Discussion Locked

Use a second hard drive for security

0 helpful
45 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In the June 30 Internet Security Focus e-newsletter, Jon Yarden suggests using another hard drive as an emergency archival backup, and he describes how to implement this suggestion for both Wintel and Linux/UNIX systems. Have you considered abandoning tape backups for a simpler, greater capacity solution? Will Jon's suggestion fill the bill for you and your organization? Add your questions or comments to this discussion.

----
If you'd like to learn more about the Internet Security Focus e-newsletter, point to this link and click Internet Security Focus to see a sample. If you're interested, you can also sign up:
https://www.techrepublic.com/techmails.jhtml?repID=r001

45 replies

by maxwell edison

I've been using the method of a second hard drive as an emergency backup (for certain computers) for years. I haven't seen Jon's suggested method - since no link is provided to the atricle - but I simply "image" the drive initially (after the OS andsoftware is installed), and then use a simple batch file to incrementally backup the data files. If the C-Drive fails, I would simply change the first boot device in the BIOS to D-Drive, and the user would be up and running again in a matter of seconds.

On a few isolated computers the second hard drive even pulls double-duty as an off-site backup as well. To do this the second drive is simply installed in a hot-swap docking bay. Two of these will allow a rotation on a weekly or bi-monthly basis.

by guruofdos

A hard disk has it's limitations too. I do use a second hard disk, but still back up to CD all my mission critical data. I have seen many instances where a power fault has left both hard disks fried and no amount of surgery has got either of them back up again.

For a hardware only solution, a second drive is ideal as mirroring even a 120Gb drive only takes a couple of minutes, but I much prefer a second hard disk in a second machine and use the network to store compressed images of another machine's hard disk. On a 6 machine P2P network in the office, the smallest C drive is backed up in compressed form on the next largest C drive and so on, so A is backed to B, B to C, C to D etc. A second hard disk in the first machine then backs up the last machine. We've had a few machines die over the years but haven't permanently lost data yet. Running ZAR on each machine also removes the risk of data loss due to human error and overzealous use of 'delete'!

by hal 9000

While I will agree that it is much faster to backup to a HDD in a Hot Swapable removable SCSI Cady and we rotate these around even the largest HDD which is currently 146 GB just isn't big enough for our curent needs so we continue with our automanted Tape Backup system and it still works out a lot cheaper to use this unit and at the moment there isn't the problem of security in removing the backup from the main site for off-site storage as hardly anyone can read the tapes but even with compressed data on the HDD's the data is easly read.

So we use the SCSI HDD's for all internal work and the tape for anything that wil be taken off- site for storage in case of some form of incident that causes the total loss of everything onsite.

A few months ago we investigated the possibility of backing up to DVD but the expence was just too great so we are continuning with the tape option which is much cheeper and far more secure. I realise that the tape isn't 100% secure but most people whomay gain access to out storage data don't have the necessary equipment to read the tape which is a lot more than can be said for any other backup device we have so far tested.

by djent

There are still good reasons for tape, cost, redundancy, capacity, automation, archival storage, off site storage and disaster recovery. Unless you keep a library of hard drives and manage them as you would tapes, they only provide DR without password or encryption protection.

by tomsal

I agree totally with what djent@execpc.com posted about tape, and its advantages.

Solely going on just maintaining a second HDD is not a professional solution for securely backing up data.

Quick and easy is how you bake a cake, but not how youprotect your company's information assets (and if you are like my company -- a service oriented business -- information assets is the huge heart to our company).

by savatagee20

how can i make complet backup of win2k server on dvd rewriter & restore from when when my system failer

thanks
ahmed hassan

by gam_admin

When I setup a system from scratch, or if Corp sends out a unit(s), I always make an image. Not for data backup, but for the raw system itself. I still think tape has a place, (for data backup), and especially for incrementals. You can't put everyone, or every situation into the same category. You have to look at each situation, and ask yourself what makes the most sense. It will likely be a blend of both! I keep my Master Image HD on the shelf. My personal PC at home has a spare HD mounted, but I only plug it up when I preform an update or append to the image. If you get hacked, or have a power spike, then a live drive will be a dead/corrupt drive as well!

by newsletters

Ghost requires a floppy drive on the recovery unit. So your out of luck if you're trying to backup notebooks with only 2 spindles. A serious design shortcoming considering the design of modern notebooks.

