To configure encryption

1        Select Settings > System Monitoring > Encryption.

2        Enter a passphrase in the Passphrase and Verify Passphrase fields, and click Confirm.

The passphrase can be a word, numbers, a sentence, or a combination of all. Once you create a passphrase you are logged in. This authenticates the user.

The passphrase is saved in a master key file. All the passphrases you set are stored in the master key file in encrypted format. Any time you restart the Encryption Manager, you are asked to provide this passphrase.

3        To start the encryption process, change the Encryption State to On. There are two options for enabling the Encryption Manager, On (will be off after reboot) or On (will be turned on again after reboot).

Note: After a reboot (if not set to turn on automatically) or after a Disaster Recovery, all backups and restores of clients set for encryption will fail until you restart the Encryption Manager and log in again.

4        Burn the master key file to a CD by doing one of the following:

     For UEB and Recovery-943 systems, click Backup to save the passphrase to the system’s baremetals share. Map the system’s baremetals share to a workstation that has a CD burner and burn the crypt_image.iso key file to a CD. (For details, see To map the system baremetals share.) If you have trouble writing to the CD, save the key file to a local share on the workstation and try again.

     For other Recovery-Series systems, click Backup, insert a CD into the Recovery-Series system, then click Okay to write the key file to the CD.

5        Once the master key file has been copied over to CD, make sure to keep the CD in a safe place. The CD may be required in case of a system failure to restore the master key file.

Note: The master key is included as part of the appliance state backup for systems running version 7.0 or higher, or as part of the system state on systems running older versions. This information is included with any replication or legacy vaulting operation, and is copied to an archive device with any archive operation.

6        Proceed to To configure backups for encryption to enable encryption for each client. (This step may not be necessary if configuring encryption on a replication target system.)