Users Guide

2. On the icon bar, click (More) and then select Encryption Keys.
The Encryption Keys page appears.
3. Locate the encryption key you want to remove. Click its drop-down menu , and select Remove.
The Remove Encryption Key dialog box appears. You see a message confirming the action to remove the encryption key.
4. In the dialog box, confirm that you want to remove the encryption key.
NOTE: Removing an encryption key does not decrypt the recovery points already saved using the key. You must still
retain and provide the key to recover data for existing encrypted recovery points.
The dialog box closes, and the encryption key you removed no longer appears on the Encryption Keys page.
Changing encryption key types
Encryption keys list one of two possible types on the Encryption Keys pane: Universal or Replication. The type indicates the
likely origin of the encryption key, and determines whether you can change its details or passphrase. You can modify these
attributes only if the type is Universal. If you need to modify these attributes for a key with Replicated type, you must change its
type to Universal using this procedure. When you change the type of an encryption key to Universal, it is unlocked manually and
can be used to encrypt other protected machines.
NOTE: You must know the passphrase to change the type from Replicated to Universal.
Encryption keys also have two possible states: Locked or Unlocked. The state controls your ability to apply an encryption key to
a protected machine, or to restore data from a recovery point with encryption. You can change the type of an encryption key
manually only if the state is Unlocked.
When you first create an encryption key, its type is Universal, and its state is Unlocked. You can use such a key immediately (for
example, to encrypt backups for a protected machine). However, a Universal key type cannot be locked manually. If you want to
manually lock an encryption key with a type of Universal, you must change the type to Replicated using this procedure.
You cannot change an encryption key type if it is already in use encrypting recovery points for one or more protected machine.
Follow this procedure to change an encryption key type.
1. Navigate to the Rapid Recovery Core.
2. On the icon bar, click (More) and then select Encryption Keys.
The Encryption Keys page appears. Any encryption keys accessible to the Core appear in a summary table. Each lists a type
of Universal or Replicated.
3. Locate the encryption key you want to update.
4. If you want to change a Universal encryption key to Replication, do the following:
a. Click its drop-down menu
, and select Change the type to Replicated.
The Change Encryption Key Type dialog box appears. You see a message confirming that you want to change the type
to Replicated.
In the dialog box, confirm that you want to change the type to Replication.
The dialog box closes, and the encryption key type updates to Replication.
5. If you want to change a Replication encryption key to Universal, do the following:
a. Click its drop-down menu
, and select Change the type to Universal
The Change Encryption Key Type dialog box appears. You see a message confirming that you want to change the type
to Universal.
In the dialog box, in the Passphrase field, enter the passphrase and then click OK to confirm that you want to change
the type to Universal.
The dialog box closes, and the encryption key type updates to Universal.
Working with the DL Appliance Core
79