Security

You can use the Security screen to create and maintain a list of credentials records that you plan to use to connect to components in the virtual and backup infrastructure, configure your Coveware integration and adjust the login session settings to optimize the process of accessing Veeam ONE Web Client.

Credentials Manager

The Credentials Manager lets you create the following types of credentials records:

Adding Standard Accounts

You can create a credentials record for an account that you plan to use to connect to infrastructure objects and their guest OS.

  1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

  1. At the top right corner of the Veeam ONE Web Client window, click Configuration.
  2. In the configuration menu on the left, click Security.
  3. Navigate to the Credentials Manager tab.
  4. Click Add credentials.
  5. At the Type step of the wizard, select Standard account.
  6. At the Details step of the wizard:
    1. In the Username field, enter a user name for the account that you want to add. You can also click Browse to select an existing user account.
    2. In the Password field, enter a password for the account that you want to add. To view the entered password, click and hold the eye icon on the right of the field.
    3. In the Description field, enter a description for the created credentials record.

As there can be a number of similar account names, for example, Administrator, it is recommended that you provide a meaningful unique description for the credentials record so that you can distinguish it in the list. The description is shown in brackets, following the user name.

  1. Click Finish.

Add Microsoft Windows Standard Credentials

Adding Linux Private Keys

You can add a credentials record to connect to Linux machines using the Identity/Pubkey authentication method.

NOTE:

To use this method, you must first generate a pair of keys using a key generation utility, for example, ssh-keygen. Place the public key on a Linux server. To do this, add the public key to the authorized_keys file in the .ssh/ directory in the home directory on the Linux machine. Place the private key in some folder on the Veeam ONE server or in a network shared folder.

To create a new credentials record using the Identity/Pubkey authentication method:

  1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

  1. At the top right corner of the Veeam ONE Web Client window, click Configuration.
  2. In the configuration menu on the left, click Security.
  3. Navigate to the Credentials Manager tab.
  4. Click Add credentials.
  5. At the Type step of the wizard, select Linux private key.
  6. At the Details step of the wizard:
    1. In the Username field, specify a user name for the created credentials record.
    2. In the Password field, specify the password for the user account.
    3. Click Browse next to the Private key field to select a private key file.
    4. In the Passphrase field, specify a passphrase for the private key on the backup server.
    5. In the Description field, enter a description for the created credentials record.

As there can be a number of similar account names, for example, Root, it is recommended that you supply a meaningful unique description for the credentials record so that you can distinguish it in the list.

  1. Click Finish.

Add Linux Private Key

Editing and Deleting Credentials Records

You can edit or delete credentials records that you have created.

  1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

  1. At the top right corner of the Veeam ONE Web Client window, click Configuration.
  2. In the configuration menu on the left, click Security.
  3. Navigate to the Credentials Manager tab.
  4. Select the credentials record and click Edit credentials.
  5. If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. Click Edit to confirm your intention.
  6. Edit settings of the credentials record as required and click Finish.

To delete a credentials record:

  1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

  1. At the top right corner of the Veeam ONE Web Client window, click Configuration.
  2. In the configuration menu on the left, click Security.
  3. Navigate to the Credentials Manager tab.
  4. Select the credentials record and click Delete credentials.

If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. In this case, you need to connect to an infrastructure object with new credentials before deleting current credentials record.

Adding Credentials in Veeam ONE Client

Alternatively you can create credential records in Veeam ONE Client.

To create a new standard credentials record:

  1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

  1. In the main menu, click Credentials Manager.

Alternatively, press [CTRL + M] on the keyboard.

  1. Click Add > Standard account.
  2. In the Username field, enter a user name for the account that you want to add. You can also click Browse to select an existing user account.
  3. In the Password field, enter a password for the account that you want to add. To view the entered password, click and hold the eye icon on the right of the field.
  4. In the Description field, enter a description for the created credentials record.

As there can be a number of similar account names, for example, Administrator, it is recommended that you provide a meaningful unique description for the credentials record so that you can distinguish it in the list. The description is shown in brackets, following the user name.

  1. Click Save.

Adding Linux Private Keys in Veeam ONE Client

You can add a credentials record to connect to Linux machines using the Identity/Pubkey authentication method.

NOTE:

To use this method, you must first generate a pair of keys using a key generation utility, for example, ssh-keygen. Place the public key on a Linux server. To do this, add the public key to the authorized_keys file in the .ssh/ directory in the home directory on the Linux machine. Place the private key in some folder on the Veeam ONE server or in a network shared folder.

To create a new credentials record using the Identity/Pubkey authentication method:

  1. Open Veeam ONE Client.

For details, see Accessing Veeam ONE Components.

  1. In the main menu, click Credentials Manager.

Alternatively, press [CTRL + M] on the keyboard.

  1. Click Add > Linux private key.
  2. In the Username field, specify a user name for the created credentials record.
  3. In the Password field, specify the password for the user account.
  4. Click Browse next to the Private key field to select a private key file.
  5. In the Passphrase field, specify a passphrase for the private key on the backup server.
  6. In the Description field, enter a description for the created credentials record.

As there can be a number of similar account names, for example, Root, it is recommended that you supply a meaningful unique description for the credentials record so that you can distinguish it in the list.

  1. Click Save.

Editing and Deleting Credentials Records on Veeam ONE Client

You can edit or delete credentials records that you have created.

To edit a credentials record:

  1. Open Veeam ONE Client.

For details, see Accessing Veeam ONE Components.

  1. In the main menu, click Credentials Manager.

Alternatively, press [CTRL + M] on the keyboard.

  1. Select the credentials record in the list and click Edit.
  2. If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. Click Edit to confirm your intention.
  3. Edit settings of the credentials record as required and click Save.

To delete a credentials record:

  1. Open Veeam ONE Client.

For details, see Accessing Veeam ONE Components.

  1. In the main menu, click Credentials Manager.

Alternatively, press [CTRL + M] on the keyboard.

  1. Select the credentials record in the list and click Delete.

If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. In this case, you need to connect to an infrastructure object with new credentials before deleting current credentials record.

Coveware Integration

You can optionally integrate Coveware into Veeam ONE to provide additional ransomware detection information in both the Threat Center and Alarms Summary screens. Coveware requires a standard user role to setup and configure on the the Coveware portal.

To enable Coveware integration:

  1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

  1. At the top right corner of the Veeam ONE Web Client window, click Configuration.
  2. In the configuration menu on the left, click Security.
  3. In the main menu, Navigate to the Coveware Integration tab.
  4. Switch the Coveware integration toggle to On.
  5. In the Username field, specify the user name from the Coveware portal account API tab. For details on Coveware, see Recon 2.1 Scanner User Guide.
  6. In the Password field, specify the password from in the Coveware portal account API tab.
  7. In the Client ID field, specify the Coveware client id.
  8. In the Proxy URL field, specify the Coveware proxy URL.
  9. Click Save.
  10. (Optional) To manually collect data from your Coveware instance, click Manual Collection.

Coveware Integration

Login Sessions

You can adjust the login session settings to optimize the process of accessing Veeam ONE Web Client. To do that:

  1. Open Veeam ONE Web Client.
  2. At the top right corner of the Veeam ONE Web Client window, click Configuration.
  3. In the configuration menu on the left, click Security.
  4. Navigate to the Login Sessions tab.
  5. Specify login session settings:
  1. Click Save.