--- title: "Add-VBRBackupServerCertificate" description: "Specifies a TLS certificate used to establish secure communication from backup infrastructure components to the backup server." canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/add-vbrbackupservercertificate.html" breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Backup Infrastructure > Veeam Backup & Replication Settings > Configuring Security Settings > Add-VBRBackupServerCertificate" dateModified: "2026-08-19" --- # Add-VBRBackupServerCertificate ## Short Description Specifies a TLS certificate used to establish secure communication from backup infrastructure components to the backup server. **Product Edition**: Community, Standard, Enterprise, Enterprise Plus, Veeam Universal License ## Syntax This cmdlet provides the following parameter sets:

FromStore
``` Add-VBRBackupServerCertificate -Certificate [-Force] [-WhatIf] [-Confirm] [] ```
Name
``` Add-VBRBackupServerCertificate -Name [-Force] [-WhatIf] [-Confirm] [] ```
FromFile
``` Add-VBRBackupServerCertificate -CertificatePath -PrivateKeyPath [-Password ] [-Force] [-WhatIf] [-Confirm] [] ```

## Detailed Description This cmdlet specifies a TLS certificate to be used to establish a secure connection from backup infrastructure components to the backup server. You can generate a new self-signed TLS certificate or import an existing TLS certificate from the Microsoft Windows certificate store. ::: important Consider the following: - With Veeam PowerShell, you cannot import a TLS certificate from a file in the PFX format. - Changing the TLS certificate requires the restart of the backup service. All active backup and restore tasks will be interrupted. ::: ## Parameters

Parameter	Description	Type	Required	Position	Accept Pipeline Input
Certificate	Specifies the certificate you want to use. Accepts the `VBRBackupServerCertificate` object. To get this object, run the `Get-VBRBackupServerCertificate` cmdlet.	`VBRBackupServerCertificate`	True	Named	True (ByPropertyName, ByValue)
CertificatePath	Specifies the full path to the certificate file (for example, a `.crt` or `.pem` file). The cmdlet does not accept `.pfx` files; see the Important note above.	`String`	True	Named	False
Force	Defines that the cmdlet installs the certificate without prompting you to confirm the operation.	`SwitchParameter`	False	Named	False
Name	Note: This parameter is obsolete. Specifies a friendly name for the self-signed TLS certificate.	`String`	True	Named	True (ByPropertyName, ByValue)
Password	Specifies a secure string that contains the password for the certificate file.	`SecureString`	False	Named	False
PrivateKeyPath	Specifies the full path to the KEY file associated with the certificate.	`String`	True	Named	False
Confirm	Defines that the cmdlet will display a prompt that asks if you want to continue running the command.	`SwitchParameter`	False	Named	False
WhatIf	Defines that the cmdlet will write a message that describes the effects of running the cmdlet without actually performing any action.	`SwitchParameter`	False	Named	False

`` This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7). ## Output Object The cmdlet returns the `VBRBackupServerCertificate` object that contains TLS certificates. ## Examples ::: example ### Example 1. Assigning Certificate using Certificate Files This example shows how to assign a certificate using certificate files. ``` Add-VBRBackupServerCertificate -CertificatePath "C:\Certs\TechCompany.crt" -PrivateKeyPath "C:\Certs\TechCompany.key" -Password (Read-Host -AsSecureString "Enter certificate password") ``` ::: ::: example ### Example 2. Importing Certificate from Certificate Store This example shows how to import an existing TLS certificate signed by a CA from the Microsoft Windows certificate store. ``` $certificate = Get-VBRBackupServerCertificate -FromStore | Where FriendlyName -eq "ABC" Add-VBRBackupServerCertificate -Certificate $certificate ``` Perform the following steps: 1. Run the [`Get-VBRBackupServerCertificate`](get-vbrbackupservercertificate.md) cmdlet. Provide the `FromStore` parameter value. Pipe the cmdlet output to the `Where` command to find certificates with `ABC` in the `FriendlyName` property. Save the result to the `$certificate` variable. 2. Run the `Add-VBRBackupServerCertificate` cmdlet. Set the `$certificate` variable as the `Certificate` parameter value. ::: ## Related Commands [`Get-VBRBackupServerCertificate`](get-vbrbackupservercertificate.md)