Offline Data Recovery In Cisco Sme; About Offline Data Restore Tool - Cisco AJ732A - MDS 9134 Fabric Switch Configuration Manual

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Offline Data Recovery in Cisco SME

The Cisco SME solution provides seamless encryption service through a hardware-based encryption
engine. However, when the MSM-18/4 module or the Cisco MDS 9222i fabric switch is not available,
you can use the Offline Data Restore Tool (ODRT).
This appendix describes the basic functionalities and operations of this software application.

About Offline Data Restore Tool

The Offline Data Restore Tool (ODRT) is a standalone Linux application and is a comprehensive
solution for recovering encrypted data on tape volume groups when the MSM-18/4 module or the Cisco
MDS 9222i switch is unavailable. The Offline Data Restore Tool (ODRT) reads the tape volumes,
encrypted by Cisco SME, and decrypts and decompresses the data and then writes clear-text data back
to the tape volumes.
Figure B-1
Figure B-1
A Linux host
running O ffline
Data Restore Tool
The encryption and decryption of data works in the following two steps:
•
•
The decryption key is obtained from the volume group file which you need to export from the Cisco Key
Management Center (KMC). For information on exporting volume groups, see
Key Management."
The Offline Data Restore Tool (ODRT) feature is invoked by entering the odrt.bin command from the
Linux shell.
OL-18091-01, Cisco MDS NX-OS Release 4.x
shows the topology supported by the Offline Data Restore Tool (ODRT).
Offline Data Restore Tool (ODRT) Topology
Tape-to-disk– The Offline Data Restore Tool (ODRT) reads the encrypted data from the tape and
stores it as intermediate files on the disk.
Disk-to-tape– The Offline Data Restore Tool (ODRT) reads intermediate files on the disk, decrypts
and decompresses (if applicable) the data and writes the clear-text data to the tape.
A P P E N D I X
Tape drive with
Cisco SME-encrypted
media
SAN
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
B
Chapter 6, "Cisco SME
B-1