Backing Up, Replicating, and Restoring Encrypted Projects and Shares

Use one of the following methods for backing up and restoring encrypted projects and shares:

• NDMP - See NDMP Configuration.
• Remote replication - See Remote Replication.

For remote replication of encrypted projects or shares, both the source and target must support encryption, and meet the following requirements:

• Software release 2013.1.3.0 or later.
• Encryption wrapping keys used by the project or share are available.
• OKM or KMIP key name must be identical in the keystore on both replication source and replication targets.
• OKM Agent ID or KMIP host name must be unique on the replication source and target replication appliances. Replication peer appliances cannot use the same agent or host.
• OKM agents or KMIP servers for the replication peers should be configured on the OKM or KMIP server to see the same key groups.

The replication will fail if you attempt to replicate an encrypted project or share and the target does not support encryption. If the wrapping key is not available on the source or target system, or the target software is earlier than software release 2013.1.3.0, an alert is raised. Review the alerts on both the source and target to determine the reason for the replication failure.

Related Topics

• Data Encryption Workflow

• Managing Encryption Keys

• Encryption Key Life Cycle

• Oracle ZFS Storage Appliance: Remote Replication Compatibility (Doc ID 1958039.1) on https://support.oracle.com/

Inherited Property Settings after Restoration from Backup

In this description, “original” is the project or share that is backed up, prior to restoration.

If the original project or share inherits properties from its parent pool or project, then the restored project or share inherits properties from its target parent. If the original parent has different property settings from those of the target parent, then the inherited property settings of the project or share are changed when the project or share is restored.

If you want the restored project or share to have the same property settings as the original project or share, configure those settings explicitly on the original project or share, instead of having the original project or share inherit the settings.

For example, if an encrypted share inherits encryption property settings from its parent project, specify those encryption property settings explicitly on the share before backing up and restoring the share to a different project that has different encryption settings.