Security considerations
To secure customer information that is transferred to the DS‑System, the DS‑Client encrypts every file it sends to the DS‑System with encryption keys provided by the customer. The files are stored and remain encrypted on DS‑System storage at all times. The decryption process occurs during the restore operation on the DS‑Client itself. This ensures that any information transferred and stored outside the customer location is always encrypted.
To ensure integrity of the data that the DS‑Client backs up and restores on a customer network, a digital signature is created and attached to every file that DS‑Client transfers to the DS‑System. A digital signature represents 128‑bit code that identifies data within the file. Even a one‑bit change to a file will produce a different digital signature. Digital signatures are used for restores, validation, and to verify signatures of unchanged files on demand backups.