IBM Tivoli Storage Manager for UNIX and Linux Backup-Archive ...

The encryptiontype option allows you to use AES 128-bit data encryption,providing a stronger form of data encryption than DES 56-bit data encryption. Theencryption type only affects backup and archive operations. The data that youinclude is stored in encrypted form, and encryption does not affect the amount ofdata sent or received. During restore and retrieve operations, the encrypted datawill be decrypted with the proper encryption algorithm, regardless of the settingfor this option.Note:1. HSM data migration only supports 56-bit DES encryption. Therefore, eventhough you enabled AES 128-bit encryption for the backup-archive client,migrated files will be backed up using 56-bit DES encryption.Supported ClientsThis option is valid for all clients.Options FilePlace this option in the dsm.sys file. You can also set this option on theAuthorization tab of the Preferences editor. The server can override this.Syntax►►ENCRYPTIONTypeAES128DES56►◄ParametersAES128AES 128-bit data encryption. AES 128-bit data encryption provides a strongerform of data encryption than DES 56-bit data encryption. This is the default.DES56DES 56-bit data encryption.ExamplesOptions file:encryptiontype des56Command line:Does not apply.EncryptkeyThe Tivoli Storage Manager client supports the option to encrypt files being backedup or archived to the Tivoli Storage Manager server. This option is enabled withthe include.encrypt option.All files matching the pattern on the include.encrypt specification will be encryptedbefore the data is sent to the server. There are three options for managing the keyused to encrypt the files (prompt, save, and generate). All three options can beused with either the backup-archive client or the Tivoli Storage Manager API.Chapter 10. Using processing options 307