Loading...

Modifying Data Encryption Properties Using the Command Line Interface

To change data encryption properties on the storage policy copy through the command line, you must use the modify_encryption_properties.xml configuration file, which contains parameters that define data encryption.

Procedure

  1. Log on to the CommServe by running the qlogin command.
  2. Download the modify_encryption_properties.xml file and save it on the computer from where the command will be run.
  3. Choose one of the following methods to modify the data encryption properties:
    • Using the XML configuration file to specify command line arguments:
      1. In a text or XML editor, open the modify_encryption_properties.xml file and change the XML element values.
      2. Run the following command from the software_installation_directory\Base directory:

        qoperation execute -af <download location>\modify_encryption_properties.xml

    • Using the XML configuration file to pass input parameters in the command line:
      1. Run the following command from the software_installation_directory\Base directory:

        qoperation execute -af <download location>\modify_encryption_properties.xml -copyName <storage_policy_copy_name> -storagePolicyName <storage_policy_name> -encryptData <1|0> -encryptionType [Cipher_Name] -encryptionKeyLength [Key_Length] -preserveEncryptionModeAsInSource [1|0] -auxCopyReencryptData [1|0] -storePlainText [1|0] -encryptOnNetworkUsingSelectedCipher [1|0] -storeKeyOnMedia [1|0]

        For more information on parameters, see Elements for Modifying Data Encryption Properties.

Example

To update encryption type to GOST, key length as 256, and to encrypt backup data during transmission and store as plain text on the secondary storage run the following command:

  • Using the XML configuration file as command line argument:

    In the XML configuration file, the following elements are modified:

    • copyName
    • storagePolicyName
    • encryptData
    • encryptionType
    • encryptionKeyLength

    qoperation execute -af download location>\modify_encryption_properties.xml

  • Using the XML configuration file to pass input parameters:

    qoperation execute -af <download location>\modify_encryption_properties.xml -copyName copy01 -storagePolicyName SP01 -encryptData 1 -encryptionType GOST -encryptionKeyLength 256 -encryptOnNetworkUsingSelectedCipher 1 -storeKeyOnMedia 1