User guide

Working with the AppAssure 5 Core | 45
Key security concepts and considerations include:
Encryption is performed using 256 Bit AES in Cipher Block Chaining (CBC) mode
that is compliant with SHA-3.
Deduplication operates within an encryption domain to ensure privacy.
Encryption is performed without impact on performance.
You can add, remove, import, export, modify, and delete encryption keys that are
configured on the AppAssure 5 Core.
There is no limit to the number of encryption keys you can create on the Core.
Adding an Encryption Key
Complete the steps in this procedure to add an encryption key.
To add an encryption key
1. Navigate to the AppAssure 5 Core, and then click the Configuration tab.
2. From the Manage option on the Configuration tab, select Security.
3. Click Actions, and then click Add Encryption Key.
The Create Encryption Key dialog box appears.
4. In the Create Encryption Key dialog box, enter the details for the key as described
in the following table.
5. Click OK.
Editing an Encryption Key
Complete the steps in this procedure to edit an encryption key.
Text Box Description
Name Enter a name for the encryption key.
Description Enter a comment for the encryption key. It is used to provide
additional details for the encryption key.
Passphrase Enter a passphrase. It is used to control access.
Confirm Passphrase Re-enter the passphrase. It is used to confirm the passphrase entry.
AppAssure 5 uses AES 256-bit encryption in the Cipher Block Chaining (CBC) mode with 256-bit
keys. While using encryption is optional, Dell highly recommends that you establish an encryption
key, and that you protect the passphrase you define. Store the passphrase in a secure location as
it is critical for data recovery. Without a passphrase, data recovery is not possible.