How to encrypt the service account and configuration files of my CubeBackup instance.

---

For privacy and security reasons, CubeBackup will now encrypt your service account key file, storage settings, and other configuration files, so that potentially vulnerable information is no longer available to intruders or anyone with physical access to your backup server.

Encrypt service account key and configuration files

Starting from version 4.9, these files will be encrypted automatically during the initial setup. For installations upgraded through the console, or versions prior to 4.9, please follow the step-by-step instructions below:

1. Log in to or SSH to your CubeBackup server.

2. Run the cbackup encryptConfigFiles command in the <installation directory>\bin folder.

   NOTE: This operation requires special privileges.
   For Windows users, open a Windows Command Prompt or Powershell as Administrator.

   "C:\Program Files\CubeBackup4\bin\cbackup.exe" encryptConfigFiles

   For Linux or Docker users, please use sudo -u cbuser… in the bash shell.

   sudo -u cbuser /opt/cubebackup/bin/cbackup encryptConfigFiles

3. Now your configuration files and service account key file are safely encrypted on your server, and cannot be used by any other user except the CubeBackup program.