We've looked at the other backup programs and they all seem to suffer from one fatal flaw or another.

by klatoo

I manage a small IT Department (there's just two of us) with 7 servers and roughly 100 users, but it's an Engineering firm and we generate multiple huge files each day (AutoCad, Paydirt) and quite a number of digital photos.

I have a 100 Gb tape drive we do weekly total backups, and daily incremental on for the entire system, and recently I set up 2 Maxtor USB 2.0 drives for "online archive" purposes.

2 sets of tapes, alternating off-site/on site each week, with a set of burned CDR's for each job as it is closed out, which we then store offsite (read only permission on the USB drives that has the same data).

So, the long way around the tree is I'm actually using a combination of 3 media to get redundancy, and meet different requirements.

Nothing beats a tape for raw storage and automation, but they suck real time archive retrieval, hard drives are great for real time access to legacy data, but are susceptible to security issues and hardware limitations, CDR's are perfect for long term archive storage, but either manual loading or "Juke boxes" are required for real time access.

Differing requirements require different methods, that's why it's call IT Management.

by dtoubelis

I created bootable CD-ROM on 8' disk and using it instead of floppies for long. It is compact (the size of a floppy) and most computers more likely have CD-ROM drive then floppy.

by unistw

You can use Norton Ghost with a laptop without a Floppy. Just create a bootable cd with an image of the floppy. Works like a charm.

by thisisme

I use Backup exec to manage my backups.
It backs up the system state as well as all the data.
I haven't found a flaw in it yet, but I would be interested to hear what problems you have found with it.

Cheers,

Chris

by dusty

I have had 2 separate drives on computer for about 12 months--I have gotten many viruses because of the issues that I have been involved with
When I am nailed now, all I do is to separate drives re-install OS on main drive and run a virus check on the secondary when everything is done
Sense that time, I have lost nothing that was placed on 2nd drive. Love it

by prana7

I demand that to use 2 or 3 hard disks. It helps you less headache. I always do backup on second or third hdd depend on how many data you have into hdd.

by hal 9000

The first has the OS and the second has all the programs/Data on it so when something goes wrong with the OS all the data is intact. It makes life a lot easier as you never have a problem when the OS fails for whatever reason. I then backup the datato another HDD across the network or to tape depending on just how vital the data actually is.
But I work in an area where the data is far more valuable than the hardware as this can be replaced very quickly if needed but the data is a totally different story.
Anything short of a very good backup system is only selling the cusomer/business short.

by dzabor

I'm going to have to agree with you on that one
for the reasons you stated in your article and also because a hard drive is a random access device and not serial like a tape drive.

Restoring a single or a couple of files from a backup hard drive is a lot faster and simpler than obtaining it from a serial tape. I just ran into a problem updating Visual Basic with a new MDAC that did not work and had to restore my old MDAC from the backup drive.

by hal 9000

If you can be totally sure that you will never lose control of the drive, but it is a double edged sword as if the drive goes missing for any reason it is for the very reasons stated very easy to recover the data by some other person. Tape on the other hand has the advantage that unless you are working in a professional envirment most people don't have acess to the hardware to read the tape let alone recover data from it.

by bcontario

If you are using a server-class OS (like Windows
Server) then why not just create a mirror to another drive and then break the mirror set? With that you may even get by without shutting down the system to do an image.

by jobeard

DD will produce a physical copy nicely, but the existing fragmentation will still propagate.
Logical images ( TAR, CPIO) will remove fragmentation when restored to clean media.
ALSO to be considered is the massive volume consumed when major portions of the FS are still sane. Capturing subsets of /(root) can reduce the frequency and volume to be saved/restored,
eg: how many copies of
/usr/man, /tmp, /var, /proc,
need to be be saved? For active development, /usr/local may need much more frequent backups.

by drew_lgca

I have been looking for a good free/cheap back up software the can do a compress image of a hard drive and/or be able to do a differential back up. I have found a few but they are lacking compression. Another feature I would like is to be able to break up the image so that I can burn it to a CDROM. Any suggestions for me.

by chubbs__6

Try getting your hands on Norton Ghost...

You can do a complete image of the drive, it doesnt take too long, and providing you have a cd-r drive, you can span the image across multiple cd's for when its time to recover.

