Deploying Veeam Components for Certificate-Based Authentication

You have an option to install Veeam components on Linux computers using certificate-based authentication instead of credentials. To do so, you must install Veeam components on the computer, add the computer to a protection group for MongoDB and configure it to use certificate-based authentication. In this case, Veeam Backup & Replication does not require SSH connection to install Veeam components.

Deploying Veeam Components

To deploy Veeam components using pre-installed Veeam Deployer Service, perform the following steps:

On the Veeam Backup & Replication side, start a Veeam PowerShell session. For more information, see the Starting Veeam PowerShell Sessions in the Veeam PowerShell Reference.
Run the Generate-VBRBackupServerDeployerKit cmdlet to generate the Veeam Deployer Service temporary certificate and export the Veeam Backup & Replication Deployer Client certificate and Veeam Deployer Service installation packages.
Upload the obtained files on the computer that you want to protect.
On the computer side, navigate to the directory where you have saved the files and install Veeam Deployer Service using a package manager.
Run the following commands to install the certificates:

/opt/veeam/deployment/veeamdeploymentsvc --install-server-certificate server-cert.p12
/opt/veeam/deployment/veeamdeploymentsvc --install-certificate client-cert.pem
/opt/veeam/deployment/veeamdeploymentsvc --restart

On the Veeam Backup & Replication side, create a protection group with the following parameters:

When launching the New Protection Group wizard, select a protection group for MongoDB. For details, see Launch New Protection Group Wizard.
At the Computers step of the wizard, specify a computer and select the Connect using certificate-based authentication method to connect to the computer. For details, see Specify Computers.

After you create the protection group, Veeam Backup & Replication will rescan the protection group. During the rescan operation, Veeam Backup & Replication will replace the Veeam Deployer Service temporary certificate, connect to the Veeam Deployer Service and install Veeam Agent. To learn more, see Rescan Job.