Ssl
Use the ssl option to enable Secure Sockets Layer (SSL) to provide secure client and server communications. When the backup-archive client communicates with an IBM Spectrum Protect™ server V8.1.1 and earlier V8 levels, and V7.1.7 and earlier levels, it determines whether SSL is enabled. When the backup-archive client communicates with an IBM Spectrum Protect server V8.1.2 and later, SSL is always used and this option controls whether object data is encrypted or not. For performance reasons, it might be desirable to not encrypt the object data.
Supported Clients
This option is valid for all supported clients.
Options File
Place this option in the client system-options file (dsm.sys) within a server stanza. You can also set this option on the Communication tab of the Preferences editor.
Place this option in the client options file (dsm.opt). You can also set this option on the Communication tab of the Preferences editor.
Parameters for communicating with an IBM Spectrum Protect server V8.1.1 and earlier V8 levels, and V7.1.7 and earlier levels.
- No
- Specifies that the backup-archive client does not use SSL to encrypt information. No is the default.
- Yes
- Specifies that the backup-archive client uses SSL to encrypt information.
To enable SSL, specify SSL Yes and change the value of the TCPPORT option. Changing the value of the TCPPORT option is generally necessary because the IBM Spectrum Protect server is typically set up to listen for SSL connections on a separate port.
Parameters for communicating with an IBM Spectrum Protect server V8.1.2 and later.
- No
- Specifies that the backup-archive client does not use SSL to encrypt object data when communicating with the server. All other information is encrypted. No is the default.
- Yes
- Specifies that the backup-archive client uses SSL to encrypt all information, including object
data, when communicating with the server.
To use SSL for all data, specify SSL Yes.
Examples
- Options file:
- ssl yes
- Command line:
- Does not apply.