PowerProtect Data Manager 19.17 SAP HANA User Guide

Encryption in-flight

PowerProtect Data Manager provides centralized management of encryption in-flight for supported workloads. Encryption in-flight is supported for both centralized and self-service policies, where applicable, and is enabled by default. To verify the replication encryption and backup and restore encryption settings from the PowerProtect Data Manager UI, click and then select Security.

You can ensure that backup and restore content is encrypted when read on the source, transmitted in encrypted form, and then decrypted before it is saved on the destination. This process prevents another party from intercepting private data.

Encryption in-flight is a global setting that is applicable to all supported workloads. PowerProtect Data Manager only supports encryption in-flight for the following workloads:

• File System
• Kubernetes clusters
• Microsoft SQL Server
• Microsoft Exchange Server
• Network-attached storage (NAS)
• PowerMax and PowerStore storage arrays
• Oracle
• SAP HANA
• VMware virtual machine

For File System, Microsoft Exchange Server, Oracle, SAP HANA, and NAS workloads, encryption in-flight is only supported for Application Direct hosts. For File System agents, restore encryption is supported for image-level restore only. For Microsoft SQL Server agents, restore encryption is supported for database-level restore only.

The PowerProtect Data Manager Administrator Guide and PowerProtect Data Manager Security Configuration Guide provide more information about encryption in-flight, such as how to enable the feature and important considerations to understand before enabling.