[Veritas-bu] KMS Key Rotation
bob944 at attglobal.net
Fri Mar 12 13:22:24 CST 2010
> Once you have setup the KMS and assuming you want to restore them.
> What is
> the necessary info required to restore.
> Pool Name ??
> Key Name = ??
> Key Tag ??
> Phase-1 and Phase-2 don't show this info.
> From where we will get this info for the restore.
Why are you importing the tapes? If you're restoring to the same
master which created them that's unnecessary.
But whether you've imported the images or the images are still on
their original server, the key tag is what you need, and that shows
up in the GUI (it's in the manual) for each image and, IIRC, in
bpimagelist. That key tag is what NetBackup matches against keys in
Active and Inactive status; if found, that key is used for
If there is no matching key tag, you must restore/import/re-create
it from your documentation and/or the keystore backups you have
maintained. Example management of keys/changes/records has been
supplied earlier, notably by Hinchcliffe.
FYI, I have been told, but have not tested, that _all_ keys in the
keystore, regardless of keygroup, are tested when looking for a
More information about the Veritas-bu