Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

PowerProtect Data Manager 19.9 Administration and User Guide

PDF

Backup and restore encryption

You can encrypt backup or restore data that is in transit for centralized and self-service operations with DD Boost encryption, using TLS. Encryption of backup and restore data in-flight is available for application assets and NAS assets only.

By default, PowerProtect Data Manager supports an encryption strength of HIGH and uses DD Boost anonymous authentication mode. The DD Boost encryption software uses the ADH-AES256-SHA cipher suite. The DD Boost for OpenStorage Administration Guide provides more information about the cipher suite for high encryption.

The following table lists the workloads and operations that support encryption of data in-flight:

NOTE Refer to the agent user guides for more information about the centralized and self-service operations that are supported.
Table 1. Supported workloads
Workload Centralized backup Centralized restore Self-service backup Self-service restore
File System with Application Direct Yes Yes (image-level restore only) Yes Yes (image-level restore only)
Microsoft SQL with Application Direct Yes Yes (database-level restore only) Yes Yes (database-level restore only)
Microsoft Exchange with Application Direct Yes N/A Yes Yes
Oracle with Application Direct Yes N/A Yes Yes
SAP HANA with Application Direct Yes N/A Yes Yes
Network attached storage (NAS) Yes Yes N/A N/A

Enabling encryption imposes additional overhead. Backup and restore performance for any client could be affected by 5-20% with encryption enabled.

You can enable or disable backup and restore encryption in the PowerProtect Data Manager UI.

PowerProtect Data Manager supports backup and restore encryption for all supported DD Boost and DDOS versions. The most up-to-date software compatibility information for PowerProtect Data Manager is provided in the eLab Navigator.

NOTE You do not need to enable in-flight encryption on connected DD systems. If DD encryption settings exist, the higher setting takes precedence.

  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\