Predefined Workflow - Modify Client Encryption Settings

The Modify Client Encryption Settings is a predefined workflow that allows you to modify the encryption settings of one or more clients.

Procedure

1. From the CommCell Browser, go to Workflows.

2. Download the workflow Modify Client Encryption Settings from the Commvault Store by following the instructions in Download Workflows from Commvault Store.

3. Right-click Modify Client Encryption Settings, and then click All Tasks > Deploy to deploy the workflow

4. Right-click Modify Client Encryption Settings again, and then click All Tasks > Execute to run the workflow.

   The Modify Client Encryption Settings Options dialog box appears.

5. From the Run workflow on list, select the workflow engine to use to execute the workflow.

   If you select Any, the workflow engine with the latest deployed version of the workflow is used.

6. From the Client list, select the clients for which you want to modify the encryption settings.

7. Select one of the following options under Encryption:

   • Use Storage Policy Settings: Select this option to encrypt data according to the settings in the storage policy copy.

     Note: This option is applicable for non NAS clients.

   • Encrypt: Select this option to use specific encryption type to encrypt data.

   • Do not encrypt: Select this option to transfer the data without encryption.

8. Select one of the following options under Subclient Encryption:

   • None: Select this option to disable encryption on the subclients within the selected client.

   • Media Only (Media Agent Side): Select this option to transmit the backup data without encryption and then encrypt the data prior to storage. During restore operation, the client decrypts the data.

   • Network and Media (Agent Side): Select this option to encrypt the backup data before transmission and then store the encrypted data on the media. During restore operations, the client decrypts the data.

     This is the default option.

   • Network Only (Agent Encrypts, Media Agent Decrypts): Select this option to encrypt the backup data for transmission and then decrypt the data prior to storage on the media. During restore operations, the MediaAgent encrypts the data and then the client decrypts the data.

9. Click OK.

10. If you selected Encrypt option for client data encryption, then the Encryption Details dialog box appears.

11. In the Encryption Details dialog box, enter the following information:

    • Cipher and key length: Select appropriate encryption algorithm and key length.

    • Direct Media Access(External Restore Tools): Select one of the following options.

      • Via Media Password: Select this option to enable the encryption keys store on the media.

      • No Access: Select this option to disable the encryption keys store on the media.

12. Click OK.

    The Summary window appears.

13. Click OK.