Comprehensive data protection for all workloads
Post Reply
haslund
Veeam Software
Posts: 856
Liked: 154 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Configuration backup encryption must be enabled

Post by haslund »

Hi,

I noticed a few customers who had Configuration Backups running without issues and then with v8 decided to setup some backup jobs with encryption enabled.
Now "suddenly" there are no new configuration backups being performed. If one tries to make one manually he will see "Configuration backup encryption must be enabled because product configuration contains encryption keys." warning.

Maybe I missed it, but does the administrators get any kind of notification that their configuration backups will no longer be performed unless they go in and manually enable encryption of configuration backups?

Thank you in advance.
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
veremin
Product Manager
Posts: 20414
Liked: 2302 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Configuration backup encryption must be enabled

Post by veremin »

Hi, Rasmus,

Actually, administrators do get immediate notification while enabling encryption on backup job.

Image

Thanks.
haslund
Veeam Software
Posts: 856
Liked: 154 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Re: Configuration backup encryption must be enabled

Post by haslund »

Wow, I seriously do not remember seeing that message myself.
Has that message been there since v8 GA or has it been introduced in v8 patch 1?

What are the exact steps to produce that message?
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
foggy
Veeam Software
Posts: 21139
Liked: 2141 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Configuration backup encryption must be enabled

Post by foggy »

It was there since GA. Basically, you get it when enable encryption on one of the jobs before configuring encryption for Veeam B&R configuration backup.
haslund
Veeam Software
Posts: 856
Liked: 154 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Re: Configuration backup encryption must be enabled

Post by haslund »

I just made a fresh v8 GA installation and enabled encryption for one backup job and did not get the shown message.
I also notice the screenshot you show mentions "before re-enabling", this tells me this screenshot may have been when disabling encryption?
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
veremin
Product Manager
Posts: 20414
Liked: 2302 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Configuration backup encryption must be enabled

Post by veremin »

I just made a fresh v8 GA installation and enabled encryption for one backup job and did not get the shown message.
Was the configuration backup enabled by default in your case? Just trying to cut down the list of potential suspects.
I also notice the screenshot you show mentions "before re-enabling", this tells me this screenshot may have been when disabling encryption?
In those cases, when configuration backup is enabled and user tries to enable encryption, he will be notified that encryption will be disabled, and he will have to re-enable it.

Thanks.
haslund
Veeam Software
Posts: 856
Liked: 154 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Re: Configuration backup encryption must be enabled

Post by haslund »

Yes, Configuration Backup was enabled by default and I made sure to perform manual Backup Now before any kind of encryption was enabled.
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
foggy
Veeam Software
Posts: 21139
Liked: 2141 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Configuration backup encryption must be enabled

Post by foggy »

rhaslund wrote:I just made a fresh v8 GA installation and enabled encryption for one backup job and did not get the shown message.
Have you created at least one password in Password Manager?
TommyB
Expert
Posts: 123
Liked: 16 times
Joined: Aug 28, 2013 9:46 am
Full Name: Thomas Braun
Location: Germany.Europe.Terra.Sol.Milkyway.Localgroup.Virgo
Contact:

Re: Configuration backup encryption must be enabled

Post by TommyB »

v.Eremin wrote:Hi, Rasmus,
Actually, administrators do get immediate notification while enabling encryption on backup job.
In my opinion, instead of just displaying this info message, Veeam should show something like this:

"Configuration backup is disabled for security reasons
Do you want to enable encryption for the configuration backup now?
yes / no "


Or even silently activate encryption on the config backup and and notify the admin about it.

Thomas
veremin
Product Manager
Posts: 20414
Liked: 2302 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Configuration backup encryption must be enabled

Post by veremin » 1 person likes this post

Or even silently activate encryption on the config backup and and notify the admin about it.
And protect configuration backup with some random password admin is not aware of? Thanks.
TommyB
Expert
Posts: 123
Liked: 16 times
Joined: Aug 28, 2013 9:46 am
Full Name: Thomas Braun
Location: Germany.Europe.Terra.Sol.Milkyway.Localgroup.Virgo
Contact:

Re: Configuration backup encryption must be enabled

Post by TommyB »

v.Eremin wrote: And protect configuration backup with some password admin might is not aware of? Thanks.
ah... valid argument... :oops:
haslund
Veeam Software
Posts: 856
Liked: 154 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Re: Configuration backup encryption must be enabled

Post by haslund »

foggy wrote: Have you created at least one password in Password Manager?
Yes, for example password for ESXi host was added.
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
foggy
Veeam Software
Posts: 21139
Liked: 2141 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Configuration backup encryption must be enabled

Post by foggy »

I was talking about encryption passwords.
haslund
Veeam Software
Posts: 856
Liked: 154 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Re: Configuration backup encryption must be enabled

Post by haslund »

Yes of course, it is not possible to enable encryption for a backup job without adding a encryption password.
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
foggy
Veeam Software
Posts: 21139
Liked: 2141 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Configuration backup encryption must be enabled

Post by foggy »

Well, then I recommend contacting support to confirm the observed behavior, since the message should be displayed in this case. If there is some sequence of actions that results in no message, this will be fixed shortly.
jp34
Enthusiast
Posts: 47
Liked: 1 time
Joined: Dec 22, 2009 8:31 am
Full Name: JP
Contact:

Re: Configuration backup encryption must be enabled

Post by jp34 »

Hi, I have the same issue (Version 8.0.0.2030).
I enabled "Encrypt configuration backup", created a new password, launched manually an encrypted conf backup. It worked once.
When I launch manually another one, I see "Processing..." then last successfull backup date is not updated...
When I try to disable "Encrypt configuration backup" then "Backup Now" I get "Configuration backup encryption must be enabled".
Sheduling backup doesn't work too.
So I cannot backup my configuration any more...
veremin
Product Manager
Posts: 20414
Liked: 2302 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Configuration backup encryption must be enabled

Post by veremin »

So, even if you enable encryption for configuration backup, it doesn't work being stuck at "processing" step with no points created. If so, open a ticket with a support team, as the described behaviour looks unexpected. Thanks.
stewsie
Veteran
Posts: 282
Liked: 25 times
Joined: May 22, 2015 7:16 am
Full Name: Paul
Contact:

Re: Configuration backup encryption must be enabled

Post by stewsie »

I am looking to enable the configuration backup file encryption and have set a password, ticked the box and click Backup now. After around 10 seconds the job stops. If I run a backup without encryption enabled the job completes after around 10 minutes as normal.

Am I missing something from the configuration?
Gostev
Chief Product Officer
Posts: 31814
Liked: 7302 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Configuration backup encryption must be enabled

Post by Gostev » 1 person likes this post

No, you seem to do everything right. Please open a support case. Thanks!
Post Reply

Who is online

Users browsing this forum: veremin and 57 guests