Predefined Workflow - Modify Storage Policy Copy Encryption Settings

The Modify Storage Policy Copy Encryption Settings is a predefined workflow that allows you to modify the encryption settings of a storage policy copy.

Procedure

1. From the CommCell Browser, go to Workflows.

2. Download the workflow Modify Storage Policy Copy Encryption Settings from the Commvault Store by following the instructions in Download Workflows from Commvault Store.

3. Right-click Modify Storage Policy Copy Encryption Settings, and then click All Tasks > Deploy to deploy the workflow

4. Right-click Modify Storage Policy Copy Encryption Settings again, and then click All Tasks > Execute to run the workflow.

   The Modify Storage Policy Copy Encryption Settings Options dialog box appears.

5. From the Run workflow on list, select the workflow engine to use to execute the workflow.

6. From the Storage Policy list, select the storage policy.

7. Click OK.

   The Encryption Details dialog box appears.

8. From the Storage Policy Copy list, select the storage policy copy, and then click OK..

9. If you selected a primary copy, then the Encryption Details dialog box appears.

   1. Select the Encrypt data checkbox to encrypt the data.

   2. If you selected the Encrypt data checkbox, then enter the following information:

      • Cipher and key length: Select appropriate encryption algorithm and key length.

      • Direct Media Access(External Restore Tools): Select one of the following options.

      • Via Media Password: Select this option to enable the encryption keys store on the media.

      • No Access: Select this option to disable the encryption keys store on the media.

   3. Click OK.

10. If you selected a secondary copy, then the Auxiliary Copy Encryption Mode dialog box appears.

    1. Select one of the following options under Encryption to encrypt the data:

       • Preserve encryption mode as in source: Select this option to copy the backup data to secondary storage with the existing cipher used to encrypt the backup data.

         This is the default option.

       • Re-encrypt data using selected cipher: Select this option to re-encrypt the backup data with the cipher used on the selected storage policy copy and then copy the encrypted data.

       • Store plain text: Select this option to copy the backup data in plain text on the secondary storage.

       • Encrypt on network using selected cipher: Select this option to encrypt the backup data during transmission and then copy the data as plain text on the secondary storage.

    2. Click OK.

    3. If you selected the Re-encrypt data using selected cipher or Encrypt on network using selected cipher option, then the Auxiliary Copy Encryption Details dialog box appears.

    4. In the Auxiliary Copy Encryption Details dialog box, enter the following information, and then click OK.

       • Cipher and key length: Select appropriate encryption algorithm and key length.

       • Direct Media Access(External Restore Tools): Select one of the following options.

       • Via Media Password: Select this option to enable the encryption keys store on the media.

       • No Access: Select this option to disable the encryption keys store on the media.