Where encryption fits best - Storage Technology Magazine - Page 1

There are numerous places to embed encryption into your backup infrastructure. Considering key management and performance issues, here are our recommendations.


A tarnished corporate name and possible financial and legal liabilities head the list of management concerns whenever removable disks and tape cartridges holding sensitive information are misplaced or stolen. Encryption can minimize the risks associated with these inevitable occurrences. But with multiple methods available to encrypt data and standards for the long-term management of encryption keys still in their early stages, companies need to proceed cautiously.

Encryption secures data and makes it accessible only to those individuals or applications with the proper credentials. Companies may choose to encrypt data in a number of places in the backup infrastructure to satisfy specific application or corporate requirements. For example:

  • Backup software may include an encryption function that encrypts data on the client or on a designated server before storing the data.


  • Encryption appliances install in the existing backup infrastructure and include purpose-built application-specific integrated circuits (ASICs) or field-programmable gate arrays (FPGAs), which encrypt data at near-wire speeds.


  • Fabric switches and director blades can encrypt data stored to any

    Requires Free Membership to View

    When you register for SearchStorage.com, you’ll also receive targeted emails from my team of award-winning editorial writers. Our goal is to keep you informed on the hottest topics, the latest news and the biggest challenges you face as a storage professional today.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchStorage.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchStorage.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

  • Fibre Channel (FC) SAN-attached storage devices with encryption managed as another fabric service.


  • Tape drives, tape libraries and virtual tape libraries (VTLs) encrypt data as it's placed on disk or tape, and may include encryption for free or as an optional feature.


  • Seagate Technology LLC recently announced that it plans to add Full Disk Encryption (FDE) technology to all of its enterprise-class hard drives in 2008.

This was first published in November 2007