368
Copyright © Acronis, Inc., 2000-2010
Dynamic volume
Any volume located on dynamic disks (p. 366), or more precisely, on a disk group (p. 366). Dynamic
volumes can span multiple disks. Dynamic volumes are usually configured depending on the desired
goal:
to increase the volume size (a spanned volume)
to reduce the access time (a striped volume)
to achieve fault tolerance by introducing redundancy (mirrored and RAID-5 volumes.)
E
Encrypted archive
A backup archive (p. 361) encrypted according to the Advanced Encryption Standard (AES). When the
encryption option and a password for the archive are set in the backup options (p. 362), each backup
belonging to the archive is encrypted by the agent (p. 360) before saving the backup to its
destination.
The AES cryptographic algorithm operates in the Cipher-block chaining (CBC) mode and uses a
randomly generated key with a user-defined size of 128, 192 or 256 bits. The encryption key is then
encrypted with AES-256 using a SHA-256 hash of the password as a key. The password itself is not
stored anywhere on the disk or in the backup file; the password hash is used for verification
purposes. With this two-level security, the backup data is protected from any unauthorized access,
but recovering a lost password is not possible.
Encrypted vault
A managed vault (p. 369) to which anything written is encrypted and anything read is decrypted
transparently by the storage node (p. 371), using a vault-specific encryption key stored on the node.
In case the storage medium is stolen or accessed by an unauthorized person, the malefactor will not
be able to decrypt the vault contents without access to the storage node. Encrypted archives (p. 368)
will be encrypted over the encryption performed by the agent (p. 360).
Export
An operation that creates a copy of an archive (p. 361) or a self-sufficient part copy of an archive in
the location you specify. The export operation can be applied to a single archive, a single backup (p.
361) or to your choice of backups belonging to the same archive. An entire vault (p. 373) can be
exported by using the command line interface.
F
Full backup
A self-sufficient backup (p. 361) containing all data chosen for backup. You do not need access to any
other backup to recover the data from a full backup.
