Deleting encryption keys

Last published : Apr 02, 2026
You should be cautious when you delete encryption keys. When you delete an encryption key, you cannot restore the backup sets that you encrypted with that key unless you create a new key that uses the same encryption key and pass phrase as the original key.
You can delete encryption keys in the following situations:
  • The encrypted data on the tape has expired or the tape is retired.
  • The encryption key is not the default key.
  • The encryption key is not being used in a job. If the key is being used, you must select a new key for the job.
If you delete an encryption key that is being used in a scheduled restore job, you cannot replace the key. Therefore, any scheduled restore job in which you delete an encryption key fails.
To delete an encryption key
  1. Click the Backup Exec button, select Configuration and Settings, and then clickBackup Exec Settings.
  2. In the left pane, select Network and Security.
  3. Click Manage Keys.
  4. Select the key that you want to delete.
  5. Click Delete.
  6. Click Yes.
  7. If the key is used in a job, do the following:
    • In the Select an encryption key to replace "key name"box, select the new key for the job or clickNew to create a new key.
    • Click OK.
More Information
Encryption key management
Using encryption with Backup Exec
Related information