Frequently Asked Question
Can I change the client-side encryption password on an existing HBS 3 backup job?
QUICK ANSWER
HBS documents that client-side encryption cannot be disabled and its password cannot be changed after it is applied. Changing a NAS login password does not re-encrypt an existing backup.
Applies to: HBS 3 v21.x client-side-encrypted backup jobs. Destination encryption and NAS-volume encryption are separate layers.
Work through these checks
- Identify the encryption layer. Review the job's rules/policies and distinguish client-side encryption from the destination account, encrypted network connection and NAS storage encryption.
- Confirm access to the existing backup. Check the recorded password through an authorised private process and perform a small restore. Never paste an encryption password into a support ticket.
- Plan a separate replacement if needed. If policy requires a new encryption password, assess a newly configured job and separate destination/archive. Allow sufficient capacity and retain the old job and credentials while the new backup is established.
- Validate before retiring anything. Check the new job's settings, successful backup and sample restore. Obtain approval for the old archive's eventual retention or retirement.
Confirm the result
A sample restore works from the intended archive using the appropriate credential; a successful NAS sign-in alone is insufficient.
Before going further: Do not overwrite the only working backup or assume an account-password reset can recover a lost backup-encryption password.
If you need help
Include these details in your ticket: HBS version, destination/job type, whether an authorised restore has been tested and the setting you need to change, without any keys.
Related guidance: My encrypted QNAP volume is locked after a restart. Will resetting the admin password unlock it? · How do I reconnect HBS 3 to an existing backup after replacing or resetting a QNAP NAS?
Updated 261110