How Data Decryption Works

To perform operations with backup files, you need to decrypt them first. Backup files can be decrypted automatically or manually:

• If you encrypt data encryption keys with KMS keys, backup files are decrypted automatically when you import them. In some cases, you need to decrypt backup files manually. For more information, see How KMS Works.
• If you encrypt data encryption keys with secret keys, backup files are decrypted automatically only when the following conditions are met:

• You encrypt and decrypt the backup file on the same backup server that uses the same configuration database.
• The backup is not removed from the Veeam Backup & Replication console.

In other cases, you need to enter a password you specified in the encryption options.

Veeam Backup & Replication transfers encrypted data to the source side and performs data decryption. Decrypted files appear under the Backups > Disk (Imported) node in the inventory pane.

For more information on how to decrypt backups, see Decrypting Backups. If you want to restore data from encrypted backups, see the following sections:

• Restoring Data from Encrypted Backups
• Restoring Encrypted Data from Tapes in the Tape Device Support Guide