Creating SSH Private Key Using Web UI

To add a credentials record using the Identity/Pubkey authentication method in the Veeam Backup & Replication web UI, do the following:

1. Generate a pair of keys using a key generation utility, for example, ssh-keygen.

Note that keys generated as ED448 as are not supported.

2. Place the public key on a Linux server. To do this, add the public key to the authorized_keys file in the .ssh/ directory in the home directory on the Linux server.
3. Place the private key in some folder on the backup server or in a network shared folder.
4. In the Veeam Backup & Replication web UI, click the gear icon in the top bar.
5. Select Credentials & Passwords in the management pane.
6. In the Datacenter Credentials tab, click Add Credentials > SSH private key.
7. In the Username field, specify a user name for the created credentials record.
8. In the Password field, specify the password for the user account. The password is required in all cases except when you use root or a user with enabled NOPASSWD:ALL setting in /etc/sudoers. To view the entered password, click and hold the eye icon on the right of the field.
9. Next to the Private key field, click Browse to select a private key.
10. In the Passphrase field, specify a passphrase for the private key on the backup server. To view the entered passphrase, click and hold the eye icon on the right of the field.
11. In the SSH Port field, specify a number of the SSH port that you plan to use to connect to a Linux server. By default, port 22 is used.
12. If you specify data for a non-root account that does not have root permissions on a Linux server, you can use the Non-root account section to grant sudo rights to this account.

1. To provide a non-root user with root account privileges, select the Elevate account privileges automatically check box.
2. To add the user account to sudoers file, select the Add account to the sudoers file check box. In the Root password field, enter the password for the root account.

If you do not enable this option, you will have to manually add the user account to the sudoers file.

3. When registering a Linux server, you have an option to failover to using the su command for distros where the sudo command is not available.

To enable the failover, select the Use "su" if "sudo" fails check box and in the Root password field, enter the password for the root account.

13. In the Description field, enter a description for the created credentials record. As there can be a number of similar account names, for example, Root, it is recommended that you supply a meaningful unique description for the credentials record so that you can distinguish it in the list. The description is shown in brackets, following the user name.
14. Click OK.