Installing from an encrypted backup, Enter a hex key, Enter an ascii (text) key – Storix Software SBAdmin Solaris System Recovery Guide User Manual

Page 24

Advertising
background image

3. The configuration information from the backup will be compared against the current system configuration to

ensure that everything may be recreated according to the original backup data. If there are problems which
can be corrected, they will be corrected automatically. For instance, if a disk has changed sizes, a
filesystem may be automatically reduced in size to make it fit.

If there are any problems preventing the installation from continuing without user-interaction, such as no
disks matching the original system, or if the disks on the new system are not large enough to contain the
original data, the system will enter prompted mode and the installation menus will appear in order for the
user to make changes to correct the problems before continuing.

Installing from an Encrypted Backup

If the backup to be restored from was encrypted during the backup process, it will be necessary to decrypt the
data during the restore. Unlike restoring data on a live system, where the encryption keys are available on the
backup system, the encryption key must be entered manually during the system installation. The encryption
keys are not stored in the boot media or the backup information as this might be penetrable to hackers.

As warned during the backup process, an encrypted backup cannot be restored
without the proper encryption key
. This key may not be retrieved from the backup,
nor can SBAdmin assist in providing the correct key. If you do not have the proper
encryption key needed to decrypt this backup, you will not restore this data!


The encryption key is a value that the user defined prior to performing the backup. If the encryption key is not
known, you will not be able to restore the system from this backup. However, to make encryption keys easier to
remember and/or enter, it may be entered either as a hexadecimal number or an ASCII text equivalent (if this
was the form used to create the original key).

When selecting to install from an encrypted backup, the following message will appear:

Select the appropriate option for entering either a HEX or ASCII encryption key. The third option may be used to
start a shell to type commands at the command line should you need to perform system recovery without
reading the backup data.

Enter a HEX Key

The length of the key will depend on the number of bits of encryption. For 128-bit encryption, a 32-byte
hexadecimal number is required. For 192-bit encryption, a 48-byte number is needed, and for 256-bit
encryption, a 64-byte hex number is needed. Select option 1 from the list above, then when prompted to
"Enter your 32-byte HEX key (or press Enter to reselect key type)", enter they key, or
press Enter to return to the options above.

Enter an ASCII (text) Key

The length of the key will depend on the number of bits of encryption. For 128-bit encryption, a 16-byte
ASCII string is required. For 192-bit encryption, a 24-byte string is needed, and for 256-bit encryption, a 32-
byte string is needed. Select option 1 from the list above, then when prompted to "Enter your 16-byte

Storix System Backup Administrator

24

Version 8.2 Solaris System Recovery Guide

Advertising