Restoring Data from Encrypted Backups

When you restore data from an encrypted backup, Veeam Agent performs data decryption automatically in the background or requires you to specify a password.

Consider the following about unlocking encrypted backup files:

• If encryption keys required to unlock the backup file are available in the Veeam Agent database, that is, if you encrypt and decrypt the backup file on the same Veeam Agent computer, you do not need to specify the password. Veeam Agent uses keys from the database to unlock the backup file. Data decryption is performed in the background, and data restore from the encrypted backup does not differ from that from an unencrypted one.

• If encryption keys are not available in the Veeam Agent database, you need to provide a password to unlock the encrypted file. The password must be the same as the password that was used to encrypt the backup file. If the password has changed once or several times, you need to specify the latest password. In Veeam Agent, you can use the latest password to restore data from all restore points in the backup chain, including restore points that were encrypted with an old password and restore points that were created before you have enabled the encryption option for the job.

The process of unlocking an encrypted backup file differs depending on what Veeam Agent user interface you use for data restore.

• Veeam Agent graphical user interface
• Veeam Agent command line interface

Restoring Data from Encrypted Backups Using GUI

To restore data from an encrypted backup using the Veeam Agent graphical user interface:

1. Launch the necessary data restore wizard:

• If you want to perform file-level restore from an encrypted backup that was created on another Veeam Agent computer, launch the Veeam Agent control panel with the veeam or veeamconfig ui command. To learn more, see Restoring Files and Folders.
• If you want to perform volume-level restore or file-level restore recovery from an encrypted backup, boot from the Veeam Recovery Media and launch the necessary data restore wizard. To learn more, see Restoring from Veeam Recovery Media.

2. Follow the steps of the wizard to specify where the encrypted backup file that you plan to use for restore resides. If the backup file resides in a remote location, select the backup location type and specify settings to connect to the backup location.
3. Select the encrypted backup and restore point from which you want to restore data.

4. Veeam Agent will display the Encryption window. Enter the password for the backup file.

In the Hint field of the Encryption window, Veeam Agent displays a hint for the password that was used to encrypt the backup file. Use the hint to recall the password.

If you changed the password one or several times while the backup chain was created, you need to specify the latest password. In Veeam Agent, you can use the latest password to restore data from all restore points in the backup chain, including those restore points that were encrypted with an old password.

If you enter correct password, Veeam Agent will decrypt the backup metadata. You will be able to continue the restore operation in a regular manner.

Restoring Data from Encrypted Backups Using Command Line Interface

To restore data from an encrypted backup using the Veeam Agent command line interface, complete the following steps:

1. Import the encrypted backup file to the Veeam Agent database. To learn more, see Importing Encrypted Backups.
2. Perform the necessary restore operation in a regular manner. To learn more, see Restoring Volumes with Command Line Interface and Restoring Files and Folders with Command Line Interface.