How to prove encryption?

[bunger]

We are running B&R v9 and I have the backup jobs set for encryption ( for the job, Storage > Advanced > Storage > Enable backup file encryption ).

I have a requirement to prove the backups are encrypted and aside from a screen shot of that specific settings screen, I can't find another method to prove it.

Is there a different way to show/prove encryption on backup files?

Thanks in advance!

[foggy]

If you need just a visual prove, then encrypted backups in Veeam B&R console have a different icon, indicating they are encrypted.

[bunger]

What are the different icons?

For my implementation, they appear to have an orange key or wrench ( hard to tell which ).

I am also using Veeam Endpoint to backup a physical server to the same repository. Encryption is also enabled for that backup, but it's icon doesn't display a key ( or wrench ).

[foggy]

Encrypted backups have a key on their icon.

[bunger]

Is it "normal" for encrypted Veeam Endpoint Backups to not display a key in the same repository?

[Dima P.]

Hi Bill,

Looks like a UI glitch. Encryption for VEB jobs is enabled on the repository level, so icons might not properly reflect the backup being encrypted. I’ll let QA team know – thanks for posting!

[bunger]

I need to show the backups are encrypted for HIPAA reporting. Is there any other method to show that?

[foggy]

How do you need to show it? Is there any compliance auditing tool or you just need to provide some sort of printed report?

[bunger]

Any documentation would suffice: screenshot, report, etc.

I was going to to just provide a screenshot of the Backups > Disk view and show that the repository has a key on it. The repository for my B&R based backups do show the key, but the Endpoint Backups do not. See this image:
http://imgur.com/iJQOPfh

So really, anything to somehow show it is encrypted will work.

[Dima P.]

Sure. Here is a reference to Help Center article on how to set the encryption at repository level.

Additionally, you can run a simple test to show that your endpoint backup was encrypted. You can do that with existing VEB backup/encryption password but since it may affect the rest of your backup environment I recommend you to set a dedicated VEB and Encryption password. Screenshots and instructions are below.

- Run a VEB job to a repository with encryption enabled
- Once done, delete the backup from configuration
- Delete the encryption key used for this test
- Rescan the repository



- VEB backup will appear under Disk (Encrypted) node and is not operational unless you type in the password



- One password was added to VBR, backup file will appear under Disk (Imported) node



Again, if you are going to repeat this test do not forget to use a dedicated encryption password and VEB as this might affect the rest of your backup jobs.