Skip to content
Docs sslbrain sslbrain.com

Veeam Cloud Connect (provider)

Copy link to the page “Veeam Cloud Connect (provider)”

← All integrations

Windows · Apps and databases

Installs and renews the Veeam provider's Cloud Connect certificate for gateways via the service agent on the backup server.

The service agent on the server fetches the task from the appliance over outbound HTTPS on port 443 and installs the certificate locally on the server. The appliance never connects to the server.

What happens

  1. The service agent on the server fetches the task from the appliance over outbound HTTPS, port 443.
  2. Discovers the Cloud Connect certificate, Veeam version and every gateway with its advertised name and port. The certificate SANs must cover every gateway DNS name.
  3. Imports the certificate into the Windows certificate store and gives the Cloud Connect service account access to its private key. Selects that exact certificate for the provider; refuses if the active certificate changed since the check.
  4. Checks the provider thumbprint and the gateway TLS certificate where the gateway offers plain TLS. Otherwise the result states that only the Veeam configuration was checked. Rollback can reselect the previous certificate when its key still exists and the active certificate has not changed.

Technical details

Connection
The package runs through the service agent on the server. The agent connects over outbound HTTPS to the appliance, port 443 by default. You open no port into the server.
Service ports
6180
You need
The service agent installed on the server.
Platform
Windows Server 2016 and later
Actions
Discovery, Installation, Verification, Rollback
Packages
windows-veeam 1.1.0
Note
  • Cloud Connect supports RSA and ECDSA. The backup-server certificate is not managed: from VBR12 it requires the customer’s subordinate CA certificate with RSA/CSP, rather than a public web certificate.

Get started