cloudberry backup where to search encryption password

#Cloudberry backup where to search encryption password archive
#Cloudberry backup where to search encryption password full
#Cloudberry backup where to search encryption password software
#Cloudberry backup where to search encryption password password
#Cloudberry backup where to search encryption password download

What I have done with removable disks, usb sticks and internal drives is to use true crypt to mount the encrypted drive. In total, vbk encryption is a much needed feature and it would remove a lot of administrative overhead, as well as allow Veeam to become a product of choice for companies that have to follow certain compiance requirements. Also increasing the risk of information leak if hdd is lost or stolen.Īlso, as was already mentioned some compliance standards require that backup file is encrypted. Hence we have no choice, but to get rid of the weakest link and to copy unecrypted vbk onto the USB, so it can be read by any PC. However in an event of a disaster (ie Fire) the NAS device may physically break and we will be stuck with an unreadable USB hdd, until a new NAS device, of similar maker, is ordered and arrived. Lets suppose we replicate vbk files to various destinations - 3rd party cloud storage, intra-company remote storage, a USB hdd attached directly to a NAS device.ġ) When backing up to a 3rd party cloud storage we cannot guarantee that some employee within that 3rd party company would not access our unencrypted vbk file.Ģ) An intra-company remote storage is controlled by us and is fully trusted, so we do not need to encrypt a vbk fileģ) When backing up to a USB hdd we can easily encrypt the USB storage by means of a NAS device. Neither situation really protects you from someone compromising live servers. Either situation really just protects you from someone walking away with your disk drives. I think that an encrypted volume answers the 'at-rest' encryption problem in a relatively equivalent way to encrypted backup files. Other security controls should be in place to reduce those risks. It's just that at-rest encryption is not really a protection against active (live server) attacks, which is the scenario you describe. encrypted backup files are safer to move around, for example. Certainly in other ways there are differences. So wouldn't compromising the backup server also gain someone access to that data, even if the backup files themselves were encrypted? So in that regard I'm not sure encrypted backups are much different than an encrypted volume.

#Cloudberry backup where to search encryption password software

but what can any backup software do to really be 'enough'? Even if the backup data was encrypted the backup software still needs to be able to access that data.

I agree with this, in terms of encrypting the volume not being 'enough'.

#Cloudberry backup where to search encryption password password

If the server OS is compromised then the encrypted volume is also - giving them direct access to the vbk's which can be imported without any form of password protection.'

#Cloudberry backup where to search encryption password archive

No clear assurance that cloud archive backups are resilient/resumable after simply restarting the computer.'Storing the backup files on an encrypted volume is not enough.

#Cloudberry backup where to search encryption password full

It needs to have been an archive in the first place, but you can't do that without changing the settings and doing a full backup again (see last point). You can't upload file-level backups to the cloud as an archive. It will simply ask you to do a full backup again. You can't turn existing backups into hybrid backups or archives. Sometimes, it gives you too much control other times, it gives you too little.Īpplication often loses track of backup progress, as it is just a frontend to the system service that does the heavy lifting. UI is undeveloped and does not clearly explain your choices. Integration with both consumer storage services and enterprise storage services that I have never heard of.

#Cloudberry backup where to search encryption password download

Great effort placed into Amazon Glacier integration to minimize download costs just to retrieve a single file from a very large backup. In fact, paths become so ridiculously long and scrambled with encryption enabled that the backup folder cannot even be opened with Windows Explorer (not that there is anything of interest to see in there, as everything is encrypted, including the backup plan itself).Ĭonsistency checks ensure that the data held by the backup locations are sane. The developers understand that these special features are not mutually exclusive.Įncryption makes a backup truly uncrackable without the right password. Very robust can look through files and file versions at will, without having to sacrifice block-level backups or differential backups.