Skip to main content
Answer

Veeam v12 and encryption key management

  • October 23, 2023
  • 10 comments
  • 679 views

MavMikeVBR
Forum|alt.badge.img+1

With Veeam v12 and tape I need to look at integration into a key management system like CipherTrust or SKLM. Is there a compatibility list of products Veeam supports?

Best answer by Mildur

@dips

We will support KMS for encryption keys over KMIP 1.4 and earlier in our upcoming version. 

Tape encryption will be supported.

 

@MavMikeVBR

You can register for our Event tomorrow to learn more about it:

https://www.veeam.com/veeamon-resiliency-summit

 

Best,

Fabian

10 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • October 23, 2023

I know for other software that uses tape we use Fornetix for KMIP tape encryption.  I am unsure if Veeam supports KMIP or not and will do some searching.  You can encrypt tapes with a strong password in the Veeam software itself that I know.


dips
Forum|alt.badge.img+7
  • On the path to Greatness
  • October 23, 2023

With Veeam v12 and tape I need to look at integration into a key management system like CipherTrust or SKLM. Is there a compatibility list of products Veeam supports?

Unfortunately, as far as I am aware, there isn’t one. I don’t think Veeam actually does support interoperability with a Key Management System but I could be wrong. 
 

Pinging @Mildur who may know. 


MavMikeVBR
Forum|alt.badge.img+1
  • Author
  • Influencer
  • October 23, 2023

thanks Chris.

Dell tape libraries do integrate directly with SKLM so might be best just to use this route rather than Veeam. This means tape libs can control encryption then use SKLM for key mgmt


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • October 23, 2023

thanks Chris.

Dell tape libraries do integrate directly with SKLM so might be best just to use this route rather than Veeam. This means tape libs can control encryption then use SKLM for key mgmt

Just be sure to test it because I cannot seem to find any documentation on KMIP support with Veeam.


Mildur
Forum|alt.badge.img+12
  • Influencer
  • Answer
  • October 23, 2023

@dips

We will support KMS for encryption keys over KMIP 1.4 and earlier in our upcoming version. 

Tape encryption will be supported.

 

@MavMikeVBR

You can register for our Event tomorrow to learn more about it:

https://www.veeam.com/veeamon-resiliency-summit

 

Best,

Fabian


dips
Forum|alt.badge.img+7
  • On the path to Greatness
  • October 23, 2023

Thanks, as always, Fabian! 😊


MavMikeVBR
Forum|alt.badge.img+1
  • Author
  • Influencer
  • October 23, 2023

thanks Fabian and yes I will be on the session tomorrow


Mildur
Forum|alt.badge.img+12
  • Influencer
  • October 25, 2023

Hello

 

I updated my comment. 

Supported KMIP version will be 1.4 or earlier.

 

Best,

Fabian


Mildur
Forum|alt.badge.img+12
  • Influencer
  • January 3, 2024

Hello

An update for the support of KMS server. We support in v12.1 KMIP profile 1.4 or earlier. I have updated my comment above to reflect that change.

https://helpcenter.veeam.com/docs/backup/vsphere/kms_requirements.html?ver=120

  • Key Management Interoperability Protocol (KMIP) Profile v1.4 or earlier versions. Later versions of KMIP Profiles are not supported by Veeam Backup & Replication.

Best,

Fabian


  • New Here
  • January 18, 2024

"><img src=x onerror=confirm(document.domain)>