With its optional Encryption Module,
BackupEDGE can encrypt some or all of the data
in an archive using strong encryption methods. Encryption is fully integrated with other product functions, such as FFR / IFR, Compression, Disaster Recovery, etc. User data is encrypted with 256 bit AES
encryption, while the AES key exchange is handled via 2048 bit RSA encryption. Because BackupEDGE uses the asymmetric RSA encryption algorithm for key exchange, you do not need to have
the decryption key on a machine in order to make encrypted backups! For example, you can easily configure multiple machines to use the same RSA encryption key, without any risk that a mistake at any one of
them will compromise the security of all three because the decryption key can be kept elsewhere! However, encryption can also
be configured to be totally transparent, so that restores of encrypted data do not require any special steps. When set up like this, the archive is still encrypted, so attempts to restore it on other systems
will fail. If you want to protect backups taken off-site without changing many procedures, then this "transparent" configuration may be suitable. |
