Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell PowerProtect Data Manager Appliance 5.13.0.0 Administrator Guide for DM5500

PDF

Backup and restore encryption

Using Transport Layer Security (TLS), you can encrypt backup or restore data that is in transit for centralized and self-service operations with DD Boost encryption. Encryption of backup and restore data in-flight is available for agent host assets, Kubernetes cluster assets, Network-attached storage (NAS) assets, and VMware virtual machine assets only.

By default, PowerProtect Data Manager Appliance supports an encryption strength of HIGH and uses DD Boost anonymous authentication mode. The DD Boost encryption software uses the ADH-AES256-SHA cipher suite. The DD Boost for OpenStorage Administration Guide provides more information about the cipher suite for high encryption.

The following table lists the workloads and operations that support encryption of data in-flight:

NOTE: Refer to the agent user guides for more information about the centralized and self-service operations that are supported.
Table 1. Supported workloads
Workload Centralized backup Centralized restore Self-service backup Self-service restore
File System with Application Direct Yes Yes (image-level restore only) Yes Yes (image-level restore only)
Kubernetes cluster Yes Yes N/A Yes (from the most recent backup)
Microsoft SQL Server with Application Direct Yes Yes (database-level restore only) Yes Yes (database-level restore only)
Microsoft Exchange Server with Application Direct Yes N/A Yes Yes
NAS Yes Yes N/A N/A
Oracle with Application Direct Yes N/A Yes Yes
SAP HANA with Application Direct Yes N/A Yes Yes
Virtual machines Yes Yes N/A N/A

Enabling encryption imposes additional overhead. Backup and restore performance for any client could be affected by 5-20% with encryption enabled.

You can enable or disable backup and restore encryption in the PowerProtect Data Manager Appliance UI.

PowerProtect Data Manager Appliance supports backup and restore encryption for all supported DD Boost versions. The most up-to-date software compatibility information for PowerProtect Data Manager Appliance is provided by the Dell E-Lab Navigator.

NOTE: You do not need to enable in-flight encryption on connected DD systems. If DD encryption settings exist, the higher setting takes precedence.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\