Encryption overview - x360Recover - BDR - FAQs

Written By Tami Sutcliffe (Super Administrator)

Updated at July 5th, 2021

This information relates to agent 2.23 + appliance OS 8.2.0+

Endpoint/ x360Recover Agent:

  • Data Encryption (At Rest):  Data Encryption “at rest” is not applicable to the agent. It only interacts with data “in motion” while communicating with x360Recover.
  • Data Encryption (In Motion): Communications between the agent and the x360Recover appliance are via TLS 1.2. All data is sent via this encrypted tunnel.

 x360Recover Appliance (Software and Hardware):

  • Data Encryption (At Rest): Appliances have multiple volumes. The first volume is a boot drive used for loading the hardened operating system, the second is a storage pool which stores backup data. The data pool utilizes whole disk encryption (AES-256) and utilizes the Axcient Cloud Key Management Solution (CKMS) for key storage and access.
  • Data Encryption (In Motion): Appliances can be configured to archive to local (networked) or cloud vaults. Data transfers from appliance to vault use TLS 1.2.
  • Application interface (HTTPS): Communications to the x360Recover application interface is encrypted using TLS 1.2 and strong authentication processes.
  •  x360Recover Management Portal: Appliances can be managed by a x360Recover Management Portal. Communications to and from the Management Portal use the x360Recover API and TLS 1.2 for data in motion. Backed up data is never sent to the Management Portal. 

Axcient Vaults:

  •  Data Encryption (At Rest): Vaults have multiple volumes. The first volume is a boot drive used for loading the hardened operating system. The second volume is a storage pool which stores backup data. The data pool utilizes whole disk encryption (AES-256) and utilizes the Axcient Cloud Key Management Solution (CKMS) for key storage and access.
  • Data Encryption (In Motion): Appliances communicate over a custom service to the vaults which uses TLS 1.2 to encrypt the communications.
  • Application interface (HTTPS): Communications to the Axcient Vault interface is encrypted using TLS 1.2 and strong authentication processes.
  •  x360Recover Management Portal: Appliances and vaults can be managed by a x360Recover Management Portal. Communications to and from the Management Portal use the x360Recover API and TLS 1.2 over a secure ssh tunnel for data in motion, Backed up data is never sent to the Management Portal.

 


 

SUPPORT  | 720-204-4500 | 800-352-0248

  • To learn more about any of our Axcient products,  sign up for free one-on-one training.
  • Please contact your Partner Success Manager or Support if you have specific technical questions.
  • Subscribe to the Axcient Status page for a list of status updates and scheduled maintenance.