NetBackup™ Deduplication Guide
- Introducing the NetBackup media server deduplication option
- Quick start
- Planning your deployment
- About MSDP storage and connectivity requirements
- About NetBackup media server deduplication
- About NetBackup Client Direct deduplication
- About MSDP remote office client deduplication
- About MSDP performance
- About MSDP stream handlers
- MSDP deployment best practices
- Provisioning the storage
- Licensing deduplication
- Configuring deduplication
- Configuring the Deduplication Multi-Threaded Agent behavior
- Configuring the MSDP fingerprint cache behavior
- Configuring MSDP fingerprint cache seeding on the storage server
- About MSDP Encryption using NetBackup KMS service
- Configuring a storage server for a Media Server Deduplication Pool
- Configuring a disk pool for deduplication
- Configuring a Media Server Deduplication Pool storage unit
- About MSDP optimized duplication within the same domain
- Configuring MSDP optimized duplication within the same NetBackup domain
- Configuring MSDP replication to a different NetBackup domain
- About NetBackup Auto Image Replication
- Configuring a target for MSDP replication to a remote domain
- Creating a storage lifecycle policy
- Resilient Network properties
- Editing the MSDP pd.conf file
- About protecting the MSDP catalog
- Configuring an MSDP catalog backup
- About NetBackup WORM storage support for immutable and indelible data
- MSDP cloud support
- About MSDP cloud support
- About the disaster recovery for cloud LSU
- About Image Sharing using MSDP cloud
- About MSDP cloud immutable (WORM) storage support
- Monitoring deduplication activity
- Viewing MSDP job details
- Managing deduplication
- Managing MSDP servers
- Managing NetBackup Deduplication Engine credentials
- Managing Media Server Deduplication Pools
- Changing a Media Server Deduplication Pool properties
- Configuring MSDP data integrity checking behavior
- About MSDP storage rebasing
- Managing MSDP servers
- Recovering MSDP
- Replacing MSDP hosts
- Uninstalling MSDP
- Deduplication architecture
- Configuring and using universal shares
- Troubleshooting
- About unified logging
- About legacy logging
- Troubleshooting MSDP installation issues
- Troubleshooting MSDP configuration issues
- Troubleshooting MSDP operational issues
- Trouble shooting multi-domain issues
- Appendix A. Migrating to MSDP storage
- Appendix B. Migrating from Cloud Catalyst to MSDP direct cloud tiering
- About direct migration from Cloud Catalyst to MSDP direct cloud tiering
- Appendix C. Encryption Crawler
Encrypting the data
This procedure shows you how to encrypt all your MSDP data. Be aware you can run the encryption_reporting tool in step 4 at any time. It's an independent tool that is used to report the unencrypted data.
Encrypting all MSDP data
- Enforce encryption in MSDP if it's not enforced.
Add the encrypt keyword to the ServerOptions option in
contentrouter.cfg
, and restart MSDP to enforce encryption. Please ensure that no conflict or duplicate keywords are present before adding it. A conflict keyword is noencrypt. For the details of enabling or enforcing encryption, please refer to the following:If Instant Access or Universal Share is configured, you must change
vpfsd_config.json
and restart VpFS to enable encryption separately. You must also create checkpoints for all the VpFS shares after encryption is enabled. - If the rolling data conversion is in progress, wait until it finishes.
- Run the Encryption Crawler process until it finishes.
More information about how to run, tune, and monitor the progress of Encryption Crawler is available.
- Run the reporting tool encryption_reporting to determine if there are any existing data containers with unencrypted data.
More information about how to run the reporting tool is available.
- If unencrypted data is reported, run the encryption_reporting tool again with the --encrypt option and wait until it finishes.
Running the encryption_reporting tool with this option, encrypts the identified data containers by the reporting process.
If the tool with option --encrypt reports errors on encrypting the data containers, check the tool logs and MSDP logs for the reasons. When the errors are confirmed, repeat step 4 and step 5 if necessary.