Supported Cipher Suites and Protocols

Veeam Backup & Replication supports TLS and SSH secure communication protocols.

TLS

Veeam backup infrastructure components support the following TLS versions:

• TLS 1.3 including mutual TLS (mTLS). Veeam Backup & Replication uses this by default.
• TLS 1.2 including mutual TLS (mTLS).

To avoid negotiation problems between Veeam Backup & Replication and a Microsoft Windows server, ensure that both sides of communication support the same cipher suites.

Post-Quantum Cryptography (PQC)

Veeam Backup & Replication can use post-quantum cryptography (PQC) to protect the key exchange for network traffic between Veeam Data Movers. The key exchange is based on a hybrid algorithm that combines a classic elliptic-curve algorithm with post-quantum ML-KEM (NIST FIPS 203). Post-quantum algorithms secure the key exchange only; backup data is still encrypted with AES. This protects the exchanged session keys against the harvest-now, decrypt-later threat, when data captured today could be decrypted in the future by quantum computers.

PQC cannot be used if the FIPS-compliant operation mode is enabled, because post-quantum algorithms are not yet FIPS-validated. Note that the backup server on Linux has FIPS-compliant operation mode enabled by default.

SSH

To avoid negotiation problems between Veeam Backup & Replication and a Linux server, the latter should use ciphers, Key Exchange (KEX) algorithms, and MAC algorithms compatible with SSH libraries supported by Veeam Backup & Replication:

Ensure that your SSH configuration on the Linux server allows you to use at least one cipher, KEX algorithm, and MAC algorithm from the table above. You can run the following command to verify the list of allowed algorithms: