Skip to main content
Solved

Veeam v12 and encryption key management


MavMikeVBR
Forum|alt.badge.img+1

With Veeam v12 and tape I need to look at integration into a key management system like CipherTrust or SKLM. Is there a compatibility list of products Veeam supports?

Best answer by Mildur

@dips

We will support KMS for encryption keys over KMIP 1.4 and earlier in our upcoming version. 

Tape encryption will be supported.

 

@MavMikeVBR

You can register for our Event tomorrow to learn more about it:

https://www.veeam.com/veeamon-resiliency-summit

 

Best,

Fabian

View original
Did this topic help you find an answer to your question?

10 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8402 comments
  • October 23, 2023

I know for other software that uses tape we use Fornetix for KMIP tape encryption.  I am unsure if Veeam supports KMIP or not and will do some searching.  You can encrypt tapes with a strong password in the Veeam software itself that I know.


dips
Forum|alt.badge.img+7
  • Veeam Legend
  • 808 comments
  • October 23, 2023
MavMikeVBR wrote:

With Veeam v12 and tape I need to look at integration into a key management system like CipherTrust or SKLM. Is there a compatibility list of products Veeam supports?

Unfortunately, as far as I am aware, there isn’t one. I don’t think Veeam actually does support interoperability with a Key Management System but I could be wrong. 
 

Pinging @Mildur who may know. 


MavMikeVBR
Forum|alt.badge.img+1
  • Author
  • Influencer
  • 60 comments
  • October 23, 2023

thanks Chris.

Dell tape libraries do integrate directly with SKLM so might be best just to use this route rather than Veeam. This means tape libs can control encryption then use SKLM for key mgmt


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8402 comments
  • October 23, 2023
MavMikeVBR wrote:

thanks Chris.

Dell tape libraries do integrate directly with SKLM so might be best just to use this route rather than Veeam. This means tape libs can control encryption then use SKLM for key mgmt

Just be sure to test it because I cannot seem to find any documentation on KMIP support with Veeam.


Mildur
Forum|alt.badge.img+12
  • Influencer
  • 1035 comments
  • Answer
  • October 23, 2023

@dips

We will support KMS for encryption keys over KMIP 1.4 and earlier in our upcoming version. 

Tape encryption will be supported.

 

@MavMikeVBR

You can register for our Event tomorrow to learn more about it:

https://www.veeam.com/veeamon-resiliency-summit

 

Best,

Fabian


dips
Forum|alt.badge.img+7
  • Veeam Legend
  • 808 comments
  • October 23, 2023

Thanks, as always, Fabian! 😊


MavMikeVBR
Forum|alt.badge.img+1
  • Author
  • Influencer
  • 60 comments
  • October 23, 2023

thanks Fabian and yes I will be on the session tomorrow


Mildur
Forum|alt.badge.img+12
  • Influencer
  • 1035 comments
  • October 25, 2023

Hello

 

I updated my comment. 

Supported KMIP version will be 1.4 or earlier.

 

Best,

Fabian


Mildur
Forum|alt.badge.img+12
  • Influencer
  • 1035 comments
  • January 3, 2024

Hello

An update for the support of KMS server. We support in v12.1 KMIP profile 1.4 or earlier. I have updated my comment above to reflect that change.

https://helpcenter.veeam.com/docs/backup/vsphere/kms_requirements.html?ver=120

  • Key Management Interoperability Protocol (KMIP) Profile v1.4 or earlier versions. Later versions of KMIP Profiles are not supported by Veeam Backup & Replication.

Best,

Fabian


  • New Here
  • 1 comment
  • January 18, 2024

"><img src=x onerror=confirm(document.domain)>


Comment