Video Screencast Help

Encryption With BE 12.5

Created: 26 Sep 2010 • Updated: 08 Oct 2010 | 3 comments
Kiran Bandi's picture
+4 6 Votes
Login to vote
Symantec single video player.

This silent video describes about creating an encryption key and using it along with a backup job to encrypt data.


Backup Exec provides the ability to encrypt data, which helps us in protecting data from unauthorized access. Backup Exec provide the Software Encryption, but it also supports some devices that provide Hardware Encryption with the T10 standard.

Backup Exec supports two security levels of encryption: 128-bit Advanced Encryption Standard (AES) and 256-bit Advanced Encryption Standard. For 128-bit AES pass phrase must be atleast  8 characters, whereas 256-bit AES pass phrase must be atleast 16 characters. The 256-bit AES encryption provides a stronger level of security because the key is longer for 256-bit AES than for 128-bit AES. However, 128-bit AES encryption enables backup jobs to process more quickly.

When you install Backup Exec, the installation program installs the necessary encryption software on the media server and on remote computers that use the Remote Agent. Backup Exec can encrypt data at a computer that uses the Remote Agent, and then transfer the encrypted data to the media server. Backup Exec then writes the encrypted data on a set-by-set basis to tape or to a backup-to-disk folder.

Software compression can be used along with the encryption option. First BE compresses the files, and then encrypts them. However, backup jobs take longer to complete when you use both encryption and software compression.


  1. Create an encryption key; use it with the backup job.
  2. Create an encryption key while creating the backup job.
  3. Create / use an encryption key along with a backup set template or duplicate backup job template.

I followed the first method in the video.

To create an encryption key

  1.  On the Tools menu, click Encryption Keys.
  2.  Click New.
  3.  Type the name for the Key.
  4.  Select the type of Encryption
  5.  Provide the pass phrase.
  6.  Confirm pass phrase.
  7.  Select the type of key. (Common / Restricted).
  8.  Click OK

Common: Any user of this installation of Backup Exec can use the key to back up and restore data.

Restricted: Anyone can use the key to back up data, but only the key owner or a user who knows the pass phrase can use the key to restore the encrypted data.

Selecting An Encryption Key For A Backup Job:

  1.  On the navigation bar, click the arrow next to Backup.
  2.  Click New Backup Job.
  3.  Select the data that you want to back up.
  4.  On the Properties pane, under Settings, click Network and Security.
  5.  In the Encryption type field, select the type of encryption you want to use.
  6.  In the Encryption Key field, select the name of the key to be used for encryption.
  7.  Process the backup job as normal.

Hope this video helps....

Video Upload: 

Comments 3 CommentsJump to latest comment

James Winslow's picture

Thanks Kiram, would this still be usable with BE 2010 R2 ?

Login to vote
Kiran Bandi's picture


You can follow the same procedure with BE2010/BE2010R2 also....

Login to vote
vigneshwaran's picture

Hi We have 2 encrption keys. one key is accessed by daily when the backup starting. If i restore it's not asking a key bcoz it's automatically taken from Database Correct??

Now i want what is the pass phrase for that key and how to find this one. Pls help on this...



- Vicky
Login to vote