Solved

Basic encryption

  • 1 December 2023
  • 2 replies
  • 67 views

Badge +1

I write backups to an on-prem SAN.  I have a small amount of data on one client that needs to be encrypted to meet a data at rest encryption requirment.

Is there a way to only encrypt data backed up from a singe directory on a Windows client?  Or a single drive on that client?

If not, what is the best option for encrypting my data at rest with the least impact on backup times.  I do not need to encrypt it in transit, just at rest.

 

Thanks,

Larry Upton 

icon

Best answer by Albert Williams 3 December 2023, 23:53

View original

2 replies

Userlevel 5
Badge +12

Hello @Larry Upton 

The first issue you may hit with needing to encrypt only one clients worth of data is if you are deduping the data. You cannot have half of a DDB with encryption and the other without as it will either ruin the dedup rate or no be secure at all depending on how you cut it. 

The following goes over where to enable it and how to do it: 
https://documentation.commvault.com/2023e/expert/105324_configuring_software_encryption.html

In your scenario i would use enable it on the storage policy and that can be done here: 
https://documentation.commvault.com/2023e/expert/7779_configuring_software_encryption_on_primary_copy.html

Please reach out if you have any issues or question's with the above.

Kind regards

Albert Williams

Badge +1

Thanks for the response Albert, I never thought about there being an issue with DDB.  I appreciate the doc links as well.  

Reply