- Notes, cautions, and warnings
- Preface
- Getting Started
- System Maintenance
- Deploying and maintaining the health of PowerProtect Data Manager
- Deploying and updating PowerProtect Data Manager
- Licensing PowerProtect Data Manager
- Specifying the PowerProtect Data Manager host
- Memory optimization
- Restricted mode
- System support
- Configuring SupportAssist for PowerProtect Data Manager
- Telemetry Collector
- CloudIQ reporting
- Set up the email server
- Add AutoSupport
- Enabling automatic update package checks and downloads
- Add a log bundle
- Audit logging and monitoring system activity
- Monitor system state and system health
- Access the open source software package information
- Security certificates
- Restarting PowerProtect Data Manager
- System maintenance troubleshooting
- Managing Storage
- Using the PowerProtect Search Engine
- Managing Assets
- Managing Protection Policies
- Protection policies
- Before you create a protection policy
- Overview of PowerProtect Data Manager Cloud Tier
- Manual backups of protected assets
- Manual replication of protected assets
- Manual Cloud Tiering of protected assets
- Editing a protection policy
- Viewing a summary of protection policies
- Extended retention
- Edit the retention period for backup copies
- Delete backup copies
- Removing expired backup copies
- Removing assets from PowerProtect Data Manager
- Export protection
- Disable a protection policy
- Delete a protection policy
- Add a service-level agreement
- Export Asset Compliance
- Protecting client assets after a client hostname change
- Ifgroup configuration and PowerProtect Data Manager policies
- Preparing for and Recovering From a Disaster
- About server disaster recovery
- System recovery for server DR
- Server DR protection storage types
- Automatic server DR
- Prepare the DD system recovery target (NFS)
- Manually configure server DR backups
- Record settings for server DR
- Manage PowerProtect Data Manager server DR backups
- Restore PowerProtect Data Manager from server DR backups
- Troubleshooting NFS backup configuration issues
- Troubleshoot recovery of PowerProtect Data Manager
- Recover a failed PowerProtect Data Manager restore
- Quick recovery for server DR
- Overview of PowerProtect Data Manager Cloud Disaster Recovery
- Managing Alerts, Jobs, and Tasks
- Configure Alert Notifications
- View and manage alerts
- View and manage Audit Logs
- Monitoring jobs and tasks
- Restart a job or task manually
- Restart a job or task automatically
- Resume misfire jobs after a PowerProtect Data Manager update
- Cancel a job or task
- Exporting logs
- Limitations for alerts, jobs, and tasks
- Modifying the System Settings
- Configuring and Managing the PowerProtect Agent Service
PowerProtect Data Manager 19.10 Administration and User Guide
Backup and restore encryption
You can encrypt backup or restore data that is in transit for centralized and self-service operations with DD Boost encryption, using TLS. Encryption of backup and restore data in-flight is available for application assets and NAS assets only.
By default, PowerProtect Data Manager supports an encryption strength of HIGH and uses DD Boost anonymous authentication mode. The DD Boost encryption software uses the ADH-AES256-SHA cipher suite. The DD Boost for OpenStorage Administration Guide provides more information about the cipher suite for high encryption.
The following table lists the workloads and operations that support encryption of data in-flight:
NOTE Refer to the agent user guides for more information about the centralized and self-service operations that are supported.
| Workload | Centralized backup | Centralized restore | Self-service backup | Self-service restore |
|---|---|---|---|---|
| File System with Application Direct | Yes | Yes (image-level restore only) | Yes | Yes (image-level restore only) |
| Microsoft SQL Server with Application Direct | Yes | Yes (database-level restore only) | Yes | Yes (database-level restore only) |
| Microsoft Exchange Server with Application Direct | Yes | N/A | Yes | Yes |
| Oracle with Application Direct | Yes | N/A | Yes | Yes |
| SAP HANA with Application Direct | Yes | N/A | Yes | Yes |
| Network-attached storage (NAS) | Yes | Yes | N/A | N/A |
Enabling encryption imposes additional overhead. Backup and restore performance for any client could be affected by 5-20% with encryption enabled.
You can enable or disable backup and restore encryption in the PowerProtect Data Manager UI.
PowerProtect Data Manager supports backup and restore encryption for all supported DD Boost and DDOS versions. The most up-to-date software compatibility information for PowerProtect Data Manager is provided in the E-Lab Navigator.
NOTE You do not need to enable in-flight encryption on connected
DD systems. If
DD encryption settings exist, the higher setting takes precedence.
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\