Encryption keys may contain a state of unlocked or locked. An unlocked encryption key can be applied to a protected machine to secure the backup data saved for that machine in the repository. From a Rapid Recovery Core using an unlocked encryption key, you can also recover data from a recovery point.
When you import an encryption key into a Rapid Recovery Core, its default state is Locked. This is true regardless of whether you explicitly imported the key, or whether the encryption key was added to the Rapid Recovery Core either by replicating encrypted protected machines or by importing an archive of encrypted recovery points.
For encryption keys added to the Rapid Recovery Core by replication only, when you unlock a key, you can specify a duration of time (in hours, days, or months) for the encryption key to remain unlocked. Each day is based on a 24-hour period, starting from the time the unlock request is saved to the Rapid Recovery Core. For example, if the key is unlocked at 11:24 AM on Tuesday and the duration selected is 2 days, the key automatically re-locks at 11:24 AM that Thursday.
|
|
NOTE: You cannot use a locked encryption key to recover data or to apply to a protected machine. You must first provide the passphrase, thus unlocking the key. |
You can also lock an unlocked encryption key, ensuring that it cannot be applied to any protected machine until it is unlocked. To lock an encryption key with a state of Universal, you must first change its type to Replicated.
If an unlocked encryption key is currently being used to protect a machine in the Core, you must first disassociate that encryption key from the protected machine before you can lock it.
Complete the steps in this procedure to unlock a locked encryption key.
- Navigate to the Rapid Recovery Core Console.
- On the icon bar, click
(More) and then select Encryption Keys.
The Encryption Keys page appears. The State column indicates which encryption keys are locked. - Locate the encryption key you want to unlock, click its drop-down menu
The Unlock Encryption Key dialog box appears.
- In the dialog box, in the Passphrase text box, enter the passphrase to unlock this key.
- To specify the length of time that the key remains unlocked, in the Duration option, do one of the following:
- To specify that the key remains unlocked until you explicitly lock it, select Until locked manually.
- To specify that the key remains locked for a duration which you configure in hours, days, or months, do the following:
- Select the number field and enter a value between 1 and 999.
- Specify the duration number as hours, days, or months, respectively.
- Then click OK.
This option is available for encryption keys added by replication.
The dialog box closes and the changes for the selected encryption key are visible on the Encryption Keys page.
- To specify that the key remains locked until a date and time that you specify, do the following:
- Select the Until option.
- In the text field or using the calendar and clock widgets, explicitly specify the data and time you want the encryption key to lock.
- Then click OK.
This option is available for encryption keys added by replication.
The dialog box closes and the changes for the selected encryption key are visible on the Encryption Keys page.
