Skip to main content
Answer

Hyper-V VM encryption

  • May 20, 2024
  • 6 comments
  • 418 views
S

Hello, 

is it supported to have Hyper-v VM with bitlocker enabled inside the guest for encrypting the data disk ?

 

Best answer by MicoolPaul

Hi @coolsport00 slight correction on that, you can still restore the disks etc, you just can’t restore individual files because Veeam can’t decrypt the encrypted data. But it can certainly still restore the entire disk for the VM to use its Bitlocker key to read the data. This isn’t a Veeam specific limitation btw @Sc2111 

    Chris.Childerhose
    coolsport00

    6 comments

    coolsport00
    Forum|alt.badge.img+21
    • coolsport00
    • Veeam Legend
    • May 20, 2024

    Hi @Sc2111 - it appears you can back them up but you can't restore those VMs or browse the guest. See limitations below

    https://helpcenter.veeam.com/docs/backup/hyperv/guest_restore_before_you_begin.html?zoom_highlight=Bitlocker&ver=120

    Shane Williford - Veeam VMCA/VMCE | Veeam Legend | VUG Leader | VCP-DCV | Twitter: @coolsport00
    leduardoserrano
    MicoolPaul
    Forum|alt.badge.img+23
    • MicoolPaul
    • Answer
    • May 20, 2024

    Hi @coolsport00 slight correction on that, you can still restore the disks etc, you just can’t restore individual files because Veeam can’t decrypt the encrypted data. But it can certainly still restore the entire disk for the VM to use its Bitlocker key to read the data. This isn’t a Veeam specific limitation btw @Sc2111 

    Michael Paul - Opinions are my own and do not necessarily reflect the opinion of Veeam | https://micoolpaul.com | Mastodon: @micoolpaul@masto.nu | Bluesky: @micoolpaul.com
    Chris.Childerhose
    coolsport00
    S
    coolsport00
    Forum|alt.badge.img+21
    • coolsport00
    • Veeam Legend
    • May 20, 2024

    Hi @coolsport00 slight correction on that, you can still restore the disks etc, you just can’t restore individual files because Veeam can’t decrypt the encrypted data. But it can certainly still restore the entire disk for the VM to use its Bitlocker key to read the data. This isn’t a Veeam specific limitation btw @Sc2111 

    Good catch Michael!

    Guess it doesn't make sense to back them up & not be able to restore 😂

    Shane Williford - Veeam VMCA/VMCE | Veeam Legend | VUG Leader | VCP-DCV | Twitter: @coolsport00
    Chris.Childerhose
    leduardoserrano
    S
    S
    • Sc2111
    • Author
    • Not a newbie anymore
    • May 20, 2024

    Hi @coolsport00 slight correction on that, you can still restore the disks etc, you just can’t restore individual files because Veeam can’t decrypt the encrypted data. But it can certainly still restore the entire disk for the VM to use its Bitlocker key to read the data. This isn’t a Veeam specific limitation btw @Sc2111 

    So in case of restore needed what could be the steps ?

    Restore the entire virtual disk attached to the same server, I suppose that attaching to another won’t work?

    thanks

     

    Chris.Childerhose
    coolsport00
    leduardoserrano
    coolsport00
    Forum|alt.badge.img+21
    • coolsport00
    • Veeam Legend
    • May 20, 2024

    Hi @Sc2111 -

    There’s nothing specific to recovery of Bitlocker Volumes in the Guide, but I did find an older post in the Forums which discusses Volume recovery:

    https://forums.veeam.com/microsoft-hyper-v-f25/bitlocker-protected-vhd-attached-to-guest-available-to-veea-t25031.html

    You could restore your disk to another VM, but you’d need the Bitlocker key to unlock it which makes total sense.

    Shane Williford - Veeam VMCA/VMCE | Veeam Legend | VUG Leader | VCP-DCV | Twitter: @coolsport00
    dloseke
    leduardoserrano
    coolsport00
    Forum|alt.badge.img+21
    • coolsport00
    • Veeam Legend
    • May 20, 2024

    Hey @Sc2111 - I found this more recent Forum post on how PMs would go about doing restores. Pretty good IMO. So, you have some options there. You’d just need to test what works best for you:

    https://forums.veeam.com/veeam-backup-replication-f2/file-level-restore-for-bitlocker-encrypted-volumes-t64847.html

    Shane Williford - Veeam VMCA/VMCE | Veeam Legend | VUG Leader | VCP-DCV | Twitter: @coolsport00
    dloseke
    leduardoserrano
    Terms & ConditionsAccessibility statement