After fiddling a bit with tapes, i'm trying to enable hardware encryption on
RDX, using stenc.
Seems supported:
root@sdpve2:~# /usr/bin/stenc -f
/dev/disk/by-id/usb-TANDBERG_RDX_008650987562-0:0 --detail
Status for /dev/disk/by-id/usb-TANDBERG_RDX_008650987562-0:0
--------------------------------------------------
Device Mfg: TANDBERG
Product ID: RDX
Product Revision: 0283
Drive Encryption: off
Drive Output: Not decrypting
Raw encrypted data not outputted
Drive Input: Not encrypting
Key Instance Counter: 0
Volume Encryption: Unknown result '0'
But trying some set of 'address' index (at least, from 0 to 7) there's no
way to enroll the key:
root@sdpve2:~# /usr/bin/stenc -f
"/dev/disk/by-id/usb-TANDBERG_RDX_008650987562-0:0" -e mixed -a 0 -k
"/etc/bacula/certs/sdpve2-8650987562-256-2025.key"
Provided key length is 256 bits.
Key checksum is 9c.
Turning on encryption on device
'/dev/disk/by-id/usb-TANDBERG_RDX_008650987562-0:0'...
Sense Code: Illegal Request (0x05)
ASC: 0x24
ASCQ: 0x00
Additional data: 0x000000000000000000000000
Error: Turning encryption on for
'/dev/disk/by-id/usb-TANDBERG_RDX_008650987562-0:0' failed!
Usage: stenc --version | -g <length> -k <file> [-kd <description>] | -f
<device> [--detail] [-e <on/mixed/rawread/off> [-k <file>] [-kd <description>]
[-a <index>] [--protect | --unprotect] [--ckod] ]
Type 'man stenc' for more information.
I've tried also 128bit key. I've tried with mounted disk or unmounted.
Someone have some clue? Thanks.
--
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
