Encryption Passwords

[CloudMSP]

1. When I setup a local backup encryption to my BDR. I setup a password.
2. When I setup a BCJ to my CC servers I setup a different password.

Am I wasting my time?

These passwords are not the actual encryption key right?

Do I need to be juggling these two passwords or can I just use one?

We are both the MSP of the customer and the CC Service Provider and we manage both end exclusively.

I also worry that I might not have accurate records of the passwords all the time (bad copy and paste). Does using enterprise manager with loss protection make that ok?

Thanks

[veremin]

Am I wasting my time?

Depends on what you're trying to achieve. Could elaborate on your goal a bit?

These passwords are not the actual encryption key right?

Why? If you say import a backup to a different backup console, you will need to input one of these passwords to decrypt backup.

Does using enterprise manager with loss protection make that ok?

If backup server is added to EM and password loss protection is enabled, then, yes, this feature should come quite handy in case your forget originally specified password.

[CloudMSP]

What I meant was am I wasting my time creating and managing two different passwords? The key is actually the same, and I'm the only party using the password and they are stored in the exact same place.

[veremin]

If you need to protect the same set of data both locally and remotely with the same encryption key (stored in the same location), then, no, you don't waste your time.

Otherwise (if, say, local encryption is not your concern), consider encrypting data only in backup copy job.

Thanks.

[CloudMSP]

Let me try to be more clear. Is there any benefit to using one password for local backup and a different password for the remote backup? I managed both ends of the backup and the 2 passwords are stored in the same place. I'd rather not manage two different passwords if there is no real security benefit.

[veremin]

With two password system, If one password was compromised, the malefactor would get access only to one copy of backup data (either local or remote). But that might not work, if you use the same password twice or store passwords in the same place.

Thanks.