Encryption Standards

To encrypt certificates and protect other sensitive data stored in the configuration database, Veeam Service Provider Console uses Data Protection API (DPAPI) mechanisms. For details, see Microsoft Docs.

To encrypt communication, Veeam Service Provider Console supports the following libraries, modules, and algorithms:

• SHA-256 — for digital signature generation and SSH fingerprint verification.
• SHA-1 — for backward compatibility and certificate thumbprint generation.
• OpenSSL, cryptographic libraries provided by the operating system — for random number generation.
• Veeam Cryptographic Module — for Linux-based components and services.
• Microsoft Crypto API — for other Microsoft Windows-based components and services.
• Microsoft Base Cryptographic Provider. For details, see Microsoft Docs.
• Microsoft Enhanced RSA and AES Cryptographic Provider. For details, see Microsoft Docs.
• Microsoft Enhanced Cryptographic Provider. For details, see Microsoft Docs.