Configuration backup encryption must be enabled

[haslund]

Hi,

I noticed a few customers who had Configuration Backups running without issues and then with v8 decided to setup some backup jobs with encryption enabled.
Now "suddenly" there are no new configuration backups being performed. If one tries to make one manually he will see "Configuration backup encryption must be enabled because product configuration contains encryption keys." warning.

Maybe I missed it, but does the administrators get any kind of notification that their configuration backups will no longer be performed unless they go in and manually enable encryption of configuration backups?

Thank you in advance.

[veremin]

Hi, Rasmus,

Actually, administrators do get immediate notification while enabling encryption on backup job.



Thanks.

[haslund]

Wow, I seriously do not remember seeing that message myself.
Has that message been there since v8 GA or has it been introduced in v8 patch 1?

What are the exact steps to produce that message?

[foggy]

It was there since GA. Basically, you get it when enable encryption on one of the jobs before configuring encryption for Veeam B&R configuration backup.

[haslund]

I just made a fresh v8 GA installation and enabled encryption for one backup job and did not get the shown message.
I also notice the screenshot you show mentions "before re-enabling", this tells me this screenshot may have been when disabling encryption?

[veremin]

I just made a fresh v8 GA installation and enabled encryption for one backup job and did not get the shown message.

Was the configuration backup enabled by default in your case? Just trying to cut down the list of potential suspects.

I also notice the screenshot you show mentions "before re-enabling", this tells me this screenshot may have been when disabling encryption?

In those cases, when configuration backup is enabled and user tries to enable encryption, he will be notified that encryption will be disabled, and he will have to re-enable it.

Thanks.

[haslund]

Yes, Configuration Backup was enabled by default and I made sure to perform manual Backup Now before any kind of encryption was enabled.

[foggy]

I just made a fresh v8 GA installation and enabled encryption for one backup job and did not get the shown message.

Have you created at least one password in Password Manager?

[TommyB]

Hi, Rasmus,
Actually, administrators do get immediate notification while enabling encryption on backup job.

In my opinion, instead of just displaying this info message, Veeam should show something like this:

"Configuration backup is disabled for security reasons
Do you want to enable encryption for the configuration backup now?
yes / no "

Or even silently activate encryption on the config backup and and notify the admin about it.

Thomas

[veremin]

Or even silently activate encryption on the config backup and and notify the admin about it.

And protect configuration backup with some random password admin is not aware of? Thanks.

[TommyB]

And protect configuration backup with some password admin might is not aware of? Thanks.

ah... valid argument...

[haslund]

Have you created at least one password in Password Manager?

Yes, for example password for ESXi host was added.

[foggy]

I was talking about encryption passwords.

[haslund]

Yes of course, it is not possible to enable encryption for a backup job without adding a encryption password.

[foggy]

Well, then I recommend contacting support to confirm the observed behavior, since the message should be displayed in this case. If there is some sequence of actions that results in no message, this will be fixed shortly.

[jp34]

Hi, I have the same issue (Version 8.0.0.2030).
I enabled "Encrypt configuration backup", created a new password, launched manually an encrypted conf backup. It worked once.
When I launch manually another one, I see "Processing..." then last successfull backup date is not updated...
When I try to disable "Encrypt configuration backup" then "Backup Now" I get "Configuration backup encryption must be enabled".
Sheduling backup doesn't work too.
So I cannot backup my configuration any more...

[veremin]

So, even if you enable encryption for configuration backup, it doesn't work being stuck at "processing" step with no points created. If so, open a ticket with a support team, as the described behaviour looks unexpected. Thanks.

[stewsie]

I am looking to enable the configuration backup file encryption and have set a password, ticked the box and click Backup now. After around 10 seconds the job stops. If I run a backup without encryption enabled the job completes after around 10 minutes as normal.

Am I missing something from the configuration?

[Gostev]

No, you seem to do everything right. Please open a support case. Thanks!