Change backup job encryption key

[matteu]

Hello,

I would like to change my backup encryption key because it isn't compliant with complexity.
I read the documentation here : https://helpcenter.veeam.com/docs/vbr/u ... tml?ver=13
And specifically this : If you change the password or start using KMS keys for the already encrypted job, during the next job session Veeam Backup & Replication will create a new incremental backup file. The created backup file and subsequent backup files in the backup chain will be encrypted with the new password or KMS key.

That means I will need the first + second password everytime right ? Because the Full backup will always have the old KMS key ?
Or does after the retention passed, I will only need the new one ?

My configuration is :
Backup job : Object storage with no Active full with 31 days retention
Backup copy : on LHR repository with GFS enabled.

I guess for the backup job if I do a new active full with new password, I will not need the old password after 31 days (maybe a little more)
But for backup copy, I will need the older for all my GFS point and does the next synthetic full will use the old or new password ?

The documentation just talk about incremental backup and is not really clear about the next full...