Locking an encryption key
When an encryption key state is locked, it cannot be applied to any protected machine until it is unlocked. To lock an encryption key with a type of Universal, you must first change its type to Replicated.
Complete the steps in this procedure to lock an encryption key.
- Navigate to the Rapid Recovery Core Console.
- On the icon bar, click (More) and then select Encryption Keys.
The Encryption Keys page appears. The State column indicates which encryption keys are unlocked, and shows the type for each key.
- Locate the encryption key you want to lock. If its type is Universal, then click its drop-down menu , and select Change the type to Replicated.
The Change Encryption Key Type dialog box appears.
- In the dialog box, confirm that you want to change the key type to Replicated.
- If you successfully changed the encryption key status to Replicated, then click its drop-down menu , and select Lock.
The Lock Encryption Key dialog box appears.
- In the dialog box, confirm that you want to lock the key.
The dialog box closes, and the state of the selected encryption key is now locked.
|
NOTE: This option is available for encryption keys added by replication. . |
Editing an encryption key
After an encryption key is defined, you can edit the name of the encryption key or the description of the key. These properties are visible when you view the list of encryption keys in the Encryption Keys pane.
Complete the steps in this procedure to edit the name or description of an existing unlocked encryption key.
|
Caution: After you edit the name or description an encryption key that is used to protect one or more machines, Rapid Recovery takes a new base image. That base image snapshot occurs for that machine upon the next scheduled or forced snapshot. |
- Navigate to the Rapid Recovery Core Console.
- On the icon bar, click (More) and then select Encryption Keys.
The Encryption Keys page appears.
- Locate the encryption key you want to edit, and do the following:
- Click the drop-down menu for the specified encryption key, and select Edit.
The Edit Encryption Key dialog box appears.
- In the dialog box, edit the name or the description for the encryption key, and then click OK.
The dialog box closes, and the changes for the selected encryption key are visible on the Encryption Keys page.
Changing an encryption key passphrase
To maintain maximum security, you can change the passphrase for any existing encryption key. Complete the steps in this procedure to change the passphrase for an encryption key.
|
Caution: After you edit the name or description an encryption key that is used to protect one or more machines, Rapid Recovery takes a new base image. That base image snapshot occurs for that machine upon the next scheduled or forced snapshot. |
- Navigate to the Rapid Recovery Core Console.
- On the icon bar, click (More) and then select Encryption Keys.
The Encryption Keys page appears.
- Locate the encryption key you want to update, click its drop-down menu , and select Change passphrase.
The Change Passphrase dialog box appears.
- In the dialog box, in the Passphrase text box, enter the new passphrase for the encryption.
- In the Confirm passphrase text box, re-enter the identical passphrase.
- Click OK.
The dialog box closes and the passphrase is updated.
- Optionally, if you use a hint in the Description field, edit the encryption key to update the hint. For more information, see Editing an encryption key.
|
Caution: Rapid Recovery uses AES 256-bit encryption in the Cipher Block Chaining (CBC) mode with 256-bit keys. Quest recommends that you record the passphrase in a secure location and keep this information updated. Quest Data Protection Support cannot recover a passphrase. Without the passphrase, you cannot recover information from encrypted recovery points. |
Exporting an encryption key
You can export an encryption key from any Rapid Recovery Core with the express purpose of using it in another Core. When you perform this procedure, the key is saved to the Downloads folder for the active Windows user account.
Complete the steps in this procedure to export an encryption key.
- Navigate to the Rapid Recovery Core Console.
- On the icon bar, click (More) and then select Encryption Keys.
The Encryption Keys page appears.
- Locate the encryption key you want to export, click its drop-down menu , and select Export.
The Opening EncryptionKey-[name.key] dialog box appears.
- In the dialog box, select Save File to save and store the encryption keys in a secure location, and then click OK.
The encryption key downloads as a text file to the default location, such as the Downloads folder of the active Windows user account.
- Optionally, if you want to import this key into a different Core, copy the file to a location accessible from that Core.