Step 5. Compression and Encryption Options
Customize compression and encryption settings for the backup plan.
CloudBerry Backup uses a built-in compression mechanism to reduce backup size on storage. To enable compression, select the Enable compression check box.
To protect the backup data with encryption, select the Enable encryption check box. CloudBerry Backup supports AES encryption of 128, 192 and 256 bit key length. Select the appropriate key length in the Algorithm drop-down menu.
Learn more about AES encryption here.
Specify the encryption password in the Password field, then confirm the password in the Confirm field. To display the password, select the Display password check box.
Note that the encryption password will NOT be stored in the backup plan configuration file for security purposes. Keep this password in a safe place and remember that without the encryption password you will not be able to perform a restore of encrypted backups
If you change any of the encryption settings (algorithm or password) for the existing backup plan, a full backup will be executed on the next backup plan run
Specify Amazon S3 Encryption Options
If you use Amazon S3 as cloud storage for your backup plan, the backup wizard enables server-side encryption settings to protect data stored on Amazon cloud servers.
The following additional settings are available when using Amazon S3 for storing your backup:
- Server-Side Encryption. Select this check box to enable encryption of your backup on the Amazon S3 side.
Specify Options for Accessing Amazon S3
- Use the Amazon S3 Service master key. Once this option is selected, Amazon S3 will decrypt data for anyone who is granted permission to access this object in the cloud
- Use the Amazon Key Management Service master key. Once this option is selected, Amazon S3 will decrypt data for anyone who has the permissions to access this object in the cloud, along with permissions to use a specified master key
To learn more about AWS Key Management Service, visit AWS Key Management Documentation website.
Select S3 Storage Class
If you selected Amazon S3 as a destination storage for your backup, you can make the backup service use the following storage classes:
- One Zone-IA
- Glacier-Instant Revtrieval
- Glacier-Flexible Restrieval
- Glacier Deep Archive
These storage classes help to keep the right balance between storage costs and data availability. Learn more about Amazon S3 storage classes here.
Select Microsoft Azure Blob Storage
If you selected Microsoft Azure as destination storage for the backup plan, the backup wizard provides specific Azure Blob Storage settings.
You can choose among the following options:
- Archive Blob Storage. This is a low-cost storage option for infrequently accessed data. As opposed to hot and cool storage tiers, retrieving data from archive storage may take up to several hours
- Cool Blob Storage. The Cool Blob storage tier has lower storage costs and higher access costs compared to hot storage. This tier is intended for data that will remain in the cool tier for at least 30 days.
This feature is only supported for General Purpose v2 Azure accounts. If you are using another kind of account, you need to upgrade your account to be able to use this feature.
Be aware of additional charges and increased blob access rates having an Azure account upgraded
To learn more about Azure storage tiers, refer to the Azure Blob Storage - Hot, cool, and archive storage tiers article.
Click Next to proceed to the Retention Policy step.