--- title: "Add-VBREncryptionKey" description: "Creates encryption key. Platform: VMware, Hyper-V Product Edition: Standard, Enterprise, Enterprise Plus, Veeam Universal License This cmdlet creates a new encryption key. This cmdlet accepts SecureString type." canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/add-vbrencryptionkey.html" breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Managing Security Settings > Data Encryption > Add-VBREncryptionKey" dateModified: "2026-08-19" --- # Add-VBREncryptionKey ## Short Description Creates encryption key. **Platform**: VMware, Hyper-V **Product Edition**: Standard, Enterprise, Enterprise Plus, Veeam Universal License ## Syntax ``` Add-VBREncryptionKey [-Password] [[-Description] ] [] ``` ## Detailed Description This cmdlet creates a new encryption key. This cmdlet accepts SecureString type. Use Microsoft PowerShell standard capabilities to convert your password into the SecureString. ## Parameters

Parameter

Description

Type

Required

Position

Accept Pipeline Input

Description

Specifies description of the new encryption key that you can further use to search encryption keys.

String

False

1

False

Password

Specifies password you want to use to encrypt data.

SecureString

True

0

True (ByPropertyName, ByValue)

`` This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7). ## Output Object [`PSCryptoKey`](pscryptokey.md) ## Examples ::: example ### Creating Encryption Key This command creates the `Veeam Administrator` encryption key. ``` $plainpassword = "VeeamPassword" $securepassword = $plainpassword | ConvertTo-SecureString -AsPlainText -Force Add-VBREncryptionKey -Password $securepassword -Description "Veeam Administrator" ``` Perform the following steps: 1. Save the password into the `$plainpassword` variable. 2. Turn the password into a SecureString by running the [`ConvertTo-SecureString`](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.security/convertto-securestring?view=powershell-7.4) command. Provide the `AsPlainText` and `Force` parameters. 3. Run the `Add-VBREncryptionKey` cmdlet. Set the `$securepassword` variable as the `Password` parameter value. Specify the `Description` parameter value. :::