BAR_DECRYPTION configuration parameter

Use the BAR_DECRYPTION parameter to decrypt the backups.

onconfig.std value

Not set. If BACKUP_DECRYPTION is not set, backup data that will not be decrypted.

takes effect

When ON-Bar, ontape, onlog and archecker starts.

Usage

Use the BAR_DECRYPTION to override the BAR_ENCRYPTION configuration parameter during a restore. Like with BAR_DECRYPTION, you can set the path to a keystore or to a keyfile. You cannot set the cipher in this parameter as the cipher is set by the object to be restored.

Syntax for the BAR_DECRYPTION configuration parameter

>>-BAR_DECRYPTION--keystore--=--keystore_name------------------>
                '--keyfile---=--keyfile_name--'

  
Table 1. Option for the BAR_DECRYPTION configuration parameter value
Field Value
keystore The keystore specifies the name of the keystore and stash file names. The files are created in the ONEDB_HOME/etc directory:
  • keystore.p12 = The keystore file that contains the security certificates.
  • keystore.sth = The stash file that contains the decryption password.

You must manually back up the keystore and password stash files. These files are not backed up when you run a back up with the ON-Bar or ontape utilities.

keyfile The keyfile specifies the full path of a text file that contains a backup decryption key. The key must be encoded in base64 format.