After copy job encryption disabled - is there a way to tell if backup file is encrypted or not?

[karapoti]

Hi, with a new deployment with StoreOnce as a target for backup copy jobs (linux repo as source) I realised that I had encryption enabled on the copy jobs to StoreOnce and was obviously getting terrible dedupe ratios.

I've since disabled encryption on the copy jobs, and run an active full (on the backup copy) - but was wondering if there was a way to tell if the restore point / recovery point on the StoreOnce is encrypted or not?

[HannesK]

Hello,
the user interface does not show it directly per restore point. There is a key icon in backups -> disk (copy) that shows encrypted backups. But that's not the granularity you ask for.

So you could for example check the job session history or use a second backup server and try to open the backup file. If it works, then the backup is unencrypted. The information is also available in the database (feel free to search on your own ), but I'm not sure, whether it's worth to do that.

Best regards
Hannes

[david.domask]

COib objects returned by Get-VBRRestorePoint have an IsEncrypted() method you can use.

For example, on restore points from a backup job I have, you can use:

Code: Select all

PS C:\Users\Administrator> $prps | select Name, CreationTime, @{name="Is Encrypted?";expression={$_.IsEncrypted()}}

Name                CreationTime           Is Encrypted?
----                ------------           -------------
ddom-tinyvm_replica 10/14/2022 6:54:06 AM          False
ddom-tinyvm         10/14/2022 6:54:01 AM          False
ddom-tinyvm         10/20/2022 11:57:30 PM         False
ddom-tinyvm_replica 10/20/2022 11:57:30 PM         False
ddom-tinyvm         10/20/2022 11:59:54 PM         False
ddom-tinyvm_replica 10/20/2022 11:59:54 PM         False
ddom-tinyvm         10/21/2022 12:02:17 AM         False
ddom-tinyvm_replica 10/21/2022 12:02:14 AM         False

[karapoti]

Thanks David.

After logging a support case, the support agent directed me to your response and it worked a charm for me/

Where are the methods like IsEncrypted() / etc documented?

[david.domask]

@karapoti, you're very welcome In fact I think I know internally where they asked and I suspected it might be your case

I do need to warn that the object methods are not officially supported as they often may change, so regrettably this is an unsupported workaround and as such not documented

The good news for you is that I have some strong belief this method likely wont' change so I think it's fine to keep using it.

The best way to explore the methods is by passing the objects returned from Veeam to Get-Member and checking the various methods available.

Please note!!!! Stick with just ones that are "informational", I would strongly advise do not use any Set*() methods as they can potentially mess stuff up if you don't know what you're doing, and there will likely be very little we can do to help

But just simple IsSomething() methods are just informational, and these are fairly reliable without breaking anything, so don't worry about using them. Just keep in mind that some of the more unique ones may change from update to update, so try to use them only as a last resort and check first if there's a better method with the supported cmdlets.