Encryption Questions

1) Does setting the Encryption method in Axion Administrator for Clients (and also Groups) cover Client initiated Snapups?

RESPONSE: If the encryption method for a client is defined to be AES 128-bit, and if the "group override" is checked, then all client-initiated snapups will be performed using 128-bit AES encryption. In this case, the definition of "client-initiated snapups" includes only those snapups that are launched by clicking on "Back Up Now" in the Windows Avamar systray icon. Avtar backups that are launched from the command line will NOT be performed using 128-bit AES encryption.

2) If all encryption settings are set to AES, could there be non-AES encrypted snapups? If so, how?

RESPONSE: One possible way to ensure that all backups are performed using AES encryption is to create an avtar.cmd file in the $AVS/var directory of every client, and including "--encrypt=ssl" in the avtar.cmd file.

3) Are snapups encrypted while on disk? If not, does Avamar provide a method to do so?

RESPONSE: By default, the data is not encrypted while on disk. It is possible to invoke an option when the Avamar server is initially started so that the data at rest is encrypted. However, invoking this option significantly impacts the CPU utilization of the Avamar data nodes, and so the overall usable capacity on the disk must be reduced so that we can perform our daily operations.

Generated by Jive on 2013-03-13-07:00 1

Encryption Questions

4) How do we enable encryption for replications?

RESPONSE: You can enable 128-bit AES encryption during replication by adding the following flags to the /usr/local/avamar/etc/repl_cron.cfg file: --encrypt=ssl --encrypt:1=ssl

5) Is Network port 29000/TCP on the Server used for ALL AES encrypted communication and ONLY for AES encrypted communications?

RESPONSE: This is correct.

Please refer to knowledgebase article esg95325 for detailed explanation.

Generated by Jive on 2013-03-13-07:00 2