Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. Data at rest encryption security
  5. Configuring legacy encryption on clients
  6. About setting legacy encryption attribute in policies
NetBackup™ Security and Encryption Guide

About setting legacy encryption attribute in policies

You must set the Encryption attribute in your NetBackup policy according to the following:

  • If the attribute is set, the NetBackup server requests that NetBackup clients in that policy perform encrypted backups.

  • If the attribute is not set, the NetBackup server does not request that NetBackup clients in that policy perform encrypted backups.

You can use the Attributes tab of the policy in the NetBackup Administration Console to set or clear the Encryption attribute for a policy.

Refer to the NetBackup Administrator's Guide, Volume I for more information on how to configure policies.

You can also use the bpinst command to set or clear the Encryption attribute for NetBackup policies. This method is convenient if you want to set or clear the attribute for several policies.

For example, to set the Encryption attribute for policy1 and policy2 from a NetBackup server, enter a command like the following:

bpinst -LEGACY_CRYPT -policy_encrypt 1 -policy_names policy1 policy2

The 1 parameter sets the encryption attribute (0 would clear it).

Feedback

Was this page helpful?
Previous

Restoring a legacy encrypted backup created on another client

Next

Changing client legacy encryption settings from the server

Feedback

Was this page helpful?