Working with Certificates

Updated: November 1, 2013

Applies To: System Center 2012 - Data Protection Manager, System Center 2012 R2 Data Protection Manager, System Center 2012 SP1 - Data Protection Manager

System Center 2012 – Data Protection Manager (DPM) uses certificates to encrypt the backups to tape. You can use one or a combination of multiple certificates to encrypt your backups. During installation, DPM creates two folders, DPMBackupStore and DPMRestoreStore, in the DPM Certificate Store.

Storing Certificates

You must store you current certificates in DPMBackupStore folder in the Certificate Store. DPM will use these certificates to encrypt data. You can store multiple certificates there if you want DPM to create a key by using more than one certificate.

Storing Expired Certificates

When your certificates expire, you must move them into the DPMRestoreStore folder in the Certificate Store. This ensures that you can recover the expired certificates from an encrypted tape by using a certificate that is no longer active.

We recommend that you move your expired certificates and your tapes to the DPMRestoreStore folder.

For additional resources, see Information and Support for System Center 2012.

Tip: Use this query to find online documentation in the TechNet Library for System Center 2012. For instructions and examples, see Search the System Center 2012 Documentation Library.