This is an archive version of the document. To get the most up-to-date information, see the current version.

SSL Certificate Thumbprint Verification

In this article

When the tenant adds a SP to the Veeam Backup & Replication console, Veeam Backup & Replication retrieves the SSL certificate with a public key from the SP Veeam backup server and saves it to the database with which tenant's Veeam backup server communicates.

To make sure that the obtained SSL certificate is really the SSL certificate used by the SP, tenants can verify the SSL certificate with a thumbprint. Verification with the thumbprint helps tenants protect against the “man-in-the middle” attack when the eavesdropper provides a false SSL certificate to tenants and makes tenants believe that they communicate directly with the SP.

To enable thumbprint verification, the SP must pass the SSL certificate thumbprint to the tenant over a secure channel, for example, by email. When the tenant adds the SP, Veeam Backup & Replication offers the tenant to enter the SSL certificate thumbprint to verify if this SSL certificate is the original SP certificate.