Using Veeam Deployment Kit

The Veeam Deployment Kit is a package that enables certificate-based authentication for the backup infrastructure configuration. When the Deployment Kit is installed on a target server, Veeam Backup & Replication can authenticate using certificates instead of traditional user name and password credentials. The Deployment Kit can be used to connect to remote Microsoft Windows servers and to Veeam Agent computers that you plan to add to a protection group.

Deployment Kit Usage Scenarios

Use the Deployment Kit in the following scenarios:

Kerberos is disabled or unavailable

Use the Deployment Kit if your environment does not support NTLM or Kerberos authentication.

Enhanced security

Certificate-based authentication offers a more secure alternative to user name and password authentication.

Passwordless authentication

When the Deployment Kit is installed and configured on the target server, Veeam Backup & Replication connects using certificates. No user name or password are required for authentication.

Deployment Kit Availability

Pre-installed by default:

The Deployment Kit is pre-installed with all JeOS (Just enough Operating System) infrastructure components. If you deploy a JeOS-based Veeam component, you only need to pair it with Veeam Backup & Replication. No additional installation is required.

Manual installation required:

For the following components, you must manually install the Deployment Kit:

Microsoft Windows managed servers
Hyper-V hosts
Microsoft Windows-based and Linux-based Veeam Agent computers
Guest Interaction proxies

How to Use the Veeam Deployment Kit

Create the Veeam Deployment Kit:

Open the Backup Infrastructure view.
In the inventory pane, right-click the Managed Servers node and select Create Veeam deployment kit. Alternatively, you can click Create Veeam Deployment Kit on the ribbon.
Specify the path where you can export the Veeam Deployment Kit and click OK.

Prepare for installation:

The Deployment Kit typically includes:

Necessary binaries and supporting files
Authentication certificates
A sample service configuration script (InstallDeploymentKit.BAT) for automated installation

[For Microsoft Windows managed servers] Install the Deployment Kit on the target remote host:

Automated installation (recommended):

Copy the entire Deployment Kit folder to the target remote host.
Run the provided InstallDeploymentKit.BAT script to automatically install the kit and configure all required components.

Manual installation:

Obtain the Deployment Kit files from the Windows subfolder on your Veeam Backup & Replication console and copy them to the target remote host.
Install the OpenSSL package and the Veeam Installer service package on the target server.
Copy the certificates from the Deployment Kit folder to the remote host.
Install the certificates by running:

C:\Windows\Veeam\Backup\VeeamDeploymentSvc.exe --install-server-certificate /path/to/server-cert.pem --key /path/to/server-key.pem

C:\Windows\Veeam\Backup\VeeamDeploymentSvc.exe --install-certificate /path/to/client-cert.pem

Restart the Veeam Installer service (VeeamDeploySvc) to apply the changes.

[For Veeam Agent computers] Follow the instructions provided in Deploying Veeam Agent Using Veeam Deployment Kit.

Usage Notes

When the Deployment Kit is installed and certificates are configured, select Connect using certificate-based authentication when adding the server to your backup infrastructure.

No user name or password are required; authentication is handled automatically using the installed certificates.