Encryption at rest with Cloud Connect and WAN Accelerator?

[aeos42]

Hello,

https://helpcenter.veeam.com/docs/backu ... tml?ver=95 states that "[Cloud Connect] tenants can encrypt backups created with backup jobs, backup copy and replication jobs."

But "encryption works at the source side (unless you run a backup copy job via WAN accelerators)" in https://helpcenter.veeam.com/docs/backu ... tml?ver=95 implies that encryption of backup files occurs at the target side. Does the target/Cloud Connect provider WAN accelerator perform the encryption of the backup files? If so does it retain the encryption key permanently? Or does the source/client WAN accelerator provide the encryption key to the target/Cloud Connect provider WAN accelerator only when needed?

Thank you,

aeos42

[veremin]

Have you seen this video that explains this matter in details? Thanks.

[aeos42]

Thank you for providing a link to the video. However, it does not address whether data-at-rest encryption keys (Backup Copy Job -> Advanced -> Storage -> Encryption) are permanently stored on the service provider's WAN accelerator or data mover. Please advise.

[dellock6]

No they are not, keys are only stored in memory for the duration of the job.

[aeos42]

Fantastic! Thank you!