Configure Encryption as a Machine Property

Configure Encryption as a Machine Property

There are certain scenarios, such as for compliance reasons, where it may be required to configure backup encryption via the Cyber Protect application on a device rather than via the Cyber Protect Console. In this case, backup encryption is not configured in the protection plan, but on the protected workload. Encryption as a machine property uses the AES algorithm with a 256-bit key (AES-256).

There is no way to recover your encryption password or to decrypt encrypted backups without it, if you lose the password your backups will be inaccessible. Please keep track of your password as eSilo support staff can not assist you if you lose it. If you lose your password and your computer is still functional, please reset your encryption password immediately or contact eSilo staff for assistance to ensure future backups of your device will be accessible.

If you change or remove the encryption password you may need to start a new backup of your device, you can do this by creating a new Protection Plan or by changing the backup file name or by deleting the existing backup file. If you were directed to follow the below instructions by eSilo staff, no additional action will be needed from you as eSilo staff will start a new backup of your device for you. 

Configuring Encryption via the Command Line

  1. Log in as an administrator (in Windows) or the root user (in Linux).

  2. On the command line, run the following command:

    • For Windows: 

      <installation_path>\PyShell\bin\acropsh.exe -m manage_creds --set-password <encryption_password>

      By default, the installation path is %ProgramFiles%\BackupClient.

    • For Linux: 

      /usr/sbin/acropsh -m manage_creds --set-password <encryption_password>

    • For a virtual appliance:

       /./sbin/acropsh -m manage_creds --set-password <encryption_password>

Configuring Encryption via the Cyber Protect Monitor

  1. Log in to your device as an administrator.
  2. Click the Cyber Protect Monitor icon in the notification area (in Windows) or the menu bar (in macOS).
  3. Click the gear icon, and then click Settings > Encryption.
  4. Select Set a password for this machine. Specify and confirm the encryption password.
  5. Click Save.

Store Your Password

eSilo recommends storing your password in a password management application. If you are required for compliance purposes to manage your own encryption passwords, please ensure your passwords are stored and documented as per your compliance requirements. 

If you have any questions, send us an email at support@esilo.com.

    • Related Articles

    • Recovering Disks Using Bootable Media

      This article explains how to recover an entire disk using the bootable media, this is useful for recovering disks of a non-booting computer or recovering an entire disk after a malware incident. If you only need to recover files or folders to a ...

    • Install eSilo Cyber Protect on a Mac

      To install eSilo's Acronis Cyber Protect Agent software on your Mac start by downloading the installer here: eSiloCyberProtect_AgentForMac_web.dmg There may be some of the following steps that are not required depending on currently configured system ...

    • Recovering Files and Folders Using the Cyber Protect Console

      This article explains how to recover files or folders to a computer via the web console at console.esilo.com. This method assumes the computer you are recovering files to is working and connected to the internet. To recover an entire disk or a ...

    • Creating Bootable Media

      You can recover either Windows or Linux by using the same media. To recover macOS, create media on a device running macOS. For instructions on using bootable media to perform a recovery, use this article: ...

    • How to Create a Local Backup Job Using Veeam Agent for Windows

      This is useful when you need to comply with the 3-2-1 rule of backups: 3 copies of important data (1 production copy and 2 backups) 2 types of storage media (e.g. internal hard drive, external hard drive, USB flash drive, cloud copy, tape backup, ...