Apply Backup Encryption

By default, the Backup Service uses AES-256 server-side encryption for storage devices, preventing unauthorized access outside the server. This document describes how to apply client-side AES-256 encryption to a protection plan using a password.

Prerequisites:

• Make sure that your browser allows popups.
• Only contract administrators, owners, or users with the Create Backup Units privilege can manage Backup Units.

1

Navigate to the Backup Unit Manager

1. In the DCD, go to Menu > Storage & Backup > Backup Unit Manager.

2. Select the required backup unit and click Open Console.

Open Backup Service Console

2

Start a new protection plan

Backup encryption can be enabled only during creation of the new protection plan.

1. Navigate to MANAGEMENT > Protection plans.

2. Click Create Plan in the right pane.

3

Set the encryption password

1. Click on the Specify password link in the Encryption section.

Enable Specify password in the Encryption section

2. Enter a strong encryption password and confirm it to ensure there are no typos. Store this password securely, as you will need it to restore backups.

4

Configure additional settings

1. Configure any additional settings for your protection plan.

2. Assign the protection plan to your devices.

Result: The backups are encrypted with the specified password, ensuring that the data is secure and can only be restored using this password.

Note: Backup agents on your devices encrypt data locally before sending it to the Backup Service. If you lose your encryption password, you cannot restore your data. Store this password securely.