Basic encryption

Question

I write backups to an on-prem SAN. I have a small amount of data on one client that needs to be encrypted to meet a data at rest encryption requirment.

Is there a way to only encrypt data backed up from a singe directory on a Windows client? Or a single drive on that client?

If not, what is the best option for encrypting my data at rest with the least impact on backup times. I do not need to encrypt it in transit, just at rest.

Thanks,

Larry Upton

Albert Williams · Accepted Answer

Hello @Larry UptonThe first issue you may hit with needing to encrypt only one clients worth of data is if you are deduping the data. You cannot have half of a DDB with encryption and the other without as it will either ruin the dedup rate or no be secure at all depending on how you cut it.The following goes over where to enable it and how to do it:https://documentation.commvault.com/2023e/expert/105324_configuring_software_encryption.htmlIn your scenario i would use enable it on the storage policy and that can be done here:https://documentation.commvault.com/2023e/expert/7779_configuring_software_encryption_on_primary_copy.htmlPlease reach out if you have any issues or question's with the above.Kind regardsAlbert Williams

Larry Upton · Answer

Thanks for the response Albert, I never thought about there being an issue with DDB. I appreciate the doc links as well.

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded