1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Backup password

Discussion in 'Plesk 11.x for Linux' started by optimist, Jul 19, 2012.

  1. optimist

    optimist Guest

    0
     
    Hello,
    after upgrade from 10.4.4 to 11.0.9 i want to enable the backup security.
    the checkbox is checked and the password for the backup-archives is stored.

    Get manual and auto backups on my ftp-repository without error messages. But backup archives are not password protected.

    Any hints? Which logfiles should i check?

    TIA
    Optimist
     
  2. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,543
    Likes Received:
    1,239
    Location:
    Novosibirsk, Russia
    What do you mean exactly? How it can be reproduced?
     
  3. optimist

    optimist Guest

    0
     
    Quote from "What’s New in Parallels Plesk Panel 11"
    "Improved Security ... The new version will also offer the option for password-protected backup. ..."

    I have activated this option, but backup is still not password protected.

    To reproduce: make a password-protected backup to the ftp-repository, download the backup and try to open. it opens without password.
     
  4. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,543
    Likes Received:
    1,239
    Location:
    Novosibirsk, Russia
    This feature means that content of backup will be crypted but not that backup will be protected by password.
    Password will be requested for restoring this crypted content of backup.
     
  5. onlinesolutions

    onlinesolutions Basic Pleskian

    14
    85%
    Joined:
    Apr 21, 2011
    Messages:
    35
    Likes Received:
    0
    Can you let us know the encryption method used?
     
  6. IgorG

    IgorG Forums Analyst Staff Member

    49
    24%
    Joined:
    Oct 27, 2009
    Messages:
    24,543
    Likes Received:
    1,239
    Location:
    Novosibirsk, Russia
    It is AES method.
     
  7. onlinesolutions

    onlinesolutions Basic Pleskian

    14
    85%
    Joined:
    Apr 21, 2011
    Messages:
    35
    Likes Received:
    0
    Thank you so much Igor. Is it 256 bits?
     
  8. bruslow

    bruslow New Pleskian

    12
    80%
    Joined:
    Nov 20, 2011
    Messages:
    6
    Likes Received:
    0
    The following data should be encrypted too:

    - private key of ssl certificates (at info_xxxx.xml),
    - at least the contents (data dump) of customer databases.

    Tested with 11.5.30 MU#6 and proper configured ftp backup repository.
     
  9. IsraëlF

    IsraëlF New Pleskian

    7
    70%
    Joined:
    Mar 11, 2013
    Messages:
    10
    Likes Received:
    0
    Location:
    Laurentides, Qc
    Backups not encrypted...

    Not sure if I should open a new thread or not... but I have the same problem. I have password encrypted backup from PLESK 11. Backup are downloaded on my own server and I can open the archive, extract databases files and read them without any problem... I also was able to read *info*.html files as well.

    Therefore I don't see this encryption feature working ?

    Someone could advice ?
     
  10. MargaritaK

    MargaritaK Basic Pleskian

    15
     
    Joined:
    Aug 29, 2011
    Messages:
    52
    Likes Received:
    0
    Guys, backup encryption feature encrypts only passwords inside your backup xml files. Password phrase is requested during restore to decrypt all passwords inside xml files.
     
  11. bruslow

    bruslow New Pleskian

    12
    80%
    Joined:
    Nov 20, 2011
    Messages:
    6
    Likes Received:
    0
    We know that. That's why i pointed out, that private keys of ssl certificates in the backup xml files _must_ be encrypted too and more over sql data dumps _should_ be encrypted to ensure safe backups on an (external) ftp repository.
     
Loading...