OnDemand User Group

Off Topic => General => Topic started by: sjagnjic on April 14, 2016, 10:24:13 AM

Title: TSM/SSAM (WORM disk) encryption
Post by: sjagnjic on April 14, 2016, 10:24:13 AM
Is anyone doing encryption on WORM disk?  I'm thinking DR550 (WORM disk) here.  I know the latest version of DR550 is not called that anymore.

Were you able to encrypt data on WORM disk?  Or only the data from "now on" is encrypted and the previous data had to be moved to the new encrypted F/S?

Any other ideas/implementations?

Thanks!
Title: Re: TSM/SSAM (WORM disk) encryption
Post by: Justin Derrick on April 15, 2016, 02:42:03 AM
Hey Sam.

I've worked with WORM tape a bit.  WORM disk (like SnapLock) is easy enough to integrate - I'm working on one of those systems right now.  I don't think TSM supports encrypting disks on its own though.  I haven't gone over all the documentation for TSM 7.1.x.  (Which is now called "Spectrum Archive" -- I suppose it was overdue for rebranding...)

If TSM doesn't support encryption natively in the latest versions, IBM bought a company with a product called 'Vormetric' that did filesystem-level encryption, although I don't know what they call the product today...  I'm not sure if that plays well with SnapLock though.

Long story short, it's going to be an interesting challenge.  If you can find NAS hardware that supports BOTH encryption and WORM locking of data, then you're set...  Otherwise, it's going to be a bit of a mess.

Please keep us posted!

-JD.