Configuring database maintenance and security

Last published : Apr 02, 2026
The Database Maintenance and Security option lets you manage the Backup Exec Database. Each database maintenance operation is performed independently on each database. The Backup Exec Database maintains a record of the files and data that you have configured.
Database maintenance lets you perform the following:
  • Optimize database size.
  • Delete expired data.
  • Save the contents of the database files.
  • Perform a database consistency check.
Backup Exec generates informational alerts at the beginning and at the end of the database maintenance process each time database maintenance is performed. The alerts provide details about the type of maintenance that was performed on each database and the amount of time that the maintenance took to complete. If the database maintenance process fails, the alert indicates where the failure occurred and the reason for the failure.
You do not have to select all the options; however, each one performs a different process that enables you to protect and maintain your database. Selecting all the options enables you to recover the database quickly and maintain optimal performance.
You can also export the Backup Exec Database encryption key. The Backup Exec Database encryption key is used to secure the Backup Exec Database. The key is required for a number of disaster recovery and migration scenarios. You should export the encryption key to a safe location to ensure that you have it later.
To configure database maintenance and security
  1. Click the Backup Exec button, select Configuration and Settings, and then selectBackup Exec Settings.
  2. In the left pane, click Database Maintenance and Security.
  3. To enable database maintenance, select the Enable Backup Exec database maintenance option.
  4. Configure any of the following options:
    Perform database maintenance daily at Select the time that you want to perform database maintenance.
    All the maintenance occurs once a day at the time you specify.
    Delete aged data Select this option to delete expired job history, job logs, alert history, and reports from the Backup Exec Database after the specified number of days have passed.
    Keep job history for data on media that have current overwrite protection periods Select this option to keep all job history data for any media to which an overwrite protection period is currently assigned.
    After a media's overwrite protection period expires, the media's job history data can be deleted.
    Keep job history for specified number of days Select this option to indicate the number of days to keep job history data in the database before it is deleted.
    Job history data includes summary statistics for a job and details about media, devices, and any backup sets that were used to process the job.
    Job logs Indicate the number of days to keep job logs in the database before they are deleted.
    Job logs include detailed information about the job.
    Alert history Indicate the number of days to keep alert history data in the database before it is deleted.
    Alert history data includes property and response information for the alert.
    Reports Indicate the number of days to keep report data in the database before it is deleted.
    Report data includes property information about any report jobs that were generated. The report itself is not deleted.
    Audit logs Indicate the number of days to keep audit log data in the database before it is deleted.
    The audit log includes information about any operations that are performed in Backup Exec.
    See Configuring audit logs .
    Perform database consistency check Select this option to check the logical consistency and physical consistency of the data in the database.
    The option is not checked by default. Veritas recommends that you run a consistency check periodically at a time when there is minimal activity from Backup Exec.
    Save contents of database to the Backup Exec data directory Select this option to save the data that is contained in the database to the Backup Exec data directory so that the database backup file (BEDB.bak) can be backed up.
    The dump file is maintained in the data directory until the next database maintenance process is performed and then this file is overwritten. Selecting this option enables you to recover the database in the event of failure.
    Optimize database size Select this option to organize fragmented pages and decrease the size of the physical database to 10 percent above what is actually used.
  5. To export the database encryption key, complete the following fields:
    Note: You should export the encryption key to a safe location to ensure that you have a copy of it for later. You need the encryption key to perform disaster recovery or migrate the Backup Exec server. The key is named with a unique hash value. Backup Exec uses the name to identify the key later.
Path Type the path of a secure location to which you want to export the Backup Exec Database encryption key.
Remember the export path. By clicking this check box, you consent to let Backup Exec retain and display the export path during import operations. Select this option to let Backup Exec remember the path to which you exported the database encryption key.
If you select this option, Backup Exec can attempt to automatically recover the database encryption key in the event that the key fails. If you do not select this option, you must manually import the database encryption key if it ever fails.
Export Click this option to export the Backup Exec Database encryption key to the location that you specified in the Path field.
  1. Click OK.
Related information