Encryption option on Appliance 5230

Hi,

I am running with a POC with Appliance 5230 installed as Master/Media with MSDP.

I enable Encryption on appliance: Main_Menu> Settings> Deduplication> Tune Encryption Enable.

Now, how to I ensure that images on pool are encrypted, and how do I test that it is secured with unautorized restore to distinct server/location.

I do see some file created under  /disk/databases/catalog/number/client_host_name/policy_name/client-host-name_backup-timestamp_C1_F1.img

should I also have a keys stored somewhere?