SIRIS, ALTO, and NAS: Temporary local troubleshooting access for encrypted backups



This article describes how to give Datto Technical Support temporary access to your encrypted agent's backups by using the Datto appliance's GUI.


  • Datto SIRIS
  • Datto ALTO
  • Datto NAS


Enabling temporary troubleshooting access for an encrypted agent will unseal its dataset for a period of six hours, allowing a technician to perform operations on the Datto appliance such as restores and reboots without the need to know the encryption passphrase or to have an authorized keyholder enter it for each restore or reboot operation.

For security purposes, the Temporary Troubleshooting Access option will only appear when accessing the Datto appliance's GUI through the Partner Portal; the option will not appear when logging into the device locally.


1. Start a Device Web session to access your Datto appliance's GUI.
2. Click the Protect tab.
3. Locate the agent you wish to unseal, and select Configure Agent Settings.
4. Scroll down to the Advanced section, and look for the Temporary local troubleshooting access option, as shown in Figure 1.

temporary.gifFigure 1: Temporary local troubleshooting access (click to enlarge)

5. Select Enable, and then enter the encryption passphrase to decrypt the backup for 6 hours. After 6 hours, the appliance will re-encrypt the backup. Repeat this step as necessary.

Was this article helpful?

0 out of 2 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Datto Community Forum or the Datto Community Online.

For more Business Management resources, see the Datto RMM Online Help and the Autotask PSA Online Help .

Still have questions? Get live help.

Datto Homepage