Encryption

The Arcserve UDP solution provides encryption feature for data.

When the backup destination is a recovery point server, the available encryptions are No Encryption and Encrypt data with AES-256. You can set this to create a data store. When the backup destination is the local or remote share, the available encrypt format options are No Encryption, AES-128, AES-192, and AES-256. You can set the option while creating a plan to backup to local or share folder, or set this from backup setting for standalone Arcserve UDP Agent.

Key Features of Encryption

1. AES256 encryption method applies to:
   • Data Store
   • Password saved (in protection plan, registry, configuration file, and so on)
2. For Backup job: If encryption is enabled, data is encrypted before sending out of the server.
3. For Replication job: If replication destination has encryption enabled, data is encrypted before sending out of the server.

Encryption settings

1. Select the type of encryption algorithm that you want to use for backups.
2. Data encryption is the translation of data into a form that is unintelligible without a deciphering mechanism. The Arcserve UDP solution uses secure, AES (Advanced Encryption Standard) encryption algorithms to achieve maximum security and privacy of your specified data.
2. When an encryption algorithm is selected, provide (and confirm) an encryption password.
• The encryption password is limited to a maximum of 23 characters.
• A full backup and all its related incremental and verify backups must use same password to encrypt data.
• If the encryption password for an incremental or verify backup is changed, a full backup must be performed. This means after changing encryption password, the first backup will be full, despite the original backup type.
3. For example, if you change the encryption password and submit a customized incremental or verify backup manually, it automatically converts to a full backup.

Note: This option is available only for the local or remote share destinations. You cannot disable the encryption setting if the Arcserve UDP agent is backed up to data store.

3. The Arcserve UDP solution has encryption password and session password.
• The encryption password is required for data store.
• The session password is required for node.
• If the data store is encrypted, then session password is mandatory. If the data store is not encrypted, the session password is optional.
4. A password is not required when you are attempting to restore to the computer from which the backup was performed. However, when you attempt to restore to a different computer, a password is required. By default, only for the first login password is required. To enter password even after the first login, the administrator needs to manually stop Arcserve UDP Agent Explorer Extension Service.