Hi Ali,
It was a very long time since I lastly worked with Informix, but if I remember it correctly, there is a setting in the $ONCONFIG, DISK_ENCRYPTION .. something to cover encryptions in the database.
Backup / Restore has a flag ontape -r -encrypt
If you want to store this directly on a on-premise storage, sharing same storage with other servers, than Spictera Unified Storage can be a great help.
One can send the backup to a VTL on the Spictera Unified Storage, or to a object-storage/bucket/s3, or mount the storage as a file-system mount point.
The storage is immutable, once the backup is written, it can't be changed/removed. A changed backup is equally to a new version of the same file/object.
This storage works for Any Device, Anywhere using Any Media. Possible to choose media according to defined policies whether it is Disk, CD, Tape, Cloud, NAS...
Eg
# mount -t spfs /backup
Regards Tomas
www.spictera.com
------------------------------
Tomas Dalebjörk
------------------------------
Original Message:
Sent: Tue September 19, 2023 12:02 AM
From: Ali Shahnazi
Subject: Encryption and restore
Hi folks,
- Informix 12.10.FC15
- AIX
- Using raw devices
I'm seting up encryption and came up with a doubt/question
- Intialized an instance
- Backed up and restored with encrypt option ( ontape -p -encrypt)
- Created dbspaces ( took so long )
- Created database and imported data
- Backed up and restore (ontape -p )
Questions:
- In step 5 above, when I kicked of ontape -p, it asked me to remove the key files. It looks like each restore counts as an attempt to do the encryption. Is this right? I was expecting to use the same keys that I created on step 2 and just do a quick backup/restore but it wasn't the case or I'm missing something.
- While I deliberately truncated almost all tables, still the step 3 and step 5 took a long long time. It looks likle the encryption is going through the whole disk even it's an empty dbspaces?
------------------------------
Ali Shahnazi
------------------------------