By default, Carbonite Server Backup manages your encryption key for you using Advanced Encryption Standard (AES) 128-bit encryption. If you choose to manage your private encryption key, your backups will be encrypted using AES 256-bit encryption.
By default, Carbonite Server Backup
manages your encryption key for you using Advanced Encryption Standard (AES) 128-bit encryption. In the event of a disaster recovery, you only need to remember your account username and password to access the files in your backup. If you choose to manage your private encryption key, your backups will be encrypted using AES 256-bit encryption.
With Private Key Encryption, you are responsible for safe and secure storage of your encryption keys. Carbonite does not store your private encryption keys or passphrase anywhere. Replacement keys can be created if you remember your chosen passphrase. If you lose your private encryption key and forget your passphrase, neither you nor Carbonite will be able to decrypt your encrypted backup data.
If you decide to manage your own encryption key, we highly recommend that you store at least two separate copies of the key on removable media and store at least one copy of the key in a separate physical location, such as a safe deposit box. The encryption key (or passphrase) is required in order to restore your backed up data.
While managing your key, you will be able to create and save a backup set encrypted with the private encryption key.
To manage your private encryption key, open the Carbonite Server Backup user interface and click the Edit
within the Advanced backup settings
section in the Backup
The Advanced backup settings
section will change to edit mode. Click the Add Private Key with 256-bit encryption
link to add a private key.
An Add Private Encryption Key
window will appear.
Within this window, you will be required to provide information for these fields:
- Key Name - Enter the name of the private encryption key you are creating.
- Passphrase - The passphrase will be used to generate the encryption key. It must be at least four characters in length.
- Confirm Passphrase - This is to ensure that the passphrase you have entered above is the one you would like associated with your encryption key.
- Save at - Displays the location where CSB will save this newly created key. By default, it will be saved in CSB's encryption folder located in C:\ProgramData\Carbonite\Carbonite Server Backup(x64)\zcb\encryption\. You have the option of choosing an alternate location.
After entering all the required information, click OK
Once your encryption key has been successfully created, a window will appear. Click OK
to close the window.
It is strongly recommended that you copy the encryption key file to a safe offsite location, and do not change its name or its contents.
The newly created private encryption key will appear in the Edit your advanced backup settings
section of the user interface.
You will now be able use this private key to encrypt new backup sets. Click the arrow button in the top right to exit edit mode.
Deleting an Existing Private Encryption Key
To delete an encryption key, follow the steps below:
- Select any backup set for which Private Key Encryption is enabled.
- Within the How would you like to back up? section, click the Delete Key link next to the private key.
- A window will appear to confirm your deletion and warn you that a copy of the key should be kept for decryption purposes. Click Yes or No to proceed.
- Once the private key has been successfully deleted, a window will appear. Click OK to close the window.
Existing Private Encryption Keys cannot be modified. To change a key, first delete a key and create a new one.
Carbonite Server Backup is ideal for people who are concerned about security. For customers additionally concerned about HIPAA
compliance, Carbonite encrypts your data and allows you to sign a Business Associate Agreement.