PowerProtect Data Manager 19.16 Virtual Machine User Guide

Encryption in-flight

PowerProtect Data Manager provides centralized management of encryption in-flight for supported workloads. Encryption in-flight is supported for both centralized and self-service policies, where applicable, and is enabled by default. To verify the replication encryption and backup and restore encryption settings from the PowerProtect Data Manager UI, click and then select Security.

You can ensure that backup and restore content is encrypted when read on the source, transmitted in encrypted form, and then decrypted before it is saved on the destination. This prevents another party from intercepting private data.

PowerProtect Data Manager only supports encryption in-flight for File System, Kubernetes clusters, Microsoft SQL Server, Microsoft Exchange Server, network-attached storage (NAS), PowerStore storage arrays, Oracle, SAP HANA, and VMware virtual machine workloads. This is a global setting that is applicable to all supported workloads.

For File System, Microsoft Exchange Server, Oracle, SAP HANA, and NAS workloads, encryption in-flight is only supported for Application Direct hosts. For File System agents, restore encryption is supported for image-level restore only. For Microsoft SQL Server agents, restore encryption is supported for database-level restore only.

The PowerProtect Data Manager Administrator Guide and PowerProtect Data Manager Security Configuration Guide provide more information about encryption in-flight, such as how to enable the feature and important considerations to understand before enabling.