Decrypting Tapes with Enterprise Manager Keys

If you have lost or forgotten a password or you cannot use KMS keys due to a KMS server failure, you can restore encrypted data using password loss protection provided by Veeam Backup Enterprise Manager. This solution allows you to include Enterprise Manager keyset in the encryption process and use it to decrypt tapes. For more information, see the Enterprise Manager Keys section in the Veeam Backup & Replication User Guide.

Password loss protection has the following requirements and limitations:

• To use password loss protection, you must have a paid license. For more details about licensing support, see Veeam Data Platform Feature Comparison.
• Backup servers that you use for data decryption must be connected to the same instance of Veeam Backup Enterprise Manager. If you connect the backup server to several instances of Veeam Backup Enterprise Manager, this may cause unexpected behavior, and the decryption process may fail.

• Password loss protection must be enabled on Veeam Backup Enterprise Manager. For more details, see the Managing Encryption Keys section in the Veeam Backup Enterprise Manager Guide.

To decrypt backup files with Enterprise Manager keys, you need to issue a request to Veeam Backup Enterprise Manager using the following wizards:

• The Encryption Key Restore wizard on the backup server.
• The Password Recovery wizard on the Veeam Backup Enterprise Manager server.

To complete the operation, perform the following steps:

1. Create a request for key restore.
2. Process the request in Veeam Backup Enterprise Manager.
3. Complete the key restore process.