Unique encryption key pair per job

Udo Kaune <[email protected]> Thu, 5 Feb 2026 09:39:01 +0100
Newsgroups gmane.comp.bacula.user
Message-ID <[email protected]>
Am 02.02.26 um 16:16 schrieb Jakub Hudak:
>
> I was wondering if it is possible to use unique encryption key pair per job.
>
> My use case is that sometimes I am writing a manual long term (5-10Y) off-site job. These tapes are in a sense WORM tapes where I will never reuse/write to them again. From security standpoint, a unique encryption key pair would really help me.
>
> Any advice is much appreciated.
>
>

Please evaluate how to migrate the encryption into your tape drive. This is much less expensive in terms of cpu cycles. https://github.com/scsitape/stenc
As for your special backup task you could use your standard FD keys and on top of that a key uploaded to the tape drive for this special occasion.

Cheers, Udo

_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
smime.p7s (application/pkcs7-signature, 4.8 KB) - not displayed