Before You Begin

Before you add a Microsoft Azure compute account to Veeam Backup & Replication, check the following prerequisites:

• At the Subscription step of the Microsoft Azure Compute Account wizard, you specify how Veeam Backup & Replication will access Microsoft Azure. If you plan to use an Azure Active Directory (AD) application, mind the following:

• Make sure that you already have a user account in Microsoft Azure AD. This account must have privileges listed in the Permissions section.

• You must install Microsoft Azure PowerShell version 6.13.2 on the machine running the Veeam Backup & Replication console version 11a (build 11.0.1.1261) or later. For the machine running the Veeam Backup & Replication console version prior 11a (build 11.0.1.1261), install Microsoft Azure PowerShell version 5.1.1. If the installed Microsoft Azure PowerShell version differs, you will not be able to add a Microsoft Azure compute account.

If you do not have Microsoft Azure PowerShell on the machine, Veeam Backup & Replication will prompt you to install it at the Subscription step of the Microsoft Azure Compute Account wizard.

• At the Subscription step of the Microsoft Azure Compute Account wizard, you specify how Veeam Backup & Replication will access Microsoft Azure. If you plan to use an existing Azure AD user account, mind the following:

• The account must have privileges listed in the Permissions section.

• If you have more than one Azure Active Directory tenant associated with your account, you will need to specify which tenant to use. For information on how to do it, see this Veeam KB article.
• Only subscriptions that belong to the selected tenant will be added.
• In this scenario, you cannot add an account with enabled Multi-Factor Authentication (MFA). You must disable MFA for the required account. App passwords are not supported.
• Azure AD user accounts with Seamless Single Sign-On (SSO) enabled are not supported.

• [For Microsoft Server OS] The Protected Mode must be switched off in the Internet Explorer settings. Otherwise, you will not be able to log on to Microsoft Azure when passing through the Microsoft Azure Compute Account wizard.

If you do not want to switch off the Protected Mode for security reasons, you can add the following sites to the list of trusted hosts in Internet Options > Secure settings in Internet Explorer or in Control Panel > Network and Internet:

• https://login.live.com
• https://login.microsoftonline.com
• https://secure.aadcdn.microsoftonline-p.com
• https://auth.gfx.ms
• https://management.azure.com
• about:security_veeam.backup.shell.exe

You may need to additionally disable the Internet Explorer Enhanced Security Configuration in Server Manager.

• On the backup server, you must set the correct time according to the timezone where the backup server is located. Otherwise, you may not be able to add a Microsoft Azure user account to Veeam Backup & Replication.

• When the internet access is possible only through HTTP/HTTPS proxy, you must configure the proxy settings for the Local System account or account under which the Veeam Backup Service is running. For more information, see this Microsoft article.