DataTrust Sales & Support
Tel: (1890) PROTECT /
(1890) 7768328
DataTrust West
Tel: (091) 534245
DataTrust Dublin
Tel: (01) 4045129
DataTrust South
Tel: (021) 4858003
DataTrust Reseller Sales
Tel: (066) 9153223
24-Hr SMS Hotline
Tel: (086) 6004341
( SLA Cover Only )
Limited Company Registered in Ireland No 411813
VAT Registration No IE 6431813B
Frequently Asked Questions
Please click on the following links to review the answer.
Pre Sales Related Queries
-F.A.Q: What are the upsides and downsides of backing up multiple computers using a single backup account?
-F.A.Q: Can I backup an entire Operating System?
-F.A.Q: Can I change my encrypting key?
-F.A.Q: Can you explain the concept briefly on how the DataTrust software works?
-F.A.Q: Does DataTrustOBM copy the same set of files over and over again?
-F.A.Q: Does DataTrustOBM have to stop the application when doing online data backups?
-F.A.Q: Does DataTrustOBM work with dial-up connections?
-F.A.Q: Does this mean that DataTrust will have access to all of my data?
-F.A.Q: How can I backup a huge data set over the Internet?
-F.A.Q: How do I restore a machine from my SystemState backup?
-F.A.Q: How does DataTrustOBM detect changes in files?
-F.A.Q: How long will an online backup take?
-F.A.Q: How Secure is my Data on your servers?
-F.A.Q: What do I have to do in order to backup open files?
-F.A.Q: What do I need in order to backup my data with the DataTrust service?
-F.A.Q: What if we already have a backup system?
-F.A.Q: What is encryption?
-F.A.Q: What is the recommended bandwidth?
-F.A.Q: What kind of encryption employed by DataTrustOBM?
Technical Queries
-F.A.Q: What happens when we do In-File Delta backup on a directory?
-F.A.Q: Are there any command line tools for DataTrustOBM?
-F.A.Q: For In-File Delta backup, does it require a temporary working directory?
-F.A.Q: Transfer Block Size is 128Kb by default. Is there a rationale behind?
-F.A.Q: What are Off-line backup, Logout backup reminder and Local backup features?
-F.A.Q: What is incremental backup and how does In-File Delta work?
-F.A.Q: What is the best way to restore a huge data set?
- What are the upsides and downsides of backing up multiple computers using a single backup account?
Upsides:
- You require less backup accounts
- You can use one pair of username and password to configure the backup setting of all backup settings
Downsides:
- You must use different backup sets for different computers
- Whenever a new backup set is created under the backup account, you need to go back to all computers using the same backup account to uncheck the “Run scheduled backup on this computer” option for the new backup set (as backup setting is saved on server and new backup set is default to run on all computers, i.e. with the option checked)
- Improper configuration could easily cause problems, which are difficult to debug.
-Can I backup an entire Operating System?
Currently, it is not possible to do hard disk image backup with DataTrustOBM. However, you can still backup/restore the operating system by doing the followings:
To backup all files including the operating system, please do this:
1. Add all files to your backup source
2. Add a SystemState backup type to your backup account (Windows only)
To restore all files including the operating system, please do this:
1. Re-install the operating system and applications
2. Restore the SystemState backup to your machine (Windows only)
3. Restore all files to your machine
-Can I change my encrypting key?
Once set for a Backup Set, the encrypting key cannot be changed. This is necessary for the integrity of the Backup Set, making sure that backup data is only encrypted by one key. Otherwise, you will have problems remember two encrypting keys when you want to restore your files in the future.
You need to recreate your Backup Set if you really want to change your encrypting key.Please, please, please - MAKE SURE NOT TO FORGET the encrypting key - without it your data is gone forever !!!
-Can you explain the concept briefly on how the DataTrust software works?
The DataTrust Online Backup Suite consists of 3 main modules:
1. The client software – DataTrust Online Backup Manager (DataTrustOBM)
2. The server software – DataTrust Offsite Backup Server (DataTrustOBS)
3. The replication server – DataTrust Replication Server (DataTrustRS)
DataTrustOBM is the client side program which uploads the selected files to the Backup server and looks after scheduled backup jobs. It also provides a user-interface for configurations of the desired backup sets. DataTrustOBM supports a number of operating systems, e.g. Windows 2000, XP, 2003, Linux, Mac OS X, etc. And apart from files backups, DataTrustOBM can backup a range of applications such as MS Exchange, MS SQL, Oracle, MySQL, Lotus Domino, etc.
DataTrustOBS is the server side program which can serve and store backup data from multiple DataTrustOBMs/backup accounts. It has a web-based Management Console for system administrators to manage the Backup Server, such as configuring system parameters, administering the backup accounts, viewing backup statistics and reports, etc. Users can also logon to this Management Console to manage their own backup account or restore their own backup data. DataTrustOBS supports Windows, Linux and Mac OS platforms.
DataTrustRS is another piece of server software running on a separate machine which provides close to real-time backup for multiple DataTrustOBSs. Thus even if one of the DataTrustOBS fails, the DataTrustRS still has a copy of the backup data.This allows DataTrust to maintain three full, seperate copies of your data - one in Blanchardstown, one in Tallaght and one in Cardiff, Wales.
-Does DataTrustOBM copy the same set of files over and over again?
After the initial upload, subsequent backup jobs will only transfer the modified or new data to the Backup server. It depends on the nature of the data, but normally, less than 2% of all data is modified.
-Does DataTrustOBM have to stop the application when doing online data backups?
DataTrustOBM can backup application data while the application is still running. Particularly, we have special agents for MS Exchange Server, MS SQL Server, Oracle, Lotus Notes and MySQL, which allows these applications to be backed up while they are online. With the Volume Shadow Copy feature started from DataTrustOBM v5.0, we are able to backup other types of applications while they are online.
-Does DataTrustOBM work with dial-up connections?
Does DataTrustOBM work with dial-up connections?
It makes no difference to DataTrustOBM if the connection is always on or dial-up.
If you want to Windows to connect to the ISP automatically when a backup starts, you can go to [Control Panel] -> [Internet Options] -> [Connections] and select “Always dial my default connection”.
-Does this mean that DataTrust will have access to all of my data?
No !!!! We have no access whatsoever to your data - all that is transferred to our servers is encrypted ciphertext - ( unrecognisable rubbish essentially ). Even if you didn't mind us having access to your data - the facility is not within our encryption system to allow us, at this end, to see anything but encrypted rubbish. Your data is compressed and encrypted BEFORE it leaves your system and ONLY YOU HAVE THE ENCRYPTION KEY !!!!! Don't lose / forget it !!!!! Without it - neither DataTrust nor our software development team can recover your data.
-How can I backup a huge data set over the Internet?
How can I backup a huge data set over the Internet?
If you have a lot of data (e.g. 300GB) to backup to the backup server, it would take a considerable amount of time to perform the first full backup through the Internet. You can use the Seed Loading Utility to backup your backup set to local hard disk (instead of directly to the backup server) and then transport the backup data, using a removable hard disk, to your backup service provider. The administrator can then load all your backup files from your removable hard disk into your backup account. This could save you days (even weeks) of performing your first full backup. And since subsequent online server backups are incremental (only new or updated files will be uploaded to the server), the amount of data transfer should be relatively small.
Please refer to the User’s Guide for details on the “Seed Loading Utility”.
-How do I restore a machine from my SystemState backup?
To recovery a machine from scratch, you have to do the followings:
1. Re-install the operating system
2. Re-install all applications installed
(You can do both of these easily by backing up the system yearly using Norton Ghost)
3. Restore the SystemState backup onto the recovered machine (this will update the recovered system with the latest configuration and settings)
4. Restore all data files onto the recovered system.
-How does DataTrustOBM detect changes in files?
Does it use the Archive bit?
Some tape backup software resets the Archive bit.
Would this affect DataTrustOBM when backing up the same data?
DataTrustOBM compares timestamps of files on the server with the corresponding copies on client machine. Archive bit is not used as it does not detect relocated files. Thus tape backup would not affect DataTrustOBM.
-How long will an online backup take?
The initial backup always takes the longest, and can vary from minutes to hours to days, depending on the volume of data being backed up. However, after the first full backup, our server compares its file store with the files on your computer and backs up only those files that have been modified since the last off site data backup, which minimizes bandwidth overhead and can take as little as 2 minutes. Transfer speeds of course depend on the speed of your internet connection, but we can accommodate speeds ranging from old fashioned dialup all the way up to corporate LAN connections.
-How Secure is my Data on your servers?
Firstly, all that leaves your site / system ( once our encryption/compression has processed it at your end ) is encrypted ciphertext - basically garbage. Even if this encrypted material was released into the public domain - nobody could decrypt it.To all people but you, your files, from the point they leave your system, are no more than some garbage files with random content.
Just to be extra secure - this encrypted ciphertext is transmitted to the DataTrust Servers via Secure 128-bit SSL Channel.All communications between Data Trust Backup Server and your computer are transported in a 128-bit SSL (Secure Socket Layer) channel. Although all your online backup files travel through a public network (internet), eavesdroppers have no knowledge of what has been exchanged.
Please be warned !!!
We don't keep your encrypting key
The encryption key used to encrypt your files resides only on your computer and is known only to you. It is never transmitted anywhere across the network. If this key is lost, all online backup files can never be recovered. Therefore, although we have access to all files you stored on our backup server, we have no knowledge of the content of the files you stored. Reminder: Please make sure you write down you encryption key in a safe place where it will never be forgotten. Otherwise, you will never be able to recover your backup files.
Best encryption algorithm is used
Currently, the algorithm that we are using to encrypt your files is 128-bit Twofish. It is a block cipher designed by Counterpane Labs. It was also one of the five Advanced Encryption Standard (AES) finalists chosen by National Institute of Standard and Technology (NIST). It subjects to frequent public reviews but no known attack against this algorithm has been reported.
Require 8.77 x 1017 years to crack 128-bit encryption
A 128-bit key size has 2128 or around 3.4 x 1038 possible combination. Even if you have the world best super computer, ASCI White, SP Power3 375 MHz manufactured by IBM as of November 2000, it would take 8.77 x 1017years to test all combinations.Assuming your have the super computer, ASCI White, SP Power3 375 MHz has 8192 processors which totals a capability of 12.3 teraflops (trillions of operations/second), available to you. Also it just needs one computer operation to test a possible combination (which is already faster than what it can do). To use brute force attack (checking all combinations) on this encryption algorithm. It would take
3.4 x 1038
-------------- seconds ~ 2.76 x 1025sec
12.3 x 1012
i.e. 876530835323573935 years or 8.77 x 1017 years to successfully try all combinations.
Let alone ASCI White cannot process as fast as
Restrict access to data by IP addresses You can also restrict access to your online backup files from the set of IP addresses you defined. If someone tries to access your data from an IP address not on your defined list, their access will be denied. This additional security ensures backup files is not open to all location, even username and password are known.
-What do I have to do in order to backup open files?
Volume Shadow Copy, which allows backup of open file, comes with Windows XP and 2003 by default. For older platforms, e.g. Windows 9x/ME/NT/2000 or NetWare, we would recommend adding a third party open file manager option (e.g. St. Bernard Open File Manager - http://www.stbernard.com/) which might cost around US$100 for each workstation and US$300 for each server if open file backup is required.
* Open file option is not required on Linux/Unix/Mac OS X because no files are held exclusively open by applications.
-What do I need in order to backup my data with the DataTrust service?
Only a working Broadband Internet Connection is needed! This completely eliminates the need to purchase expensive backup hardware and/or media. Because the system is completely automated, you don't have to spend valuable time swapping disks or tapes and worrying about where you are going to store them.
-What if we already have a backup system?
Even if you are currently backing up to tape, zip disk, CD-RW, or other form of media, more than likely, the process is not completely automated. An employee must change out the media periodically and manually verify that completed backups are successful. Our online backup system bypasses this tedious process. Online Data Backups are 100% automated, and backup reports are sent by email daily. At any time, you can retrieve or verify your files on our server from virtually any location in the world! Plus, onsite backup systems cannot provide adequate protection against theft, fire, or any other form of local system failure. As they say, it's best not to have all your eggs in one basket. We recommend using our services in addition to any local online backup mechanisms you have in place already.
Encryption is basically a mathematical formula that scrambles a data file. The only way to decode it is with the encryption code.
-What is the recommended bandwidth?
It really depends on the kind of data to be backed up, e.g. for personal file backups, the daily data transfer should be limited, while MS Exchange backup could be significant. The minimum recommended bandwidth would be 512K broadband.
-What kind of encryption employed by DataTrustOBM?
There are two encryptions being performed by DataTrustOBM:
1. Encryption of backup data - This is being done by 128-bit symmetric key encryption (AES, TripleDES, TwoFish). 256 bit is not available because it requires too much CPU and it is not really required (128-bit is what is being used by most banks currently)
2. Encryption of backup traffic - This is being done by 1024 bit RSA public key encryption. The strength of the encryption depends on the key size you use when you generate your CSR before submitting to your CA. 1024 bit is what is being used by most CAs.
- What happens when we do In-File Delta backup on a directory?
When you do backup, DataTrust Online Backup software will do this:
1. Check if any files are added, updated or deleted (the calculation of these files are based on files having the same filename).
2. New files will be uploaded to the server in whole.
3. Deleted files will be removed from Data area and placed into the Retention area on the Backup server.
4. Updated files will be processed by the In-File delta option (i.e. only changed data blocks within the files will be uploaded to the Backup Server)
-Are there any command line tools for DataTrustOBM?
Yes, there are a set of scripts in [DataTrustOBM Program Home]bin and they are described below:
Windows:
- Decrypt.bat: decrypts the specified backup files
- install.bat: installs the DataTrustOBM icon to the System Tray and registers the Online Backup Scheduler as a service
- Install-Scheduler.bat: registers the Online Backup Scheduler as a service
- RegisterVSS.bat: re-registers Microsoft’s Volume Shadow Copy service DLLs
- Remove-Scheduler.bat: unregisters the Online Backup Scheduler service
- Restore.bat: restores the specified snapshot of the backup set to the specified location
- RunBackupSet.bat: runs the specified backup set
- RunOBM.bat: launches the Online Backup Manager user interface
- Run-Scheduler.bat: starts the Online Backup Scheduler service
- SeedLoad.bat: runs seed load for the specified backup set to the specified location
- Uninstall.bat: removes the DataTrustOBM icon from the System Tray and unregisters the Online Backup Scheduler service
Linux:
- BackupManager.sh: launches the Online Backup Manager user interface
- Configurator.sh: configures client parameters such as Backup Server address, username/password, encrypting key, etc.
- Decrypt.sh: decrypts the specified backup files
- Restore.sh: restores the specified snapshot of the backup set to the specified location
- RunBackupSet.sh: runs the specified backup set
- Scheduler.sh: starts the Online Backup Scheduler service
- SeedLoad.sh: runs seed load for the specified backup set to the specified location
- StopScheduler.sh: stops the Online Backup Scheduler service
* You may have to set some variables in these scripts and more instructions are provided.
-Does the DataTrustOBM upgrade the installation of Java on a client machine, or does it install a separate copy for it own use?
DataTrustOBM uses its own copy of Java and leaves the system Java VM intact.
-For In-File Delta backup, does it require a temporary working directory?
DataTrustOBM requires a temporary storage for the delta file before it gets sent to the server. For example, if you have a 10GB file that has already been backed up to the server and you have updated 10MB of this file. Then you need to have at least 10MB of free space in the temporary directory for the delta file. Of course, you do not need 10GB of free disk space. Also, if you have 5 x 10GB files to be backed up this way, you still need only 10MB of free space (not 5 x 10MB) because each delta file will be automatically deleted right after it has been backed up.
-I understand that the files to be backed up are compressed and encrypted before uploading to the Backup Server. What is the average compression ratio?
Average compression ratio for text-based file is around 4:1. However, no further compression can be made on files that are already in compressed format (e.g. JPG, ZIP). In general, you can assume a 2:1 compression ratio when you are backing up a file set with variety types.
-Transfer Block Size is 128Kb by default. Is there a rationale behind?
Transfer Block Size is 128Kb by default. Is there a rationale behind?
Backup data is transferred in blocks (instead of file by file) to minimize connection negotiation roundtrips. It is not the TCP/IP block size. This setting is optimal for the backup operation.
-What are Off-line backup, Logout backup reminder and Local backup features?
Off-line backup is basically designed for notebook users who are off-line most of the time and cannot rely on backup schedule to backup regularly. The backup interval allows notebook users to specify the interval that they would like their data to backup. If this interval has elapsed, backup will run automatically once this machine is online.
Logout backup reminder asks user if they would like to backup if they logout of the computer or shutdown their computer.
Local backup allows an extra copy of backup file to be kept on local hard disk when running backup.
-What is incremental backup and how does In-File Delta work?
In an incremental backup, only modified files will be uploaded to the Backup Server.
On the other hand, In-File Delta is applicable to the physical files to be uploaded to the Backup Server, does not matter whether it is a MS SQL database file, MS Exchange transaction log file or any normal file in a FileBackupSet. Specifically, only the changed blocks in comparison the original file on the Backup Server (delta file) will be uploaded.
For each modified file, DataTrustOBM would determine whether the entire file or only delta file should be uploaded. If the entire file is to be uploaded, the old version of the file will be moved to the Retention area. Else if only the delta file is to be uploaded, the previous delta files will be moved to the Retention area and the Data area should contain the original full backup file, checksum file and the latest delta file of this file.
-What is the best way to restore a huge data set?
You can copy the data of the particular backup set on DataTrustOBS to a removable media, e.g. external harddisk, and ship it directly to you. You can then use the “Decypt Files Tool” in DataTrustOBM to restore the backup data on removable media to its original format.