---
title: "Security"
description: "You can use the Security screen to create and maintain a list of credentials records that you plan to use to connect to components in the virtual and backup infrastructure, configure your integration with Recon for Veeam Infrastructure and adjust..."
canonical: "https://helpcenter.veeam.com/docs/one/userguide/credentials_manager.html"
breadcrumb: "User Guide > Configuring Veeam ONE > Security"
dateModified: "2026-10-23"
---

# Security

You can use the **Security** screen to create and maintain a list of credentials records that you plan to use to connect to components in the virtual and backup infrastructure, configure your integration with Recon for Veeam Infrastructure and adjust the login session settings to optimize the process of accessing Veeam ONE Web Client.

- [Credentials Manager](#credentials_manager)
- [Integration with Recon for Veeam Infrastructure](#coveware_integration)
- [Login Sessions](#login_sessions)
- [Certificate Management](#certificates)  


## Credentials Manager {#credentials_manager}

The Credentials Manager lets you create the following types of credentials records:

- Standard account
- Linux private key

## Adding Standard Accounts

You can create a credentials record for an account that you plan to use to connect to infrastructure objects and their guest OS.

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. Navigate to the **Credentials Manager** tab.
5. Click **Add credentials**.
6. At the **Type** step of the wizard, select **Standard account**.
7. At the **Details** step of the wizard:

   1. In the **Username** field, enter a user name for the account that you want to add. You can also click **Browse** to select an existing user account.
   2. In the **Password** field, enter a password for the account that you want to add. To view the entered password, click and hold the eye icon on the right of the field.
   3. In the **Description** field, enter a description for the created credentials record.

      As there can be a number of similar account names, for example, Administrator, it is recommended that you provide a meaningful unique description for the credentials record so that you can distinguish it in the list. The description is shown in brackets, following the user name.

8. Click **Finish**.

[![Add Microsoft Windows Standard Credentials](images/credentials_manager_standard.png "Add Microsoft Windows Standard Credentials")](images/credentials_manager_standard.png){.toggle scale=70}

## Adding Linux Private Keys

You can add a credentials record to connect to Linux machines using the Identity/Pubkey authentication method.

::: note

To use this method, you must first generate a pair of keys using a key generation utility, for example, ssh-keygen. Place the public key on a Linux server. To do this, add the public key to the `authorized_keys` file in the `.ssh/` directory in the home directory on the Linux machine. Place the private key in some folder on the Veeam ONE server or in a network shared folder.

:::

To create a new credentials record using the Identity/Pubkey authentication method:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. Navigate to the **Credentials Manager** tab.
5. Click **Add credentials**.
6. At the **Type** step of the wizard, select **Linux private key**.
7. At the Details step of the wizard:

   1. In the **Username** field, specify a user name for the created credentials record.
   2. In the **Password** field, specify the password for the user account.
   3. Click **Browse** next to the **Private key** field to select a private key file.
   4. In the **Passphrase** field, specify a passphrase for the private key on the backup server.
   5. In the **Description** field, enter a description for the created credentials record.

      As there can be a number of similar account names, for example, Root, it is recommended that you supply a meaningful unique description for the credentials record so that you can distinguish it in the list.

8. Click **Finish**.

## [![Add Linux Private Key](images/credentials_manager_private_key.png "Add Linux Private Key")](images/credentials_manager_private_key.png){.toggle scale=70}

## Editing and Deleting Credentials Records

You can edit or delete credentials records that you have created.

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. Navigate to the **Credentials Manager** tab.
5. Select the credentials record and click **Edit credentials**.
6. If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. Click **Edit** to confirm your intention.
7. Edit settings of the credentials record as required and click **Finish**.

To delete a credentials record:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. Navigate to the **Credentials Manager** tab.
5. Select the credentials record and click **Delete credentials**.

   If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. In this case, you need to connect to an infrastructure object with new credentials before deleting current credentials record.

## Adding Credentials in Veeam ONE Client

Alternatively you can create credential records in Veeam ONE Client.

To create a new standard credentials record:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. In the main menu, click **Credentials Manager**.

   Alternatively, press `[CTRL + M]` on the keyboard.

3. Click **Add** > **Standard account**.
4. In the **Username** field, enter a user name for the account that you want to add. You can also click **Browse** to select an existing user account.
5. In the **Password** field, enter a password for the account that you want to add. To view the entered password, click and hold the eye icon on the right of the field.
6. In the **Description** field, enter a description for the created credentials record.

   As there can be a number of similar account names, for example, Administrator, it is recommended that you provide a meaningful unique description for the credentials record so that you can distinguish it in the list. The description is shown in brackets, following the user name.

7. Click **Save**.

## Adding Linux Private Keys in Veeam ONE Client

You can add a credentials record to connect to Linux machines using the Identity/Pubkey authentication method.

::: note

To use this method, you must first generate a pair of keys using a key generation utility, for example, ssh-keygen. Place the public key on a Linux server. To do this, add the public key to the `authorized_keys` file in the `.ssh/` directory in the home directory on the Linux machine. Place the private key in some folder on the Veeam ONE server or in a network shared folder.

:::

To create a new credentials record using the Identity/Pubkey authentication method:

1. Open Veeam ONE Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. In the main menu, click **Credentials Manager**. 

   Alternatively, press `[CTRL + M]` on the keyboard.

3. Click **Add** > **Linux private key**.
4. In the **Username** field, specify a user name for the created credentials record.
5. In the **Password** field, specify the password for the user account.
6. Click **Browse** next to the **Private key** field to select a private key file.
7. In the **Passphrase** field, specify a passphrase for the private key on the backup server.
8. In the **Description** field, enter a description for the created credentials record.

   As there can be a number of similar account names, for example, Root, it is recommended that you supply a meaningful unique description for the credentials record so that you can distinguish it in the list.

9. Click **Save**.

## Editing and Deleting Credentials Records on Veeam ONE Client

You can edit or delete credentials records that you have created.

To edit a credentials record:

1. Open Veeam ONE Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. In the main menu, click **Credentials Manager**. 

   Alternatively, press `[CTRL + M]` on the keyboard.

3. Select the credentials record in the list and click **Edit**.
4. If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. Click **Edit** to confirm your intention.
5. Edit settings of the credentials record as required and click **Save**.

To delete a credentials record:

1. Open Veeam ONE Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. In the main menu, click **Credentials Manager**. 

   Alternatively, press `[CTRL + M]` on the keyboard.

3. Select the credentials record in the list and click **Delete**.

   If the credentials record is already used for any component in the infrastructure, Veeam ONE will display a warning. In this case, you need to connect to an infrastructure object with new credentials before deleting current credentials record.

## Integration with Recon for Veeam Infrastructure {#coveware_integration}

You can optionally integrate Recon for Veeam Infrastructure into Veeam ONE to provide the following information:

- Suspicious ransomware activities detected by Recon and displayed in the Threat Center dashboard.
- Internal alarms triggered by Recon and displayed in the Alarms Overview dashboard. 

For more information on the solution, see [Recon for Veeam Infrastructure User Guide](https://helpcenter.veeam.com/docs/coveware/userguide/overview.html).

To configure integration with Recon for Veeam Infrastructure:

1. Open Veeam ONE Web Client.

   For details, see [Accessing Veeam ONE Components](access.md).

2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. In the main menu, navigate to the **Coveware Integration** tab.
5. Switch the **Coveware integration** toggle to **On**.
6. Specify parameters to connect to the Recon REST API:

   - Username
   - Password
   - Client ID
   - Proxy URL

   To get these parameters, log in to the Coveware portal and enable API integration. For more information, see [Integrations](https://helpcenter.veeam.com/docs/coveware/userguide/overview.html#integrations) in the Recon for Veeam Infrastructure User Guide.

7. Click **Save**.
8. (Optional) To manually collect data from your Coveware instance, click **Manual Collection**.

   [![Coveware Integration](images/coveware_integration.png "Coveware Integration")](images/coveware_integration.png){.toggle scale=70}

## Login Sessions {#login_sessions}

You can adjust the login session settings to optimize the process of accessing Veeam ONE Web Client. To do that:

1. Open Veeam ONE Web Client.
2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. Navigate to the **Login Sessions** tab.
5. Specify login session settings:

   - In the **Idle user login session timeout, minutes**, specify the time period in minutes after which an idle user must be automatically logged out.
   - In the **Idle administrator login session timeout, minutes**, specify the time period in minutes after which an idle administrator must be automatically logged out.
   - In the **Maximum number of concurrent login sessions per user**, specify the maximum allowed number of simultaneously processed login attempts performed by a single user.
   - To view information on previous login sessions, select the **Show previous login attempts after logging in** check box. The information will be displayed on an additional page that opens after you log in.

6. Click **Save**.

## Certificate Management {#certificates}

You can access the certificate settings page to optimize the process of accessing Veeam ONE Web Client. To do that:

1. Open Veeam ONE Web Client.
2. At the top right corner of the Veeam ONE Web Client window, click **Configuration**.
3. In the configuration menu on the left, click **Security**.
4. Navigate to the **Certificate Management** tab.
5. Select the certificate from the certificate list.

   For each server in the list, the following details are available:

   - **Common Name** — the common name of the certificate.
   - **Issued by** — the name of the certificate issuer.
   - **Expiration Date** — the date the certificate expires.
   - **Type** — the type of certificate.
   - **Description** — additional notes and information for the certificate.

6. Click **Show Certificate** on the selected certificate to open the certificate details screen.

## Export certificate settings

You can export certificate either in JSON or CSV formats for the purposes of evaluation, reporting and troubleshooting. To do that, select the certificate and click **Export**.

[![Certificate Management](images/certificate_management.png "Certificate Management")](images/certificate_management.png){.toggle}