To specify storage settings for the backup job:
- Click Advanced at one of the following steps of the wizard:
- Storage — if you have selected to save backup files in a Veeam backup repository or cloud repository.
- Local Storage — if you have selected to save backup files in a local storage of a Veeam Agent computer.
- Shared Folder — if you have selected to save backup files in a network shared folder.
- Click the Storage tab.
- [For a failover cluster backup job] By default, Veeam Backup & Replication deduplicates failover cluster data before storing it in the backup repository. Data deduplication provides a smaller size of the backup file but may reduce the backup job performance. You can disable data deduplication if necessary, for example, if you use a deduplication storage appliance as a backup repository. To disable data deduplication, clear the Enable inline data deduplication check box.
The Enable inline data deduplication option is unavailable if you selected the Workstation or Server option at the Job Mode step of the wizard.
- From the Compression level list, select a compression level for the backup: None, Dedupe-friendly, Optimal, High or Extreme.
- In the Storage optimization section, select what size of data blocks you plan to use: 4 MB, 1 MB, 512 KB, 256 KB. Veeam Agent for Microsoft Windows will use data blocks of the chosen size to optimize the size of backup files and job performance.
If you change the storage optimization settings for the backup job, new settings will not have any effect on previously created files in the chain. They will be applied to new files created after the settings were changed.
To apply new storage optimization settings in backup jobs, you must create an active full backup after you change storage optimization settings. Veeam Backup & Replication will use the new block size for the active full backup and subsequent backup files in the backup chain. To learn about the active full backup, see Performing Active Full Backup.
- To encrypt the content of backup files, select the Enable backup file encryption check box. In the Password field, select a password that you want to use for encryption. If you have not created the password beforehand, click Add or use the Manage passwords link to specify a new password. For more information, see the Password Manager section in the Veeam Backup & Replication User Guide.
If the backup server is not connected to Veeam Backup Enterprise Manager, you will not be able to restore data from encrypted backups in case you lose the password. Veeam Backup & Replication will display a warning about it. For more information, see the Decrypting Data Without Password section in the Veeam Backup & Replication User Guide.
[For backup job managed by backup server] Starting from Veeam Backup & Replication version 12.1, you can select a Key Management System (KMS) server in the Password field. The KMS server must be added to Veeam Backup & Replication in advance. If you choose to use KMS keys for backup file encryption at this step of the wizard, Veeam Backup & Replication immediately starts communication with the KMS server to retrieve the encryption keys. To learn more, see the Key Management System Keys section in the Veeam Backup & Replication User Guide.
If you plan to encrypt the content of backup files, consider the limitations listed in the Data Encryption Limitations subsection.
If you plan to encrypt the content of backup files, consider the following limitations:
- Data encryption settings for Veeam Agent backup jobs and backup policies configured in Veeam Backup & Replication are stored to the Veeam Backup & Replication database.
For backup jobs and policies targeted at a Veeam backup repository, all data encryption operations are performed in Veeam Backup & Replication. Encryption settings are passed to a Veeam Agent computer only in case this computer is added to a backup policy targeted at a local drive of a protected computer, at a network shared folder, or at a cloud repository. Veeam Backup & Replication passes encryption settings when applying the backup policy to a protected computer.
- If you change a password for data encryption for an existing backup policy targeted at a Veeam backup repository without changing other backup policy settings, the process of applying the backup policy to a protected computer completes with a notification informing that the backup policy was not modified. This happens because data encryption settings for managed Veeam Agents are saved to the Veeam Backup & Replication database and are not passed to a Veeam Agent computer.
- If you enable encryption for an existing Veeam Agent backup, during the next job session Veeam Agent for Microsoft Windows will create a full backup file. The created full backup file and subsequent incremental backup files in the backup chain will be encrypted with the specified password.
- Encryption is not retroactive. If you enable encryption for an existing backup job, Veeam Agent for Microsoft Windows will encrypt the backup chain starting from the next restore point created with this job.
- [For backup policies targeted at a local drive, network shared folder or cloud repository] When you enable data encryption for a backup policy, Veeam Backup & Replication uses the specified password to encrypt backups of all Veeam Agent computers added to the backup policy. A Veeam Agent computer user can restore data from the backup of this computer without providing a password to decrypt backup. To restore data from a backup of another computer in this backup policy, a user must provide a password specified in the backup policy settings.
This scenario differs from the same scenario in earlier versions of Veeam Backup & Replication where all backups created for Veeam Agent computers in the backup policy could be accessed from any computer in the backup policy without providing a password.
To learn more about data encryption in Veeam Backup & Replication, see the Data Encryption section in the Veeam Backup & Replication User Guide.