New Storage Daemon Directives

There is one new directive in the Storage resource of the Storage Daemon:

Encryption Command = <command>

The command specifies an external program that must provide the keys used to encrypt the volume.

There is one new directive that must be added to all the devices used to encrypt volumes:

Volume Encryption = <no|yes|strong>

It allows you to enable the encryption for a given device. The encryption can be of 3 different types:

no Default, the device don’t do any encryption.

yes The device encrypts the data, but all information in the volume label are left in clear text.

strong The device encrypts the data, and obfuscate any information in the volume label except the one that are needed for the management of the volume. The fields that are obfuscate are: volume name.

See also

Go to:

• Encryption Command

• Compatibility between Volumes Using BB02 and BB03 Formats

• Interoperability between Encrypted and Unencrypted Volumes

• Using Master Key

• Master Key Implementation

• key-manager.conf File Format

• Backup Your Keys

• What Is Encrypted

Go back to the Storage Daemon Data Encryption chapter.

Go back to the main Data Encryption chapter.

Go back to the main Advanced Features Usage page.