Storage Settings

To specify storage settings for the backup policy:

1. Click Advanced at one of the following steps of the wizard:

• Local Storage — if you have selected to save backup files on a local storage of a Veeam Agent computer.
• Shared Folder — if you have selected to save backup files in a network shared folder.

• Storage — if you have selected to save backup files in a Veeam backup repository or cloud repository.

2. Click the Storage tab.
3. From the Compression level list, select a compression level for the backup: None, Dedupe-friendly, Optimal, High or Extreme.
4. In the Storage optimization section, select what size of data blocks you plan to use: 4 MB, 1 MB, 512 KB, 256 KB. Veeam Agent will use data blocks of the chosen size to optimize the size of backup files and job performance.

5. To encrypt the content of backup files, select the Enable backup file encryption check box. In the Password field, select a password that you want to use for encryption. If you have not created the password beforehand, click Add or use the Manage passwords link to specify a new password. For more information, see the Password Manager section in the Veeam Backup & Replication User Guide.

If the backup server is not connected to Veeam Backup Enterprise Manager, you will not be able to restore data from encrypted backups in case you lose the password. Veeam Backup & Replication will display a warning about it. For more information, see the Decrypting Data Without Password section in the Veeam Backup & Replication User Guide.

Data Encryption Limitations

If you plan to encrypt the content of backup files, consider the following limitations:

• Data encryption settings for Veeam Agent backup policies configured in Veeam Backup & Replication are stored to the Veeam Backup & Replication database. For backup policies targeted at a Veeam backup repository, all data encryption operations are performed in Veeam Backup & Replication, too. Encryption settings are passed to a Veeam Agent computer only in case this computer is added to a backup policy targeted at a local drive of a protected computer or at an SMB network shared folder. Veeam Backup & Replication performs this operation when applying the backup policy to a protected computer.
• If you change a password for data encryption for an existing backup policy targeted at a Veeam backup repository without changing other backup policy settings, the process of applying the backup policy to a protected computer completes with a notification informing that the backup policy was not modified. This happens because data encryption settings for managed Veeam Agents are saved to the Veeam Backup & Replication database and are not passed to a Veeam Agent computer.
• If you enable or disable encryption for an existing Veeam Agent backup policy, during the next session Veeam Agent will create a full backup file. The created full backup file and subsequent incremental backup files in the backup chain will be encrypted with the specified password.
• Encryption is not retroactive. If you enable encryption for an existing backup policy, Veeam Agent will encrypt the backup chain starting from the next restore point created with this policy.
• When you enable data encryption for a backup policy, Veeam Backup & Replication uses the specified password to encrypt backups of all Veeam Agent computers added to the backup policy. A Veeam Agent computer user can restore data from the backup of this computer without providing a password to decrypt backup. To restore data from a backup of another computer in this backup policy, a user must provide a password specified in the backup policy settings.

This scenario differs from the same scenario in earlier versions of Veeam Backup & Replication where all backups created for Veeam Agent computers in the backup policy could be accessed from any computer in the backup policy without providing a password.

To learn more about data encryption in Veeam Backup & Replication, see the Data Encryption section in the Veeam Backup & Replication User Guide.