Backup Job Encryption
Encryption for a backup job is configured in the advanced job settings. You should enable the encryption option and specify a password to protect data in backup files produced by the backup job.
The backup job processing with encryption enabled includes the following steps:
- You enable encryption for a backup job and specify a password.
- Veeam Backup & Replication generates the necessary keys to protect backup data.
- Veeam Backup & Replication encrypts data blocks in the backup proxy, either the dedicated or default one, and transfers them to the backup repository already encrypted.
- On the backup repository, encrypted data blocks are stored to a resulting backup file.
When restoring an encrypted backup file that has been removed from the configuration or created in another installation of Veeam Backup & Replication, perform the following process:
- Import the backup file and define a password to decrypt the backup file. If the password has changed once or several times, you need to specify the password in the following manner:
- If you select a metadata file (VBM) for import, you must specify the latest password that was used to encrypt files in the backup chain.
- If you select a full backup file (VBK) for import, you must specify the whole set of passwords that were used to encrypt files in the backup chain.
- Veeam Backup & Replication uses the provided passwords to generate user keys and unlock the subsequent keys for backup file decryption.
- Veeam Backup & Replication retrieves data blocks from the backup file, sends them to the source side and decrypts them on the backup proxy, either the dedicated or default one.
