In-flight Encryption for Aux copy in 11.32

Hello @Nikos.Kyrm 

These settings will encrypt the data at rest, but if you want to encrypt in-transit data, you will need to configure a Network Tunnel between the source and destination machines.

Network Routes - https://documentation.commvault.com/v11/expert/network_routes.html

• HTTPS encryption in the tunnels. The Commvault software supports HTTPS encapsulation in all tunnel connections, which protects all data in transit by using the TLS 1.3 protocol with the replaced TLS_AES_256_GCM_SHA384 cipher suite. After a successful authentication, and based on the configuration, HTTPS traffic can be encrypted with the replaced TLS_AES_256_GCM_SHA384 cipher suite; however, if you want to save CPU cycles, you can set up connections using plain text.

Setting up a One-Way Direct Connection (Client to CommServe) Using Advanced Network Settings - https://documentation.commvault.com/v11/expert/setting_up_one_way_direct_connection_client_to_commserve_using_advanced_network_settings.html

Setting up a Two-Way Direct Connection Using Advanced Network Settings - https://documentation.commvault.com/v11/expert/setting_up_two_way_direct_connection_using_advanced_network_settings.html

Thank you,
Collin

Dear @Collin Harper 

Thanks a lot for your reply.

So, in order to establish encrypt in-transit data must configure Two-Way Direct Connection Using Advanced Network Settings between MA ↔ MA, right?

Im not sure which steps to follow.

Best regards,
Nikos

@Nikos.Kyrm when the encryption is enabled on the storage pool of the secondary copy, then data is encrypted on storage as well as over the network during transfer.

Dear all thanks a lot for your feedback,

Although this end-to-end encryption request it was particularly urgent, I opened a ticket to Commvault (Case : 240213-208).

Commvault Support confirmed that only this configuration (Enable encryption only in Primary Disk Library on the command center) will encrypt on source, network, and secondary destination copies (copy-2-Azure).