encryption key

[SymQNA]

hen trying to catalog the storage including .bkf files backup with encryption key applied on the backup job, CAS pop up error and asking to input encryption key on related Backup Exec Server. Does it mean if we use encryption key in the bakcup job created on CAS, then we need to input the key in all MMS servers? In BE2010, we don't need to input encryption key in MMS .

[SymQNA]

Would you please advise? Thanks

[VJware · Accepted solution]

Encryption keys are stored in the Backup Exec Database. So ideally, encryption keys must be created on the server where the actual job will be run.

If the key is common / non restricted, then anyone can restore whereas if the key is restricted, then only the key owner can restore. Also, if BE cannot contact the server (if i recall it is 15 seconds) or if BE cannot locate the encryption key, then it prompts one to enter the passphrase.

In your case, as you are restoring from the CASO, you need to enter the passphrase only on the MMS server where the key was originally created and where the backup job ran.