes, DPX resets the decryption key in the tape drive, making the tape secure. However, a system disruption may prevent resetting the key. In this case, the tape is in the tape drive, but the encryption key is not reset. This condition enables the data on the tape to be read in plaintext by someone who has NDMP access to the NDMP storage system where the drive is attached. To resolve the error condition, eject the tape from the tape drive. This resets the decryption key. In all cases where the return code of an NDMP hardware encryption restore job is not 0, it is advisable to take steps to ensure security of the restore tape.

Related Topics:

• Introduction to the Restore Functions