Managing TLS Certificates

TLS certificates ensure a secure connection with Veeam Backup Enterprise Manager over HTTPS. During the Enterprise Manager installation on Linux, a self-signed certificate is generated. The certificate is bound to Enterprise Manager, the REST API and their ports.

By default, Veeam Backup Enterprise Manager uses the same TLS certificate for all connections. If you want to use different certificates for different components, you can install new certificates. For more information, see Installing Certificates.

TLS certificates are used for the following purposes:

• The Veeam Backup Enterprise Manager Service and Veeam Guest Catalog Service use the server certificate to communicate with backup servers added to the Enterprise Manager infrastructure. For more information, see How Enterprise Manager Authenticates to Backup Servers.
• The Veeam Backup Enterprise Manager web app and Veeam vSphere Client plug-in use the web UI certificate to communicate with a browser.
• The Veeam Backup Enterprise Manager REST API service communicates with a REST API client.