Restoring encrypted backups and encrypted auxiliary storage pools

You can either encrypt backup data to a tape, or encrypt data stored in user auxiliary storage pools (ASPs) and independent ASPs. If you lose the data on your system, you need to be able to restore the encrypted data.

Recovering from an encrypted backup using software encryption
Backup Recovery and Media Services (BRMS) provides you with the ability to encrypt your data to a tape device. This method is called software encryption, because you do not need to use an encryption device. The BRMS interface asks for the encryption key information and what items you want encrypted. BRMS saves the key information, so for restoring, BRMS knows what key information is needed to decrypt on the restore.
Recovering from an encrypted backup using an encrypted tape
Hardware tape encryption uses tape devices with data encryption capabilities and the IBM® Encryption Key Manager (EKM) to encrypt your data. i5/OS only supports library-managed encryption. Use these steps to recover data that you have backed up using an encrypting tape drive or tape library.
Backing up the Encryption Key Manager
Hardware tape encryption uses tape devices with data encryption capabilities and the IBM Encryption Key Manager (EKM) to encrypt your data. Use these steps to back up and restore the EKM. If you lose the encryption keys in the EKM, you will not be able to decrypt your tapes in a system recovery.
Restoring encrypted auxiliary storage pools
If you have an encrypted user or independent auxiliary storage pool (ASP), you must perform special steps to ensure that the data in these ASPs can be recovered.