VMware vSphere • Re: Encrypting backups on Wasabi

A quick search says Wasabi encrypt all data so do we need to encrypt on the client side ?

Encryption Options in Veeam for Wasabi:

Client-Side Encryption (Veeam's Encryption):

•Veeam can encrypt data before sending it to Wasabi, offering an extra layer of security.
•This is configured within the backup job settings, where you can choose to encrypt the backups and specify a password or KMS server.
•When using a password, Veeam generates a secret key to encrypt the data encryption keys.
•When using a KMS server, Veeam obtains an asymmetric KMS key.
•The encrypted data is then sent to the Wasabi repository.

Server-Side Encryption (Wasabi's Encryption):

•Wasabi encrypts all data stored on its platform using AES 256-bit encryption by default.
•This encryption is applied automatically to each storage object.
•The encryption keys are securely managed by Wasabi and used for decryption when the data is accessed.
•You can also use Server-Side Encryption with Customer-provided keys (SSE-C) for more control over the encryption keys, but you are responsible for managing these keys.

Statistics: Posted by TDG — Jun 19, 2025 12:34 pm

---