The procedure of TLS certificate creation and management is performed by the SP on the SP Veeam backup server.
When you deploy the Veeam Cloud Connect infrastructure, you must first specify what TLS certificate must be used to establish a secure connection between parties. Veeam Backup & Replication offers the following options for TLS certificates:
- You can use Veeam Backup & Replication to generate a self-signed TLS certificate. To learn more, see Generating Self-Signed Certificates.
- You can select an existing TLS certificate from the certificates store. To learn more, see Importing Certificates from Certificate Store.
- You can import a TLS certificate from a file in the PFX format. To learn more, see Importing Certificates from PFX Files.
If you have already specified TLS certificate settings in the Veeam Cloud Connect infrastructure, when you launch the Manage Certificate wizard once again, Veeam Backup & Replication also offers an option to keep the currently used certificate. To do this, select the Keep existing certificate option at the Certificate Type step of the wizard.