How Database Data Encryption Works

To protect data encryption keys, passwords, secret keys, KMS keys, certificates and other sensitive information stored in the configuration database, Veeam Backup & Replication uses built-in operating system mechanisms for data protection:

• Veeam Backup & Replication on Linux uses ASP.NET Core. For more information, see Microsoft Docs.
• Veeam Backup & Replication on Microsoft Windows uses Data Protection API (DPAPI). For more information, see Microsoft Docs.

For encrypted configuration backups, data protection on the operating system level is replaced with data protection mechanisms provided by Veeam Backup & Replication. For more information, see Creating Encrypted Configuration Backups.