When is data encrypted in MABS ?

Question

Hi

I would like to when the data is encrypted in MABS for onprem VMs (Azure Stack HCI)

1. Does the data is encrypted after the backup Job is initiated or before the job is initiated ?
2. What algorithms are used for the encryption ?
3. Does Mabs perform any encryption when data is in source environment .What kind of encryption is performed between source (onprem) to MABS Server ?
4. What kind of encryption/compression/configuration is performed once data reaches MABS Server ?
5. And encryption during from MABS server to recovery vault

Would like to know if there's any additional information

Thanks

Aishwarya Upadhye

Answer 1

Hello Aishwarya Upadhye

Welcome to Microsoft Q&A Platform, thanks for posting your query here.
Firstly, apologies for the delayed response on this.

I checked with internal team on this,

• There is no encryption between the VM and MABS, it is also not encrypted on Disk.
• The data is encrypted during transit and storage in the recovery services vault using a KEK-DEK pattern utilizing the passphrase provided by the customer.

Hope this helps.