Using Veeam Deployment Kit

The Veeam Deployment Kit is a package that enables certificate-based authentication for connecting to remote Windows servers during backup infrastructure configuration. When the Deployment Kit is installed on a target server, Veeam Backup & Replication can authenticate using certificates instead of traditional user name and password credentials.

Deployment Kit Usage Scenarios

Use the Deployment Kit in the following scenarios:

Kerberos is disabled or unavailable

Use the Deployment Kit if your environment does not support NTLM or Kerberos authentication.

Enhanced security

Certificate-based authentication offers a more secure alternative to user name and password authentication.

Passwordless authentication

When the Deployment Kit is installed and configured on the target server, Veeam Backup & Replication connects using certificates. No user name or password are required for authentication.

Deployment Kit Availability

Pre-installed by default:

The Deployment Kit is pre-installed with all JeOS (Just enough Operating System) infrastructure components. If you deploy a JeOS-based Veeam component, you only need to pair it with Veeam Backup & Replication. No additional installation is required.

Manual installation required:

For the following components, you must manually install the Deployment Kit:

Windows managed servers
Hyper-V hosts
Agents
Guest Interaction proxies

How to Use the Veeam Deployment Kit

Create the Veeam Deployment Kit:

Open the Backup Infrastructure view.
In the inventory pane, right-click the Managed Servers node and select Create Veeam deployment kit. Alternatively, you can click Create Veeam Deployment Kit on the ribbon.
Specify the path where you can export the Veeam Deployment Kit and click OK.

Prepare for installation:

The Deployment Kit typically includes:

Necessary binaries and supporting files
Authentication certificates
A sample service configuration script (InstallDeploymentKit.BAT) for automated installation

Install the Deployment Kit on the target remote host:

Automated installation (recommended):

Copy the entire Deployment Kit folder to the target remote host.
Run the provided InstallDeploymentKit.BAT script to automatically install the kit and configure all required components.

Manual installation:

Obtain the Deployment Kit files from the Windows subfolder on your Veeam Backup & Replication console and copy them to the target remote host.
Install the OpenSSL package and the Veeam Installer service package on the target server.
Copy the certificates from the Deployment Kit folder to the remote host.
Install the certificates by running:

C:\Windows\Veeam\Backup\VeeamDeploymentSvc.exe --install-server-certificate /path/to/server-cert.pem --key /path/to/server-key.pem

C:\Windows\Veeam\Backup\VeeamDeploymentSvc.exe --install-certificate /path/to/client-cert.pem

Restart the Veeam Installer service (VeeamDeploySvc) to apply the changes.

Usage Notes

When the Deployment Kit is installed and certificates are configured, select Connect using certificate-based authentication when adding the server to your backup infrastructure.

No user name or password are required; authentication is handled automatically using the installed certificates.