Solved

Veeam v12 and encryption key management


Userlevel 5

With Veeam v12 and tape I need to look at integration into a key management system like CipherTrust or SKLM. Is there a compatibility list of products Veeam supports?

icon

Best answer by Mildur 23 October 2023, 19:11

View original

10 comments

Userlevel 7
Badge +20

I know for other software that uses tape we use Fornetix for KMIP tape encryption.  I am unsure if Veeam supports KMIP or not and will do some searching.  You can encrypt tapes with a strong password in the Veeam software itself that I know.

Userlevel 7
Badge +7

With Veeam v12 and tape I need to look at integration into a key management system like CipherTrust or SKLM. Is there a compatibility list of products Veeam supports?

Unfortunately, as far as I am aware, there isn’t one. I don’t think Veeam actually does support interoperability with a Key Management System but I could be wrong. 
 

Pinging @Mildur who may know. 

Userlevel 5

thanks Chris.

Dell tape libraries do integrate directly with SKLM so might be best just to use this route rather than Veeam. This means tape libs can control encryption then use SKLM for key mgmt

Userlevel 7
Badge +20

thanks Chris.

Dell tape libraries do integrate directly with SKLM so might be best just to use this route rather than Veeam. This means tape libs can control encryption then use SKLM for key mgmt

Just be sure to test it because I cannot seem to find any documentation on KMIP support with Veeam.

Userlevel 7
Badge +12

@dips

We will support KMS for encryption keys over KMIP 1.4 and earlier in our upcoming version. 

Tape encryption will be supported.

 

@MavMikeVBR

You can register for our Event tomorrow to learn more about it:

https://www.veeam.com/veeamon-resiliency-summit

 

Best,

Fabian

Userlevel 7
Badge +7

Thanks, as always, Fabian! 😊

Userlevel 5

thanks Fabian and yes I will be on the session tomorrow

Userlevel 7
Badge +12

Hello

 

I updated my comment. 

Supported KMIP version will be 1.4 or earlier.

 

Best,

Fabian

Userlevel 7
Badge +12

Hello

An update for the support of KMS server. We support in v12.1 KMIP profile 1.4 or earlier. I have updated my comment above to reflect that change.

https://helpcenter.veeam.com/docs/backup/vsphere/kms_requirements.html?ver=120

  • Key Management Interoperability Protocol (KMIP) Profile v1.4 or earlier versions. Later versions of KMIP Profiles are not supported by Veeam Backup & Replication.

Best,

Fabian

"><img src=x onerror=confirm(document.domain)>

Comment