Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell NetWorker 19.9 Administration Guide

AES Encryption

You can apply password protection and 256-bit data Advanced Encryption Standard (AES) encryption to backup and archive data on UNIX and Windows hosts for additional security.

NOTE:You can apply password protection alone, AES encryption alone, password protection and encryption together, or compression alone. You cannot apply password protection and compression together or encryption and compression together. Do not apply AES encryption and in-flight encryption together.

When NetWorker uses aes to encrypt the backup data, backup times increase. The process of encrypting the data increases CPU and memory usage on the backup client. The impact to CPU and memory resources depends on a number of factors including the load on the host, network speed, and the number of backup files. A backup of a single large file requires less resources than a backup of a dense file system, where NetWorker must access a large number of small-sized files.

Do not use the aes ASM for data encryption when backing up files that are encrypted by using the Microsoft Windows Encrypting File System (EFS). The backup is reported as successful, but recovery of the file fails and the following message is written to the NetWorker log file:

recover: Error recovering
filename. The RPC call completed before all pipes were processed.

When a backup includes EFS encrypted files, the files are transmitted and stored on backup volumes in their encrypted format. When the files are recovered, they are also recovered in their encrypted format.

Password protection

AES Encryption is supported through the use of the aes Application Specific Module (ASM) based on the password that is defined on the UNIX or Windows host. If a password is not defined on the host, then data is encrypted with the default password that is configured for the NetWorker server.

NOTE:You must specify the password to recover password-protected files. If the password was configured or changed after the backup occurred, then you must provide the password that was in effect when the file was originally backed up. Keep password changes to a minimum.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\