Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Encryption properties
Veritas NetBackup™ Administrator's Guide, Volume I

Encryption properties

The Encryption properties control encryption on the currently selected client.

Multiple clients can be selected and configured at one time only if all selected clients are running the same version of NetBackup. If not, the Encryption properties dialog box is hidden.

More information is available in the NetBackup Security and Encryption Guide.

Figure: Encryption dialog box

Encryption dialog box

The Encryption permissions property indicates the encryption setting on the selected NetBackup client as determined by the master server.

Table: Encryption permissions selections

Property

Description

Not allowed

Specifies that the client does not permit encrypted backups. If the server requests an encrypted backup, the backup job ends due to error.

Allowed

Specifies that the client allows either encrypted or unencrypted backups. Allowed is the default setting for a client that has not been configured for encryption.

Required

Specifies that the client requires encrypted backups. If the server requests an unencrypted backup, the backup job ends due to error.

Select the Enable encryption property if the NetBackup Encryption is used on the selected client.

After Enable Encryption is selected, choose from the properties in Table: Encryption dialog box properties.

Table: Encryption dialog box properties

Property

Description

Enable standard encryption

Pertains to the 128-bit and the 256-bit options of NetBackup Encryption.

If the selected client does not use Legacy encryption, Enable standard encryption is automatically selected.

Client Cipher

The following cipher types are available: BF-CFB, DES-EDE-CFB, AES-256-CFB, and AES-128-CFB. AES-128-CFB is the default.

More information about the ciphers file is available in the NetBackup Security and Encryption Guide.

Enable legacy DES encryption

Pertains to the 40-bit and the 56-bit data encryption standard (DES) NetBackup encryption packages.

Encryption strength

Defines the encryption strength on the NetBackup client when Legacy encryption is used:

  • DES_40

    Specifies the 40-bit DES encryption. DES_40 is the default value for a client that has not been configured for encryption.

  • DES_56

    Specifies the 56-bit DES encryption.

Encryption libraries

Specify the folder that contains the encryption libraries on NetBackup clients.

The default location is as follows:

  • On Windows:

    install_path\NetBackup\bin\

    Where install_path is the directory where NetBackup is installed and by default is C:\Program Files\Veritas.

  • On UNIX:

    /usr/openv/lib

If it is necessary to change the setting, specify the new name.

Encryption key file

Specify the file that contains the encryption keys on NetBackup clients.

The default location is as follows:

  • On Windows:

    install_path\NetBackup\bin\keyfile.dat

    Where install_path is the folder where NetBackup is installed and by default is C:\Program Files\Veritas.

  • On UNIX:

    /usr/openv/netbackup/keyfile

If it is necessary to change the setting, specify the new name.

Feedback

Was this page helpful?
Previous

Distributed application restore mapping properties

Next

Additional encryption methods for Windows clients

Feedback

Was this page helpful?