Hi Eric, You're in luck, as TSM offers various options for encrypting data as it is sent from the client. Up until TSM 5.3, you were limited to 56bit DES for BA Client backups where you do have to manage the keys yourself on the client.
At TSM 5.3 and above, you can have up to 128bit AES backups at the API level as well (in other words, your TDP backups can be encrypted too) - these can be managed using 'Transparent Encryption' which means that you no longer have to manage keys at the client side as they're stored on the TSM server along with the data. Hope that helps, David McClelland Customer Domain Expert - Transactions Shared Infrastructure Development Reuters 85 Fleet Street London EC4P 4AJ -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of Jones, Eric J Sent: 25 May 2005 02:33 To: ADSM-L@VM.MARIST.EDU Subject: [spam] Encryption Good Evening. Running TSM 5.2.2 on AIX 5.2 Clients are a mix of Solaris 7,8,9 AIX 4.2, AIX 5.2, Windows NT, Windows 2000 and Windows 2003 most running TSM 5.2.2. I've been reading the forums and was thinking I would probably not have to worry about this until now. I was asked to check and see what it would take to encrypt our data. I have 2 questions. 1: Is it a problem to use an encryption device to encrypt the data before it is sent to the TSM server? I know I would have to have the encryption key to restore the data but I was wondering if there were any problems that I would face. 2: Can TSM encrypt the data? I've read 1 article that indicated it was in TSM 5.3 but I did not see much on 5.2.2 which we are running. Are there any potential problems with using TSM to encrypt if it is possible? I know if you loose the key your done but other than that. Thanks for all the help, Eric ----------------------------------------------------------------- Visit our Internet site at http://www.reuters.com To find out more about Reuters Products and Services visit http://www.reuters.com/productinfo Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Reuters Ltd.