Hope this helps!
Chubbs
chubbs__6@hotmail.com

by hal 9000

I thought that I said that we use HDD for quick and easy backup but these never leave the building and we rely on tape for all off site storage because of the security angle.
While it is true that anyone can read a HDD it is a lot more diffictual to have the equipment & software to read tape so that is what we use for all offsite sorage.
My opinion is that tape still rules for any serious security procedures.

by tomsal

...how guilty your conscience seems to be...

I was not referring to your post alone.

Wow, you spin attitude whenever you get the slightest chance...

But I guess that's another thread...

by hal 9000

It was just that I was glad to see someone agree with me on this subject.
Most of the postings seem to thing that tape is dead and should be buried but I've yet to find a bacvkup solution that is as secure as tape particuarly for offsite storage.
I think that the majority of the postings on this group are refering to very small business where you could posibily get away with carying a HDD home after work is finished but this idea doesn't appeal to me either. Or they are attempting to secure"HOME" computers which isn't worth the trouble.

by tomsal

I agree.

I also think that its very silly (to the point of amusement almost) how people worry about backing up "HOME" computers beyond perhaps your financial/budget/tax planning software data and maybe a few passwords you've collected for varioussoftware installations/services you use on the Internet.

And that kind of backup needs nothing elaborate at all -- a ZIP drive does the job quite well even.

Here at my work we have one 40GB tape (80GB compressed) that is the "main" backup brought offsite each and every night, then there are two other incremental backups on different servers -- they are only 4GB and 12GB respectively, they are tossed into a fire proof vault each night and no I don't mean the little dinky fire safes you canbuy at your local KMart.

But, we are getting a brand new data center this year -- so we are upgrading equipment and systems...I can't wait to be honest. :)

by j.g.camp

I hate tape backups and zip drives. Hdd's and CDR/DVD is the way to store and backup for me.

by tomsal

"HDD's and CDR/DVD is the way to store and backup.."

I take it you aren't in IT for your company are you? ;)

by hal 9000

All of out tape backup is performed by autoloaders which makes life easy for the IT section. However every day a complete backup is made and these tapes are taken off-site for storage. They replace the tapes from the previous day and those tapes arebrought bacvk in an dplaced in a fire proof safe along with the banks money so they are prety safe there but not as secure as the off-site tapes, after all there are still bank robberies. We also perform incremental backup durring the day just in case something goes wrong so we don't lose part of a days work the poor tape drive is running all the time but it has already paid for itself many times over.
What I really like about these tapes is it is virtually impossible for anyone outside the bank to read them unlike CD's or DVD's or for that matter HDD's and we keep a 5 rotation set all the time we always have 3 sets off-site and the oldest is 3 days old which is not the best but it does save time in the event of a total failure and the destruction of the other 2 sets all of which is very unlikely.
I can't understand just why anyone would prefer a different media for this type of backup as so far everything that I have looked at is insecure and in the case of either CD/DVD to expensive in the long run as it is not possible to rewrite to these for the same time frame as the tape and then someone would have to change these things as well. I prefer to leave it to the autoloaders as it only takes about 10 minutes per day to replaceall the tapes and then we just forget about them.

by lordinfidel

HDD's fail,... It is a fact of IT life that is unavoidable.

Now I will say this, because I do it, but not exactly for the same reasons as above.

I do use images for machines for fast recovery. Most of my images however are stored on a drive array (of course raid5). Which in turn is backed up to tape.

There are some images that are on "hot standby". That is they are already loaded onto a drive. But their master image is still located on the file server.

At no time though are these images updated/added to. They are simply the bare neccesity to get a system deployed rapidly.

A different archive method "MUST" be used when making backups. That is the whole point of backups. You must backup to a different physical medium.
An example of a fast backup method is SQL. While i use the native backup method in sql to create backups of itself. And those backups are created to a different array attached to the servers. Those backups are also backed up to tape.

The onlyreason they are backed up initially to disk, is for restore speed only. They are not meant to stay on their permementally. In fact only 2 days worth of backups/trans logs stay on the backup array.

For user's: backing up to disk is a very very very very bad thing. It is useless, pointless and a really bad idea. If you have to, make a backup to disk then burn it to cd.

But, mark my words. The backup drive will fail, and so will the primary. Where will you be then.

by zknapik

Even tape backup systems can fail and worse still
some of the new CDRW are no longer WIN98(SE) compatible as we found when replacing an LG with a faster Liteonit 52/24/52. Great but will not work
with anything less than Win2000 Have you tried the new Serial ATA drives? Wonderfully easy to install, extremely easy to use, very consistent performance.

by oz_media

I manage one server that is reliant on tape only and others that use a combination of mirrored drives and a nightly tape backup.

