Step 3. Configure Microsoft Entra Application
You can configure an existing Microsoft Entra application to connect to Restore Portal. Veeam Backup for Microsoft 365 checks the Microsoft Entra application permissions, grants the missing permissions if needed and updates a TLS certificate.
To configure an existing application, do the following:
- From the Region drop-down list, select a Microsoft Entra region.
Keep in mind that if you change your Microsoft Entra region, you must also specify another Microsoft Entra application.
- In the Application ID field, specify an identification number of Microsoft Entra application that you want to use to connect to Restore Portal.
You can find this number in the application settings of your Microsoft Entra ID. For more information, see this Microsoft article.
- Click Install to specify a TLS certificate that you want to use for data exchange between Restore Portal and the specified Microsoft Entra application.
You can generate a new self-signed certificate or use an existing one. When generating a new self-signed certificate, Veeam Backup for Microsoft 365 will register it in Microsoft Entra ID automatically. Before using an existing certificate, make sure to register this certificate in Microsoft Entra ID. For more information, see this Microsoft article.
- In the Select Certificate wizard, proceed to any of the following options:
Generate a new self-signed certificate
Perform the following steps:
|
Import an existing TLS certificate from the certificate store
Perform the following steps:
|
Import a TLS certificate from a file in the PFX format
Perform the following steps:
|
Note |
Veeam Backup for Microsoft 365 uses this TLS certificate only for the Microsoft Entra application that you are configuring. To communicate with the Veeam Backup for Microsoft 365 server and perform restore operations, Restore Portal uses the REST API certificate. For more information, see REST API Settings. |
- In the Restore Portal web address field, specify web address of a machine with the Veeam Backup for Microsoft 365 REST API component installed. Restore operators and end users will use this web address to open Restore Portal in a web browser window.
Consider the following:
- The website is available over HTTPS protocol only.
- By default, port 4443 must be opened on the Veeam Backup for Microsoft 365 server or a machine with the Veeam Backup for Microsoft 365 REST API component installed. For more information, see Ports.
- If you configured a different port in the REST API settings, you must specify the same value for the Restore Portal web address. Otherwise, Restore Portal will be unavailable. For more information, see REST API Settings.
- The web address must be specified in one of the following formats:
- https://<IPv4 address>:<port number>, where <IPv4 address> is a public IPv4 address of a machine with the Veeam Backup for Microsoft 365 REST API component installed. For example, https://135.169.170.192:4443.
- https://<DNS hostname>:<port number>, where <DNS hostname> is DNS host name of a machine with the Veeam Backup for Microsoft 365 REST API component installed. For example, https://portal.abc.com:4443.
- Restore operators and end users will be able to use the only URI that you specify in the Restore Portal web address field. If you want to specify multiple redirect URIs that will be used as the Restore Portal web address or set the application as enterprise to allow multi-tenant access, you must configure these settings manually in your Microsoft Entra ID.
