Backup Copy Job encryption

Availability for the Always-On Enterprise

Backup Copy Job encryption

Veeam Logoby MPev » Mon Dec 19, 2016 4:34 pm

I searched but didn't find an answer to my question.

I'm looking to enable encryption within B&R to eliminate using TrueCrypt on my offsite backup media. Currently we backup to one repository then Backup Copy Job to another repository. We keep two weekly BCJ's and copy the latest to an encrypted hard drive weekly.

TL;DR If I enable encryption on the Backup Job do I also need to enable it on the Backup Copy Job?

The help says that it isn't double-encrypted, so the BJ is decrypted and then re-encrypted to make the BCJ. That's OK but will take more processing time, I'm assuming. Based on that, though, I'm guessing that it is needed? If the Backup Job is encrypted and the BCJ isn't, then does the BCJ decrypt the BJ and copy that to the repository now-unencrypted?

If all I'm reasonably worried about is having the offsite backup encrypted then I could leave the Backup Job alone and just encrypt the Backup Copy Job.

Thanks for reading
MPev
Lurker
 
Posts: 2
Liked: 1 time
Joined: Mon Dec 19, 2016 3:55 pm
Full Name: Martin Peverley

Re: Backup Copy Job encryption

Veeam Logoby Shestakov » Tue Dec 20, 2016 10:29 am

Hello Martin and welcome to the community!
TL;DR If I enable encryption on the Backup Job do I also need to enable it on the Backup Copy Job?

Yes, and data will not be encrypted twice because backup copy job decrypt backups and encrypt them was own key.
Thanks!
Shestakov
Veeam Software
 
Posts: 5145
Liked: 430 times
Joined: Wed May 21, 2014 11:03 am
Location: Saint Petersburg
Full Name: Nikita Shestakov

Re: Backup Copy Job encryption

Veeam Logoby foggy » Tue Dec 20, 2016 11:22 am

MPev wrote:If the Backup Job is encrypted and the BCJ isn't, then does the BCJ decrypt the BJ and copy that to the repository now-unencrypted?

Yes.

MPev wrote:If all I'm reasonably worried about is having the offsite backup encrypted then I could leave the Backup Job alone and just encrypt the Backup Copy Job.

Yes.
foggy
Veeam Software
 
Posts: 15303
Liked: 1133 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

Re: Backup Copy Job encryption

Veeam Logoby MPev » Tue Dec 20, 2016 1:23 pm 1 person likes this post

Shestakov wrote:Hello Martin and welcome to the community!

Thanks! Although I swear I had a login previously but I can't find anything. I've definitely lurked but I'm sure I've posted too.

Thanks also for the fast answers, it looks like I'll just enable encryption on the Backup Copy Jobs.

One other related question, if I may? I did turn on encryption for one of the BCJ's last night and it worked fine but the Configuration Backup failed. The error message is "Cannot create configuration backup without encryption enabled."... Never mind, one quick Google and found this, which answers the question.

"If the Password Manager contains at least one password and you do not enable encryption for the configuration backup, Veeam Backup & Replication disables configuration backup. To enable the configuration backup, you must enable encryption in the configuration backup job settings."

https://helpcenter.veeam.com/backup/hyp ... ypted.html
MPev
Lurker
 
Posts: 2
Liked: 1 time
Joined: Mon Dec 19, 2016 3:55 pm
Full Name: Martin Peverley

Re: Backup Copy Job encryption

Veeam Logoby Shestakov » Wed Dec 21, 2016 11:01 am

Correct, once there are jobs using encryption (Password manager has entities), configuration backup requires encryption too.
You`ve found the right KB article.
Shestakov
Veeam Software
 
Posts: 5145
Liked: 430 times
Joined: Wed May 21, 2014 11:03 am
Location: Saint Petersburg
Full Name: Nikita Shestakov

[MERGED] Enable encryption on existing Backup job affect BC

Veeam Logoby mingji » Sun Jul 16, 2017 10:28 pm

Hi there,
We are planning to enable encryption for some existing Backup jobs. I understand an active full will be performed.
My question is, how will this affect the existing Backup Copy job? Will there be active full too even encryption is not enabled in Backup Copy job? and will Backup Copy job have to replicate the full backup again?

Thanks in advance.
mingji
Novice
 
Posts: 4
Liked: never
Joined: Fri Jun 26, 2015 2:05 am
Full Name: Ming Ji

Re: Backup Copy Job encryption

Veeam Logoby Shestakov » Mon Jul 17, 2017 9:38 am

Hi Ming!
No, backup copy job will not need to perform active full since it decrypts the backups.
Thanks!
Shestakov
Veeam Software
 
Posts: 5145
Liked: 430 times
Joined: Wed May 21, 2014 11:03 am
Location: Saint Petersburg
Full Name: Nikita Shestakov


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Bing [Bot], Google Feedfetcher and 1 guest