The mirrored drives are nice because they are hot-swappable and make life easier but the remote tape backups are nicefor off premise security in case of fire, flood etc.

by escritorio1

Hello,

What is the best (and inexpensive) software to make a full backup of a Windows 2000 Server harddisk to another harddisk of the same size?

Thanks,

Leonardo Opitz

by oz_media

I would try some Drive Imaging software. There are quite a few solid programs for this and I've used several without a real favorite for any specific incident.

look into cnet or zdnet for trials.

OM

by slidehammer

Great idea!
very simple and not to much money.
Got lots of room in the tower and I all ready have Nortons GOAST

Thank You

by lmf1701

I agree with Jon wholeheartedly. I long ago took to make my system backups via a second drive via ghost. I only use tape for differential backups and archival of day to day changes.

by aknowmad

I tried the suggested command for dd on my Linux server to copy an 80Gb drive. After 9 hours, the operation was still going. A bit of research in Usenet pointed to using a much larger blocksize of 65k - 2048K.

BTW, does anyone here use dump instead of dd for mirroring a disk? Do you continue to run dd on a regular basis or do you use rsync after the initial copy?

Thanks,
William

by rkuhn040172

Like most all debates go, your reply or answer depends upon your unique situation.

To try to give one answer here is meaningless.

You have to take into consideration many factors: the size of your company, the depth and abilities of your IT staff, the importance of the data being backed up, the quantity of the data being backed up, your current IT infrastrucutre, etc.

There is no right answer...except for usually a combination of the two.

by cbsi218

Norton's Ghost will backup a W2k server to another partition or drive just fine. This also works as a good quick backup before doing a major update to the server. If something goes wrong just restore the partition to its original state. Critical data should also always be backuped up at least twice. Never completely trust and one backup solution.

by cbsi218

Norton's Ghost will backup a W2k server to another partition or drive just fine. This also works as a good quick backup before doing a major update to the server. If something goes wrong just restore the partition to its original state. Critical data should also always be backuped up at least twice. Never completely trust only one backup solution.

by jcreed99

I spent 18 years at IBM working in tape development. Yes, tape was cost effective when backing up a mainframe, but for a PC environment a second Hard Drive is a better alternative. The biggest advantage is the amount of time saved. Programs like Ghost will backup a 30 GB HD in about 30 Minutes. The best thing is that after the backup process the hard drive is a direct replacement for the original. My company has used this method for about 5 years and it works very well. Tape could be as good an alternative but first the format process has to be changed, takes too long. And error recovery needs to be equal to that provided by mainframe tape systems. Last the one place where tapes really shine is when you need historical backups. Disks are just too costly when in comes to creating an historical archive of a company's data. The biggest problem with tape is that the device needed to read the tape is separate from the media. Over time the read/write device may disappear and the ability to read the tape will be lost. Because no machines exist that can read and interpret the data recorded.

In conclusion, sadly the time to let tapes die a painful death has come. They are no longer a cost effective alternative to a duplicate or mirrored HD system.

by tomsal

For short term, momentary back up of non-critical files the HDD method is definitely smarter due to speed and ease of use.

For *true* backup purposes tape is the better solution. PERIOD.

If an IT manager can't understand why tape is the better choice for backup than that just boggles the mind as far as I'm concerned and its not worth explaining any further.

by thisisme

All of our data if of the utmost importance, so it gets a full backup onto tape every night.
I use mirrored drives as C: drive in all my servers, which boot off the mirrored drive. If a corruption occurs, the server will automatically boot to the first drive.

by thisisme

I'm in a similar situation as you, but I'm in an Architectural office.
We backup the file and graphics server on 320gb SDLT tapes (one unit for each server) All backups are full, as incrementals are slow to recover and you're stuffed if a backup fails on one of the incremental days.
Also, a cd is burnt using a chemical reaction and over time the cd's surface will degrade and render the cd unreadable. This may take several years, but it is still an issue.

by selectoz

Hi there. I use 20 gig dds4 tapes daily, both at work and at home.
I also use LTO at work.. LTO is superb 100gb <> 1 hour.. you cannot beat that.
I believe that LTO will be a standard that will last for the next 10 years.

This discussion is closed to new replies.