- Notes, cautions, and warnings
- Disclaimer
- Preface
- Introduction
- Authentication
- Component access control
- Login security settings
- Log in to the PowerProtect Data Manager Appliance REST API
- User and credential management
- Authentication types and setup
- Multi-factor authentication
- iDRAC
- Identity providers
- Authentication to external systems
- Authorization
- Log Settings
- Network and Communication Security Settings
- Data Security Settings
- Cryptography
- Security certificates
- External component certificate management
- Security Updates and Patching
- Authenticity and Integrity
- About product authenticity and integrity
- Verification
- Verify the signer or signers for Windows binaries
- Verify the vendor for Linux (RPM-based) packages
- Verify the vendor for Linux (Debian-based) packages
- Verify GPG signatures for Linux (RPM-based) packages
- Verify the signature for JAR files
- Verify SHA-256 checksums in Windows
- Verify SHA-256 checksums in Linux
- Verify SHA-256 checksums in AIX
- Miscellaneous Configuration and Management Elements
- REST API Procedures
- TLS Cipher Suites
- Glossary
PowerProtect Data Manager Appliance 5.15.0.0 Security Configuration Guide for DM5500
Enable backup and restore encryption
You can ensure that the backup and restore content is encrypted when read on the source, transmitted in encrypted form, and then decrypted before it is saved on the destination.
Prerequisites
Review the information in Encryption in-flight to learn more about encryption in-flight.
The encryption settings determine if data transfers are encrypted during backup and restore operations.
- For File System, Microsoft Exchange Server, Oracle, SAP HANA, and Network Attached Storage (NAS) workloads, backup and restore encryption is only supported for Application Direct hosts. For Microsoft SQL Server, backup and restore encryption is supported for Application Direct and VM Direct hosts.
- When you add a new host to PowerProtect Data Manager Appliance, host configuration pushes the backup and restore encryption settings to the host.
- Only hosts that have the same version of PowerProtect Data Manager Appliance application agents installed support the host configuration.
Steps
- From the
PowerProtect Data Manager Appliance UI, click
, and then select
Security.
The Security dialog box appears. - Click the Backup/Restore Encryption switch so it is enabled, and then click Save.
Next steps
The window of the PowerProtect Data Manager Appliance UI creates a job to enable protection encryption. This job pushes encryption in-flight settings to the hosts to be used for self-service operations. Within the system job, a host configuration job is created for each host. If an error occurs, you can retry the system job or individual host configuration job.
NOTE:For centralized backup and restore operations,
PowerProtect Data Manager Appliance sends the
encryption in-flight settings to the application agents on the Application Direct hosts and network-attached storage (NAS).
You can disable backup and restore encryption by clicking the Backup/Restore Encryption switch. PowerProtect Data Manager Appliance creates a system job in the window to disable backup and restore encryption.
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\