Deploying Veeam Components for Certificate-Based Authentication

You have an option to install Veeam components on ODB servers using certificate-based authentication instead of credentials. To do so, you must install Veeam Deployer Service on the ODB server and then add the server to a protection group for InterSystems IRIS instances. In this case, Veeam Backup & Replication does not require an SSH connection to install Veeam components.

To deploy Veeam components using Veeam Deployment Kit, perform the following steps:

1. On the Veeam Backup & Replication side, create and export Veeam Deployment Kit. You can do that in the following ways:

• Using PowerShell:

1. Start a Veeam PowerShell session. For more information, see the Running Veeam Backup PowerShell Sessions section in the Veeam PowerShell Reference.
2. Run the Generate-VBRBackupServerDeployerKit cmdlet to generate the Veeam Deployer Service temporary certificates and Veeam Deployer Service installation packages. To learn more, see the Generate-VBRBackupServerDeployerKit section in the Veeam PowerShell Reference.

• Using Veeam Backup & Replication console:

1. Open the Inventory view.
2. Click the Physical and Cloud Infrastructure node in the inventory pane and click Create Veeam Deployment Kit on the ribbon. Alternatively, right-click the Physical and Cloud Infrastructure node in the inventory pane and select Create Veeam deployment kit.
3. In the Create Deployment Kit window, specify a path to the folder to which Veeam Backup & Replication will export the deployment kit files.

2. Upload the exported files to the ODB server that hosts the InterSystems IRIS instance that you want to protect.
3. On the ODB server side, install the uploaded files. You can do this in one of the following ways:

• Automatically, using a script provided with the installation files. To use this deployment option, navigate to the directory where you have saved the files on the ODB server and run the install-deployment-kit.sh script

• Manually, using a package manager:

1. Navigate to the directory where you have saved the files on the ODB server and install the Veeam Deployer Service and OpenSSL packages that suit the OS running on the ODB server.
2. Run the following commands to install the certificate and restart Veeam Deployer Service:

4. On the Veeam Backup & Replication side, create a protection group with the following parameters:

1. When launching the New Protection Group wizard, select Applications > InterSystems IRIS. For details, see Step 1. Launch New Protection Group Wizard.
2. At the Step 3. Specify ODB Servers step of the wizard, specify an ODB server and select the Connect using certificate-based authentication method to connect to the server. For details, see Step 3. Specify ODB Servers.

After you create the protection group, Veeam Backup & Replication will rescan the protection group. During the rescan operation, Veeam Backup & Replication will connect to the Veeam Deployer Service and install the Veeam Transport Service and the InterSystems IRIS plug-in. To learn more, see Rescan Job.

Related Topics

• Protection Group for InterSystems IRIS Instances
• Creating Protection Group for InterSystems IRIS Instances