Encryption Question - BEM Keyset vs Veeam B&R Password?

[wa15]

In B&R, I specify passwords to be used for encryption of a job or repository.

In Enterprise Backup Manager, there are keysets generated that are used in the encryption process. I understand that there is a private key and public key in each keyset.

1. How are the EBM keys and B&R passwords both used in the encryption process? I am not sure I understand the relationship between the two.
2. In a complete failure of Veeam B&R and EBM scenario with no backup of the EBM keyset, can the encrypted backups still be decrypted using another Veeam server as long as the B&R password is known?

[HannesK]

Hello,
the enterprise manager keys are used to generate recovery keys in case you lost the password used in VBR

from here

Enterprise Manager keys help you to restore encrypted data in case of lost or forgotten password used for encryption

@2: Yes you can. As long as you know the password of your backups, you can decrypt them. The enterprise manager is for the use case that you lost the password of your backup server.

Best regards,
Hannes