Updating TLS Certificates

If an existing TLS certificate expires, or if you want to use another certificate, for example, the one obtained from a Certificate Authority, you can update the current certificate.

• To update the certificate used by Veeam Backup Enterprise Manager Service and Veeam Guest Catalog Service, go to Configuration > Backup Servers and click Update certificate.
• To update the certificate used by Veeam Backup Enterprise Manager web app and Veeam vSphere Client plug-in, you can use Internet Information Services (IIS) Manager. For more information, see this Microsoft Docs article.

If you want to use a certificate obtained from a Certificate Authority, make sure that the fully qualified domain name of the Enterprise Manager server is specified in the certificate subject or subject alternative name.

• To update the Veeam Backup Enterprise Manager REST API certificate, use the netsh command. For more information, see the TLS Certificate section of the Veeam Backup Enterprise Manager REST API Reference.