When is Veeam-provided (software level) encryption used for tape media? 

If the original backup file is not encrypted, but the administrator has enabled encryption 

If the “Tape protection” option is enabled by the administrator 

If the hardware encryption is disabled at the tape device level or not supported, but the administrator has enabled encryption 

By default for all of the tape jobs