Backup

The Backup page saves a snapshot of your directory to an encrypted file, and opens such a file for viewing.

Who can use it

The code for this screen does not check a separate permission or plan. What you can export depends on what your role lets you read from the directory. Not yet verified on a lab: which roles see the Backup item and what a read-only role gets.

Create a backup

1. Open Backup under Operations.
2. Under Create Encrypted Backup, type a passphrase you will remember. Velauth cannot recover it.
3. Select Create Encrypted Backup.
4. The app downloads a .velback file. The page shows how many users and audit entries it holds.

The file holds the users (name, department, UPN, whether enabled or locked, and a few more account fields), the list of organisational units, and up to 500 recent local audit entries. It is encrypted with AES-256-GCM using your passphrase.

View a backup

1. Under View Backup File, enter the passphrase.
2. Select Choose Backup File, pick the .velback file, then select Open Backup File.
3. The users and audit entries show in read-only tables.

A wrong passphrase or a damaged file shows an error and nothing opens.

What is recorded

Not yet verified on a lab: whether creating or opening a backup writes an audit entry. The backup screen and service do not log one.

What it does not do

• It does not restore anything. Opening a file never writes to Active Directory.
• It does not back up groups, computers, Group Policy or passwords.
• It does not store the file for you or schedule backups. You keep the file safe.
• The audit entries in the file may be empty if the local audit log cannot be read at that moment. The export still succeeds.