Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. Data at rest encryption security
  5. Configuring standard encryption on clients
  6. Restoring an encrypted backup file to another client
NetBackup™ Security and Encryption Guide

Restoring an encrypted backup file to another client

Redirected restores are described in the following procedure.

To restore an encrypted backup to another client

  1. The server must allow redirected restores, and you (the user) must be authorized to perform such restores.

    See the NetBackup Administrator's Guide, Volume I for details on redirected restores.

  2. Obtain the pass phrase that was used on the other client when the encrypted backup was made. Without that pass phrase, you cannot restore the files.

    Note if the pass phrase is the same on both clients, skip to step 5.

  3. To preserve your own (current) key file, move or rename it.
  4. Use the bpkeyutil command to create a key file that matches the other client's. When the bpkeyutil process prompts you for the pass phrase, specify the other client's pass phrase.
  5. Restore the files to the other client.

    After you restore the encrypted files from the client, rename or delete the key file that you created in step 4.

    Next, you move or rename the original key file to its original location or name. If you do not re-establish your key file to its original location and name, you may not be able to restore your own encrypted backups.

Feedback

Was this page helpful?
Previous

Automatic backup of the key file

Next

About configuring standard encryption directly on clients

Feedback

Was this page helpful?