---
title: "New-VBRDecryptionSet"
description: "Defines data decryption settings. Product Edition: Standard, Enterprise, Enterprise Plus, Veeam Universal License This cmdlet provides the following parameter sets: This cmdlet creates the VBRDecryptionSet object."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/new-vbrdecryptionset.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Managing Security Settings > Data Encryption > New-VBRDecryptionSet"
dateModified: "2026-08-19"
---

# New-VBRDecryptionSet

## Short Description
Defines data decryption settings.

**Product Edition**: Standard, Enterprise, Enterprise Plus, Veeam Universal License

## Syntax

This cmdlet provides the following parameter sets:

<ul class="syntax-sets">
  <li>
    <p><code>PasswordDecryption (Default)</code></p>

```
New-VBRDecryptionSet -EncryptionKey <PSCryptoKey> -Password <String> [<CommonParameters>]
```
  </li>
  <li>
    <p><code>KmsDecryption</code></p>

```
New-VBRDecryptionSet -EncryptionKey <PSCryptoKey> [-KmsKeyId <String>] -KMSServer <VBRKMSServer> [<CommonParameters>]
```
  </li>
</ul>

## Detailed Description
This cmdlet creates the `VBRDecryptionSet` object. This object defines the data decryption settings.

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">EncryptionKey</span></p>
        </td>
        <td>
          <p>Specifies encryption keys managed by Veeam Backup & Replication.</p><p>Accepts the <code>PSCryptoKey</code> object. To get this object, run the <a href="get-vbrencryptionkey.md"><code>Get-VBREncryptionKey</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="pscryptokey.md"><code>PSCryptoKey</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">KmsKeyId</span></p>
        </td>
        <td>
          <p>Specifies the ID of the private key stored on the KMS server. The cmdlet will use it to decrypt data.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">KMSServer</span></p>
        </td>
        <td>
          <p>Specifies KMS servers added to the Veeam Backup & Replication console. The cmdlet will decrypt data encrypted by this server.</p><p>Accepts the <code>VBRKMSServer</code> object. To create this object, run the <a href="get-vbrkmsserver.md"><code>Get-VBRKMSServer</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vbrkmsserver.md"><code>VBRKMSServer</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Password</span></p>
        </td>
        <td>
          <p>Specifies a password. The cmdlet will use the password to decrypt data.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
[`VBRDecryptionSet`](vbrdecryptionset.md)

## Examples

::: example
### Example 1. Defining Decryption Settings for Data Encrypted by KMS

This example shows how to define settings to decrypt data encrypted by KMS server.

```
$key = Get-VBREncryptionKey -Description "Veeam KMS"
$kmsserver = Get-VBRKMSServer -Name "thales.tech.local"
$decryption = New-VBRDecryptionSet -EncryptionKey $key -KMSServer $kmsserver -KmsKeyId "c302ebfd-821c-4372-bf46-beccca0516ec-pub"
```

Perform the following steps:

1. Run the [`Get-VBREncryptionKey`](get-vbrencryptionkey.md) cmdlet. Specify the `Description` parameter value. Save the result to the `$key` variable.
2. Run the [`Get-VBRKMSServer`](get-vbrkmsserver.md) cmdlet. Specify the `Name` parameter value. Save the result to the `$kmsserver` variable.
3. Run the `New-VBRDecryptionSet` cmdlet. Set the `$key` variable as the `EncryptionKey` parameter value. Set the `$kmsserver` variable as the `KMSServer` parameter value. Specify the `KmsKeyId` parameter value. Save the result to the `$decryption` variable to be used with other cmdlets.

:::

::: example
### Example 2. Defining Data Decryption Settings with Password

This example shows how to define settings to decrypt data using password.

```
$key = Get-VBREncryptionKey -Description "Veeam KMS"
$decryption = New-VBRDecryptionSet -EncryptionKey $key -Password "VeeamPassword"
```

Perform the following steps:

1. Run the [`Get-VBREncryptionKey`](get-vbrencryptionkey.md) cmdlet. Specify the `Description` parameter value. Save the result to the `$key` variable.
2. Run the `New-VBRDecryptionSet` cmdlet. Set the `$key` variable as the `EncryptionKey` parameter value. Specify the `Password` parameter value. Save the result to the `$decryption` variable to be used with other cmdlets.

:::

## Related Commands

- [`Get-VBREncryptionKey`](get-vbrencryptionkey.md)
- [`Get-VBRKMSServer`](get-vbrkmsserver.md)