Zserver Backup Key Features

Backup Encryption Details

Zserver Backup is the cornerstone component of Zserver Suite, which is designed to protect data on streamers by allowing to encrypt backup in a real-time mode. The software is built to address needs of mid- and large-sized organizations that employ commercial-grade backup systems. Particularly, Zserver Backup is fully integrated with magnetic tape backup systems and protects the information written to the backup devices  by encrypting/decrypting the data on demand. This ensures that the data is not accessible by any system without a valid encryption key.

Encrypted Backup. How Zserver Backup Works

Zserver Backup is not another backup system and is not designed to duplicate existing backup functionalities. Rather, it works in concert with all major commercial backup systems, such as BrightStor™,  ARCserve® Backup or Veritas Backup, by encrypting the backed up data during daily backup operations.

Zserver Backup is installed only on servers where Tape Engine Service (TES) is running and there is no need to install it on any other servers (backup agents) that work with TES. Zserver Backup works directly with the backup storage device making it a simple, cost-effective solution for protecting corporate data.

There are no changes to the existing backup system or the daily backup process after Zserver Backup is installed. Only the data that is written to the storage device media is changed and stored on the media in encrypted, intelligently unreadable format. Data gets encrypted on the storage media sector level, with and all of formatting and writing operations performed by the original backup system. To begin the encryption process, the system needs to simply load an encryption key into the system’s RAM and associate it with the backup streamer. These tasks are performed from Zserver Administrator, both locally or remotely with TCP/IP connection.

Encryption operations are carried out by Zserver Backup kernel driver. The encryption key is loaded into the system’s memory and is never saved to the hard disk. When attempting to read the data without the encryption key, the backup tape will appear to be empty or contain data of unknown format.

Integration with Zserver Storage

Zserver Backup is tightly integrated with another Zecurion product Zserver Storage, which protects data stored on hard drives or external storage devices. In fact, all of the administrative functions can be done from Zserver Administration console for both Zserver Storage and Zserver Backup. At the same time, it is not required to install both products.  Each piece of software can be installed and operated as stand-alone product.

Encryption Algorithms and Safety

Zserver Backup, along with Zserver Storage, do not implement any embedded proprietary crypto algorithms or methods, but rather employ external products. The cryptography is performed by the Zserver Backup software component, which extends an open interface. At this time, Zserver Backup implements the following crypto algorithms:

• AES with 256-bit encryption keys

Encryption keys are generated based on randomly collected numbers that are determined by processing information gathered from various peripheral devices, such as “mouse” movements or microphone sounds. Encryption keys are stored on smartcards (secure memory chips) that are PIN-code protected. For enhanced security, the cards are blocked after third unsuccessful attempt entering the PIN.

Compatibility

Zserver Backup is compatible with all conventional commercial backup systems that work with magnetic backup tapes and tape libraries, supporting BrightStor ARCserve, Symantec Backup Exec, Veritas Backup, and others.

Click here to register and see Zserver Backup in action.