Re: Unique encryption key pair per job

Hi Jakub,

Am 02.02.2026 um 16:16 schrieb Jakub Hudak:
> Hello,
> 
> I was wondering if it is possible to use unique encryption key pair per 
> job.

Technically that would be possible, but I would do a lot to not have to 
set up, manage and maintain such a thing -- you'd need a bit of extra 
tooling around the Bacula-FD itself.

I even see a nice feature request -- use a similar approach to create 
key material we use with SD encryption on the FD, and add support for 
per-job keys like that. But that would not be something you can use this 
month, I guess.

> My use case is that sometimes I am writing a manual long term (5-10Y) 
> off-site job. These tapes are in a sense WORM tapes where I will never 
> reuse/write to them again. From security standpoint, a unique encryption 
> key pair would really help me.

Do you have particular reasons why volume encryption by the SD would not 
be suitable?

> Any advice is much appreciated.

As long as we're just talking, I'm sure you'll get lots of ideas and 
brainstorming ;-)

Cheers,

Arno

> Jakub

-- 
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users