Re: [Bacula-devel] Feature request: Hardware Encryption on LT04 Drives

[Kern S. <ke...@si...>]

Hello,

It seems to me that this is something that should be handled externally to 
Bacula.  Bacula does not issue any SCSI commands directly (indirectly via 
mtx) and that is not something we are planning.  I think there are sufficient 
features already in Bacula to permit one to turn on/off encryption or for one 
to enable it before starting Bacula.

If encryption on/off is really needed down to the Volume level or to the Job 
level, then possibly there might be a need for additional functionality 
within Bacula, but any Feature Request will need to be rather specific on 
what is needed.  I suspect that even in that case, it could be handled by an 
SD plugin, possibly with a few minor additions to the Bacula SD plugin API.

Best regards,

Kern

On Wednesday 04 February 2009 15:17:05 Jason A. Kates wrote:
> Kern,
> I have this feature request:
>
> What:  To provide a way for the storage daemon to enable hardware
> encryption on tape drives that support encryption.
>
> Why:  Hardware encryption should not effect the backup speed and will
> still allow hardware compression of the data being backed up.   LT04 and
> newer tapes drives support hardware encryption and should be cross
> vendor compatible (per lto.org).
>
> When unencrypted tapes are lost that contain sensitive customer data or
> personal information most localities require companies to notify the
> affected individuals.
>
>
> Notes:
> This thread has the source to program to send SCSI security commands to
> LTO4 tape drives attached to it.
> http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=10944762
>7+1233755382157+28353475&threadId=1171171
>
> This link seems to be on point, one of the links it has is HP's lto4
> Encryption FAQ
> http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=10944762
>7+1233754299099+28353475&threadId=1245348
>
>
>
> If this needs anything else for the feature request please let me know.
> 			Thanks -Jason