Manage Disk Safe encryption

The Backup Manager allows you to set encryption on a Disk Safe. Follow the instructions below to manage the encryption.

{info:title=Reference: AES-256 Encryption}Advanced Encryption Standard (AES) is an algorithm for the encryption of electronic data. AES-256 encryption/decryption, which is Federal Information Processing Standards (FIPS) certified, protects data from unauthorized use. Due to the design and strength of all key lengths of the 256-bit-key, AES is sufficient to protect classified information up to the top-secret level.{info}

{info:title=Note}Once you have configured the encryption during Disk Safe creation, you cannot turn it on/off. For enabled encryption, the passphrase can be changed.
{info}
1. Create a new Disk Safe with enabled encryption. See [Create Disk Safes].

\*{newversion}\*


!Create New Disk Safe_Data Settings tab_encryption enabled.png!

\*{newversion}\* !Create New Disk Safe_Data Settings tab_English.png!

If you want to change encryption options for an existing Disk Safe, go to the "Disk Safes" list and click "Edit" to access the properties of the Disk Safe.

!Disk Safe list_Edit icon_2_English.png!

2. Switch to the "Data Settings" tab.

!Edit Disk Safe window_Enterprise_Data Settings tab_with encryption defined_English.png!

3. You will see the Encryption Management options.


!Edit Disk Safe_Encryption Management_English.png!

The following options are available:
* *Send Key to Server* \- Allows you to download the Disk Safe encryption key to the Server to which the Disk Safe is assigned
* *Download Key* \- Allows you to download the Disk Safe encryption key to the selected location
* *Recover Lost Passphrase* \- Allows you to recover the passphrase using the downloaded encryption key
* *Change passphrase* \- Allows you to set a new passphrase

----
{toc:location=top|maxLevel=3|minLevel=3|type=flat|separator=pipe|style=border:1}

----
h3. Downloading the Disk Safe Encryption Key

1. To download the key to the Server, click on the "Send Key to Server" button.

!Edit Disk Safe window_Enterprise_Data Settings tab_Send key to Agent_English.png!

Alternatively, click "Download" to save it to your computer.

!Edit Disk Safe window_Enterprise_Data Settings tab_Download key_English.png!

2. You will be prompted for a passphrase. Enter the phrase and click "OK."

!Disk Safe_Edit_Enter Encryption Passphrase_English.png!

The key will be sent to the Server or downloaded to your computer.

3. Copy or move the key to the remote server using SSH or another type of secure connection.

4. Place the key in the following directory:

{{/usr/sbin/r1soft/conf/disksafe-keys}}

or for Windows users:

{{C:\Program Files\Idera Server Backup\conf\disksafe-keys}}

----
h3. Changing the Passphrase

1. Click "Change Passphrase."

!Edit Disk Safe window_Enterprise_Data Settings tab_Change Passphrase_English.png!


2. Input the current and new passphrases and click "Change Passphrase."

!Edit Disk Safe window_Enterprise_Change Passphrase button_English.png!

----
h3. Recovering the Lost Passphrase

This option allows you to set a new passphrase using the previously downloaded Disk Safe encryption key (see the instructions above).

1. Click on "Recover Lost Passphrase."

!Edit Disk Safe window_Enterprise_Data Settings tab_Recover Lost Passphrase_English.png!

2. Click "Upload Key."

!Edit Disk Safe_Enterprise_Recover Lost Passphrase_English.png!

3. Click "Browse" and specify the path to the encryption key.

!Disk Safe_Recover Lost Passphrase_Browse_English.png!

4. The key will be displayed. Click "Upload."

!Disk Safe_Recover Lost Passphrase_Upload_English.png!

5. After you have uploaded the key, the indicator will turn green. Input the new passphrase and click "Recover Lost Passphrase."

!Disk Safe_Recover Lost Passphrase window_Key uploaded_English.png!

6. Click the "OK" button on the following window that appears.

!Disk Safe_Successfully changed passphrase_English.png!
7. Click the "Save" button for your changes to take effect.