Quest Engineering DL4300, User Manual

Page: 104 / 540

DL4300 Appliance
Disassociating an encryption key from a protected machine
104
Table 34. New encryption key details
Text Box Description
Name Enter a name for the encryption key.
Encryption key names must contain between 1 and
64 alphanumeric characters. Do not use prohibited
characters or prohibited phrases .
Description Enter a descriptive comment for the encryption key.
This information appears in the Description field
when viewing a list of encryption keys in the Rapid
Recovery Core Console. Descriptions may contain
up to 254 characters.
Best practice is to avoid using
prohibited characters
and prohibited phrases .
Passphrase Enter a passphrase used to control access.
Best practice is to avoid using
prohibited characters .
Record the passphrase in a secure location. Dell
Support cannot recover a passphrase. Once you
create an encryption key and apply it to one or more
protected machines, you cannot recover data if you
lose the passphrase.
Confirm Passphrase Re-enter the passphrase. It is used to confirm the
passphrase entry.
4. Click OK.
The dialog box closes. The encryption key you specified has been applied to future backups for this
protected machine, and the lock now appears as closed.
Optionally, if you want the encryption key applied immediately, force a snapshot. For more information, see
Forcing a snapshot .
CAUTION: Rapid Recovery uses AES 256-bit encryption in the Cipher Block Chaining (CBC)
mode with 256-bit keys. While using encryption is optional, Dell recommends that you establish an
encryption key, and that you protect the passphrase you define. Store the passphrase in a secure
location as it is critical for data recovery. Without a passphrase, data recovery is not possible.
Parent topic
Disassociating an encryption key from a protected machine
Once an encryption key is applied to a protected machine, all subsequent snapshot data stored in the Rapid
Recovery Core is encrypted.
You can disassociate an encryption key from a protected machine. This action does not decrypt the existing
backup data, but does result in a new base image for that machine at the time of the next scheduled or forced
snapshot.
NOTE: If you want to remove an encryption key from the Core, as described in the topic Removing an
encryption key , you must first disassociate that encryption key from all protected machines.
Perform this procedure to disassociate an encryption key from a specific protected machine.
1. Navigate to the Rapid Recovery Core and click Protected Machines.