Configure Encryption as a Machine Property

Configure Encryption as a Machine Property

There are certain scenarios, such as for compliance reasons, where it may be required to configure backup encryption via the Cyber Protect application on a device rather than via the Cyber Protect Console. In this case, backup encryption is not configured in the protection plan, but on the protected workload. Encryption as a machine property uses the AES algorithm with a 256-bit key (AES-256).

There is no way to recover your encryption password or to decrypt encrypted backups without it, if you lose the password your backups will be inaccessible. Please keep track of your password as eSilo support staff can not assist you if you lose it. If you lose your password and your computer is still functional, please reset your encryption password immediately or contact eSilo staff for assistance to ensure future backups of your device will be accessible.

If you change or remove the encryption password you may need to start a new backup of your device, you can do this by creating a new Protection Plan or by changing the backup file name or by deleting the existing backup file. If you were directed to follow the below instructions by eSilo staff, no additional action will be needed from you as eSilo staff will start a new backup of your device for you. 

Configuring Encryption via the Command Line

  1. Log in as an administrator (in Windows) or the root user (in Linux).
  2. On the command line, run the following command:

    • For Windows: 

      <installation_path>\PyShell\bin\acropsh.exe -m manage_creds --set-password <encryption_password>

      By default, the installation path is %ProgramFiles%\BackupClient.

    • For Linux: 

      /usr/sbin/acropsh -m manage_creds --set-password <encryption_password>
    • For a virtual appliance:

       /./sbin/acropsh -m manage_creds --set-password <encryption_password>

Configuring Encryption via the Cyber Protect Monitor

  1. Log in to your device as an administrator.
  2. Click the Cyber Protect Monitor icon in the notification area (in Windows) or the menu bar (in macOS).
  3. Click the gear icon, and then click Settings > Encryption.
  4. Select Set a password for this machine. Specify and confirm the encryption password.
  5. Click Save.

Store Your Password

eSilo recommends storing your password in a password management application. If you are required for compliance purposes to manage your own encryption passwords, please ensure your passwords are stored and documented as per your compliance requirements. 

If you have any questions, send us an email at support@esilo.com.