---
title: "Connecting to Veeam Backup Server in Read-Only Mode"
description: "You can use Veeam Agent to restore data from backups located in a repository managed by another Veeam backup server. To do this, you must connect Veeam Agent to the second backup server in read-only mode."
canonical: "https://helpcenter.veeam.com/docs/agentformac/userguide/manage_vbr_add_readonly.html"
breadcrumb: "User Guide > Performing Backup > Managing Veeam Backup Servers > Connecting to Veeam Backup Server in Read-Only Mode"
dateModified: "2026-10-23"
---

# Connecting to Veeam Backup Server in Read-Only Mode

You can use Veeam Agent to restore data from backups located in a repository managed by another Veeam backup server. To do this, you must connect Veeam Agent to the second backup server in read-only mode. For more information, see [Restore from Another Veeam Backup Server](restore_vbr_readonly.md).

To connect a Veeam Agent computer to another Veeam backup server in read-only mode, use the following command:

```
veeamconfig vbrserver add --name <vbr_name> --address <vbr_address> [--port <vbr_port>] --login <username> [--domain <domain>] [--password <password>] [--fingerprint <tls_cert_thumbprint>] --readonly
```

where:

- `<vbr_name>` — name of the Veeam backup server to which you want to connect.
- `<vbr_address>` — IP address of the Veeam backup server.
- `<vbr_port>` — port over which Veeam Agent must communicate with Veeam Backup & Replication. The default port used for communication with the Veeam backup server is 10006.
- `<username>` — a user name of the account that has access to the Veeam backup repository.

  You can specify a user name in the *username* or *username@domain* format. In the latter case, you do not need to specify a domain as a value of the `--domain` option.

  ::: note

  You cannot provide a user name in the *domain*\\*username* format.

  :::

- `<domain>` — a name of the domain in which the account that has access to the Veeam backup repository is registered.



  ::: important

  To authenticate to a Linux-based Veeam backup server (Veeam Software Appliance), you must use a local user account. We recommend specifying credentials for a local user account with the *Service Account* role. To learn more about available local user roles, see the [Configuring Users](https://helpcenter.veeam.com/docs/vbr/userguide/hmc_configure_users.html?ver=13) section in the Veeam Backup & Replication User Guide.

  You cannot use domain accounts because Kerberos authentication is not supported in Veeam Agent, and Veeam Software Appliance does not support NTLM authentication.

  :::

- `<password>` — password of the account that has access to the Veeam backup repository. If you do not specify a password as a value of the `--password` option, Veeam Agent will prompt you to enter the password when you run the `veeamconfig vbrserver add` command. 

  Permissions on the backup repository managed by the target Veeam backup server must be granted beforehand. To learn more, see [Setting Up User Permissions on Backup Repositories](integrate_permissions.md).


- `<tls_cert_thumbprint>` — the thumbprint of the backup server's self-signed TLS certificate. For more information on using TLS certificates for secure connections to Veeam backup server, see the [Backup Server Certificate](https://helpcenter.veeam.com/docs/vbr/userguide/backup_server_certificate.html?ver=13) section in the Veeam Backup & Replication User Guide.

  ::: note

  If you do not specify the fingerprint of the Veeam backup server certificate, during command execution, you will be prompted to verify and accept the server certificate.

  :::


For example:

```
user@wrk01:~$ veeamconfig vbrserver add --name vbr02 --address 172.17.53.1 --port 10006 --login veeamuser --domain tech --fingerprint X1554144XXXX692173X31X3X2X614157686XX7X3 --readonly
```