Temporary local troubleshooting access for encrypted backups

Topic

This article describes how to give Datto Technical Support temporary access to your encrypted agent's backups by using the Datto appliance's GUI.

Environment

  • Datto SIRIS
  • Datto ALTO XL

Description

Enabling temporary troubleshooting access for an encrypted agent will unseal its dataset for a period of six hours, allowing a technician to perform operations on the Datto appliance such as restores and reboots without the need to know the encryption passphrase or to have an authorized keyholder enter it for each restore or reboot operation.

For security purposes, the Temporary Troubleshooting Access option will only appear when accessing the Datto appliance's GUI through the Partner Portal; the option will not appear when logging into the device locally.

Procedure

  1. Start a Device Web session to access your Datto appliance's GUI.

  2. Click the Protect tab.

  3. Locate the agent you wish to unseal, and select Configure Agent Settings.

  4. Scroll down to the Advanced section, and look for the Temporary local troubleshooting access option, as shown in Figure 1.

  5. Select Enable, and then enter the encryption passphrase to decrypt the backup for 6 hours.

  6. After a VM has been created it will prompt for a passphrase. Leave this field blank and select Verify to complete this process.

After 6 hours, the appliance will re-encrypt the backup. Repeat this step as necessary.