Can DDB Backups be encrypted?

@JoeT , I don’t know that they can’t be encrypted, though you likely have to enable this at the client level (treating the Media Agent as a client in this case).

Can you see if the MA as a client shows Encryption enabled?

Hi Mike,

Thanks for the quick response.  Yes I do have the MA setup with encryption using the same algorithm as it is in the storage policy.   I have been testing individual MAs and clients this way enabling them first before enabling encryption through the storage policy.  I can’t remember seeing whether the DDB backup was indicating as encrypted from the storage policy report when I only had the MA encryption set.  I do have another MA that is not currently set.  I will set that one at the MA level only and see if it encrypts the DDB backup.

Thanks.

If the requirement is only for the backups to be encrypted, lets just say that DDB got into the wrong hands, there’s no “data” so-to-say that’s in the DDB which is doing block-tracking in a sense, that someone could grab and get a hold of your files and folders

@Hyder is 100% correct.  The DDB is a list of block IDs, references per ID, and any file we can delete.

It is absolutely useless in any other context.

@Mike Struening and still the case where its not required for restore purposes for DR scenarios as well correct?

Thanks everyone as I understand there is no need to encrypt the DDB backup data because in no way contains any company data, it is just pointers to the blocks stored in the disk library that contain the company data which is encrypted and deduplicated.