Scenario 6: Using encryption

If you export the tape and keep them in an offsite location, you may want enabling encryption to avoid information theft

Infrastructure: It is recommended to use hardware encryption, if device supports it. hardware encryption is enabled in library web UI and you should choose Application managed mode so Veeam can manage the encryption keys. Otherwise, software encryption will be used which can result in performance penalty.

Media pool: select “use encryption”. When importing encrypted tape to another Veeam server, password must be provided before using such tape.

Source job: it is also possible to enable encryption on source backup (job properties – storage – advanced – storage – encryption). When importing encrypted backup to another Veeam server, the content of such tape (backup file name and size) will be visible, but restore from encrypted backup is not possible unless you specify a password.

Note: both types of encryption can be enabled at the same time, however it is recommended to use only 1 type of encryption to avoid double encryption

Other recommendation: for Enterprise and Enterprise+ edition, password loss protection can be enabled. See User guide for details