Use this dialog box to select the backups that will be verified on a storage policy copy when a data verification operation is run; and to configure the data encryption properties for the storage policy copy.
Data Verification
-
Jobs
-
All Jobs
If selected, all backups on this copy will be verified when a data verification operation is run.
-
All Full Jobs
If selected, only full backups on this copy will be verified when a data verification operation is run.
-
Jobs on or After Date
If selected, only the backup data after the specified date will be verified on this copy when a data verification operation is run.
-
Select a Date
Select a date from the list.
-
-
Expiration
-
Verification expires after n month(s)
Select the number of months for which the data verification will be valid.
-
Software Compression
-
Enable software compression on clients
Select this option to enable software compression on the data backed up from the clients associated with this storage policy copy.
Encrypt Data on primary copy (displayed in primary copies)
This option is visible on global deduplication policy.
Select this option to enable encryption on the primary copy of any dependent storage policy that use this global deduplication policy .
Data Encryption Algorithm
-
Cipher
Displays the ciphers available for data transfer.
-
Key Length
Displays the key lengths available for the selected cipher. Note that the key length options displayed will vary according to the selected cipher.
Note
If the Primary Copies Encryption for Standalone Copies and Global Copies option available on the Encryption tab of the System dialog box is selected, then the software encryption (using Blowfish with Key Length 128) is enabled on the primary copy, even if the encryption setting is not explicitly selected during the storage policy creation process.
Data Encryption (displayed in secondary copies)
Note: The Preserve encryption mode as in source, Re-encrypt data using selected cipher, and Store plain text options are applicable only for secondary copy.
-
Preserve encryption mode as in source
This is the default option. Select this option to copy the encrypted or unencrypted backup data on the source copy as is to the secondary storage.
-
Re-encrypt data using the selected cipher.
Cipher list.
-
Store plain text
If selected, the backup data will be decrypted and then stored as a plain text on the secondary storage.
Note: When you select this option, data encryption with third-party key management server is not supported.
-
Encrypt on network using selected cipher
If selected, during Auxiliary Copy operation, the data will be encrypted on the network with the selected cipher from the Cipher list, and then stored as a plain text on the secondary storage.
-
-
Data Encryption Algorithm
-
Cipher
Displays the ciphers available for data transfer.
-
Key Length
Displays the key lengths available for the selected cipher. Note that the key length options displayed will vary according to the selected cipher.
-
-
Direct Media Access (External Restore Tools)
-
Via Media Password
Data Encryption keys are stored scrambled on the media.
-
No Access
Data Encryption keys are not stored on the media.
-
Throttle Network Bandwidth (MB/HR)
Specifies whether backup throughput is controlled. When selected, use the space to specify a value for the throughput. By default, the value is set to 500 megabytes per hour. The minimum value is 1 and there is no limit to the maximum value; however, the backup throughput is restricted to the maximum bandwidth on the network. This option can be used to reduce (control) the backup throughput so that the entire network bandwidth is not consumed. Increasing this value increases the bandwidth consumption. Note that traffic is throttled on a per-network-agent basis.
When setting up throttling for auxiliary copy operations, if the source and the destination MediaAgent are same, then you must configure the ThrottleLanFreeSDT additional setting to honor the values set for Network Bandwidth Throttling. For more information on configuring an additional settings, see Add or Modify an Additional Setting.
Key Management Server
To associate the copy to a third-party key management server, select a key management server from the Select a Key Management Server list.