# In-transit encryption for PBM

**URL:** <https://forums.percona.com/t/in-transit-encryption-for-pbm/21811>\
**Category:** Percona Backup for MongoDB\
**Created:** [May 2, 2023, 2:06pm UTC](https://forums.percona.com/t/in-transit-encryption-for-pbm/21811 "2023-05-02T14:06:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![convexing](https://avatars.discourse-cdn.com/v4/letter/c/82dd89/32.png) [@convexing](https://forums.percona.com/u/convexing)\
**Post date:** [May 2, 2023, 2:06pm UTC](https://forums.percona.com/t/in-transit-encryption-for-pbm/21811/1 "2023-05-02T14:06:52Z")

</div>

Hi,

I was trying to gather information about encryption regarding PBM and I didn’t find any information regarding in-transit encryption when the backup is being streamed to a remote backup storage.  
Does anyone know where can I find information regarding which encryption method is used and if HTTPS is used, for example?  
I know I can do some debugging when using the tool but I would like to have that information provided by Percona.  
Also, I found in the docs information regarding SSE, for at-rest encryption.

Regards,  
Joseph

---

<div class="post-metadata">

**Author:** ![Parag\_Bhayani](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/parag_bhayani/32/3710_2.png) [@Parag\_Bhayani](https://forums.percona.com/u/Parag_Bhayani)\
**Post date:** [May 2, 2023, 3:35pm UTC](https://forums.percona.com/t/in-transit-encryption-for-pbm/21811/2 "2023-05-02T15:35:46Z")

</div>

Hi @convexing ,

Welcome to Percona Community forum!

**In-Transit Encryption:**  
If I understand it correct, you are referring to TLS(in-transit) encryption. These are non-default options in PBM which you can use while Configuring the Authentication during the setup.

Kindly refer the below links on how to use those options -

> **[Percona Backup for MongoDB - Authentication](https://docs.percona.com/percona-backup-mongodb/details/authentication.html#mongodb-connection-strings-a-reminder-or-primer)**
>
> Percona Backup for MongoDB has no authentication and authorization subsystem of its own —— it uses that of MongoDB. This means that pbm CLI and pbm-agent require only a valid MongoDB connection URI string for the pbm user.

**Server-Side Encryption:**  
Starting with version 2.0.1, Percona Backup for MongoDB also supports server-side encryption with customer-provided keys that stored on the client side.

To use the SSE-C encryption, specify the following parameters in the Percona Backup for MongoDB configuration file:

> serverSideEncryption:  
> sseCustomerAlgorithm: AES256  
> sseCustomerKey: \<your\_encryption\_key\>

Ref. Link.: [Overview - Percona Backup for MongoDB](https://docs.percona.com/percona-backup-mongodb/details/storage-configuration.html#server-side-encryption)

Regards,  
Parag

---

<div class="post-metadata">

**Author:** ![sujithtee](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sujithtee/32/18989_2.png) [@sujithtee](https://forums.percona.com/u/sujithtee)\
**Post date:** [June 21, 2023, 7:34am UTC](https://forums.percona.com/t/in-transit-encryption-for-pbm/21811/3 "2023-06-21T07:34:25Z")

</div>

Hi @Parag_Bhayani , The above mentioned serverSideEncryption option is not encrypting the backup files with GCS bucket, its just storing the plain compressed files. No errors also found in logs