It's not just turn on encryption then start Bacula its slightly more
complicated. It may be just running an external script with parameters
before telling mtx to load the next tape.
The encryption will need at the volume level, the key management will
also need to be dealt with possibly with another column in the Media
table.
Thanks -Jason
On Wed, 2009-02-04 at 16:04 +0100, Kern Sibbald wrote:
> Hello,
>
> It seems to me that this is something that should be handled externally to
> Bacula. Bacula does not issue any SCSI commands directly (indirectly via
> mtx) and that is not something we are planning. I think there are sufficient
> features already in Bacula to permit one to turn on/off encryption or for one
> to enable it before starting Bacula.
>
> If encryption on/off is really needed down to the Volume level or to the Job
> level, then possibly there might be a need for additional functionality
> within Bacula, but any Feature Request will need to be rather specific on
> what is needed. I suspect that even in that case, it could be handled by an
> SD plugin, possibly with a few minor additions to the Bacula SD plugin API.
>
> Best regards,
>
> Kern
>
> On Wednesday 04 February 2009 15:17:05 Jason A. Kates wrote:
> > Kern,
> > I have this feature request:
> >
> > What: To provide a way for the storage daemon to enable hardware
> > encryption on tape drives that support encryption.
> >
> > Why: Hardware encryption should not effect the backup speed and will
> > still allow hardware compression of the data being backed up. LT04 and
> > newer tapes drives support hardware encryption and should be cross
> > vendor compatible (per lto.org).
> >
> > When unencrypted tapes are lost that contain sensitive customer data or
> > personal information most localities require companies to notify the
> > affected individuals.
> >
> >
> > Notes:
> > This thread has the source to program to send SCSI security commands to
> > LTO4 tape drives attached to it.
> > http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=10944762
> >7+1233755382157+28353475&threadId=1171171
> >
> > This link seems to be on point, one of the links it has is HP's lto4
> > Encryption FAQ
> > http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=10944762
> >7+1233754299099+28353475&threadId=1245348
> >
> >
> >
> > If this needs anything else for the feature request please let me know.
> > Thanks -Jason
>
>
--
----------------------------------------------------------------------------
Jason A. Kates ([email protected])
Fax: 208-975-1514
Phone: 212-400-1670 x2
============================================================================
------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel
