New-VBRDecryptionSet - Veeam Backup PowerShell Reference

Parameter	Description	Type	Required	Position	Accept Pipeline Input
EncryptionKey	Specifies encryption keys managed by Veeam Backup & Replication.	Accepts the PSCryptoKey object. To get this object, run the Get-VBREncryptionKey cmdlet.	True	Named	True (ByPropertyName, ByValue)
KMSServer	Specifies KMS servers added to the Veeam Backup & Replication console. The cmdlet will decrypt data encrypted by this server.	Accepts the VBRKMSServer object. To create this object, run the Get-VBRKMSServer cmdlet.	True	Named	True (ByPropertyName, ByValue)
KmsKeyId	Specifies the ID of the private key stored on the KMS server. The cmdlet will use it to decrypt data.	String	False	Named	True (ByPropertyName, ByValue)
Password	Specifies a password. The cmdlet will use the password to decrypt data.	String	True	Named	True (ByPropertyName, ByValue)

This example shows how to define settings to decrypt data encrypted by KMS server.

$key = Get-VBREncryptionKey -Description "Veeam KMS"

$kmsserver = Get-VBRKMSServer -Name "thales.tech.local"

$decryption = New-VBRDecryptionSet -EncryptionKey $key -KMSServer $kmsserver -KmsKeyId "c302ebfd-821c-4372-bf46-beccca0516ec-pub"

Perform the following steps:

Run the Get-VBREncryptionKey cmdlet. Specify the Description parameter value. Save the result to the $key variable.
Run the Get-VBRKMSServer cmdlet. Specify the Name parameter value. Save the result to the $kmsserver variable.
Run the New-VBRDecryptionSet cmdlet. Set the $key variable as the EncryptionKey parameter value. Set the $kmsserver variable as the KMSServer parameter value. Specify the KmsKeyId parameter value. Save the result to the $decryption variable to be used with other cmdlets.

This example shows how to define settings to decrypt data using password.

$key = Get-VBREncryptionKey -Description "Veeam KMS"

$decryption = New-VBRDecryptionSet -EncryptionKey $key -Password "VeeamPassword"

Perform the following steps:

Run the Get-VBREncryptionKey cmdlet. Specify the Description parameter value. Save the result to the $key variable.
Run the New-VBRDecryptionSet cmdlet. Set the $key variable as the EncryptionKey parameter value. Specify the Password parameter value. Save the result to the $decryption variable to be used with other cmdlets.