Backup & Replication Console
The Veeam Backup & Replication console is a client-side component that provides access to the backup server. The console allows you to log in to Veeam Backup & Replication and perform all kinds of data protection and disaster recovery operations on the backup server.
To connect to the backup server, the Veeam Backup & Replication console uses Simple and Protected GSS-API Negotiation Mechanism (SPNEGO), the Microsoft Windows built-in authentication mechanism. SPNEGO supports both NTLM and Kerberos authentication.
Using NTLM increases the attack surface of your backup infrastructure. To build a more secure environment, disable NTLM and leave Kerberos the only domain authentication protocol. For more information, see Kerberos Authentication.
The console does not have a direct access to the backup infrastructure components and configuration database. Such data as user credentials, passwords, roles and permissions are stored on the backup server side. User credentials and passwords are stored in the configuration database encrypted with Data Protection API (DPAPI) mechanisms. To access the data, the console connects to the backup server and queries this information periodically during the work session.
To make users work as uninterrupted as possible, the remote console maintains the session for 5 minutes if the connection is lost. If the connection is re-established within this period, you can continue working without re-logging to the console.
Backup & Replication Console Deployment
The console is installed locally on the backup server by default. You can also use it in a standalone mode — install the console on any machine and access Veeam Backup & Replication remotely over the network.
You can install as many remote consoles as you need so that multiple users can access Veeam Backup & Replication simultaneously. Veeam Backup & Replication prevents concurrent modifications on the backup server. If several users are working with Veeam Backup & Replication at the same time, the user who saves the changes first has the priority. Other users will be prompted to reload the wizard or window to get the most recent information about the changes in the configuration database.
If you have multiple backup servers in the infrastructure, you can connect to any of them from the same console. For convenience, you can save several shortcuts for these connections.
You cannot use the same console to connect to backup servers with different versions of Veeam Backup & Replication. Note this if you have more than one backup server in your backup environment, and these backup servers run different versions of Veeam Backup & Replication. For example, if one of your backup servers run version 9.5 Update 3, and another backup server runs version 9.5 Update 4, you will need to use 2 separate consoles for connecting to these servers.
The console supports automatic update. Every time you connect to the backup server locally or remotely, the console checks for updates. If the backup server has updates installed, the console will be updated automatically.
Consider the following:
- Upgrade to another Veeam Backup & Replication major product version is supported starting from Veeam Backup & Replication version 11a (build 220.127.116.111). For example, if your console has this version, you can upgrade it automatically upon connecting to the Veeam backup server version 12 (build 18.104.22.1680). Automatic upgrade is not supported for Preview, Beta or RTM versions of Veeam Backup & Replication.
- Downgrade of the console is not supported. If the console is of a higher version than the backup server (for example, you have upgraded the console manually), the connection to the server will fail.
If other Veeam Backup & Replication components, such as Veeam Cloud Connect Portal or Veeam Backup Enterprise Manager, are installed on the machine where the console runs, these components will also be upgraded.
Backup & Replication Console Components
When you install a remote console on a machine, Veeam Backup & Replication installs the following components:
- Veeam Backup PowerShell Module
- Veeam Explorer for Microsoft Active Directory
- Veeam Explorer for Microsoft Exchange
- Veeam Explorer for Microsoft OneDrive for Business
- Veeam Explorer for Microsoft SharePoint
- Veeam Explorer for Microsoft SQL Server
- Veeam Explorer for Microsoft Teams
- Veeam Explorer for Oracle
- Veeam Explorer for PostgreSQL
- Veeam Data Mover Service
- Veeam Explorers Recovery Service
- Veeam Installer Service
- Veeam Mount Service
Backup & Replication Console User Access Rights
To log in to Veeam Backup & Replication using the console, the user must be added to the Local Users group on the backup server or a group of domain users who have access to the backup server. The user can perform the scope of operations permitted by his or her role in Veeam Backup & Replication. For more information, see Users and Roles.
Requirements for Backup & Replication Console
A machine on which you install the Veeam Backup & Replication console must meet the following requirements:
- The machine must meet the system requirements. For more information, see System Requirements.
- The remote console can be installed on a Microsoft Windows machine (physical or virtual).
- If you install the console remotely, you can deploy it behind NAT. However, the backup server must be outside NAT. The opposite type of deployment is not supported: if the backup server is deployed behind NAT and the remote console is deployed outside NAT, you will not be able to connect to the backup server.
Limitations for Backup & Replication Console
The Veeam Backup & Replication console has the following limitations:
- You cannot perform restore from the configuration backup using the remote console.
- The machines on which the remote console is installed are not added to the list of managed servers automatically. For this reason, you cannot perform some operations, for example, import backup files that reside on the remote console machine or assign roles of backup infrastructure components to this machine. To perform these operations, you must add the remote console machine as a managed server to Veeam Backup & Replication. For more information, see Managing Servers.