How Veeam Data Cloud Vault Works

This section describes interaction of parties involved in integration between Veeam Data Cloud Vault and Veeam Backup & Replication.

How Obtaining Subscription Works

The process of obtaining a Veeam Data Cloud Vault subscription and configuring storage vaults includes the following steps:

The customer obtains Veeam Data Cloud Vault following one of the scenarios described in Obtaining Veeam Data Cloud Vault.
The Veeam Data Cloud Vault subscription appears on the My Account portal. Once the subscription is created, it does not contain storage vaults. The customer needs to create the necessary number of storage vaults in the necessary locations. The customer has 2 options:

Use the My Account portal to create a storage vault in the default location.

For details on how this operation works, see How Storage Vault Configuration Works.

For details on how to perform this task, see Creating Storage Vault.

Use the Veeam Data Cloud Vault customer portal to create a storage vault in a custom location. For details, see Adding Storage Vaults.

How Storage Vault Configuration Works

The process of configuring a storage vault includes the following steps:

The user initiates the process of creating a storage vault on the My Account portal.
The My Account passes the request to Veeam Data Cloud Vault.
Veeam Data Cloud Vault creates a storage account in Microsoft Azure.
The storage vault becomes available on the My Account portal.

How Veeam Backup & Replication Registration Works

The process of registering Veeam Backup & Replication for use with Veeam Data Cloud Vault includes the following steps:

The user initiates the process of Veeam Backup & Replication registration and enters credentials to log in to the My Account portal. For details on how to perform these tasks, see Using with Veeam Backup and Replication, steps 2–3.
Veeam Backup & Replication sends a registration request to the My Account portal. The request includes the ID of the support contract specified in the Veeam Backup & Replication license and the public certificate of the Veeam backup server.
The My Account portal finds in the database the organization to which the user belongs and uses the ID of the support contract to check that the Veeam backup server belongs to this organization.
The Veeam Backup & Replication registration process is completed.

How Assigning Storage to Veeam Backup & Replication Works

The process of assigning a storage vault to Veeam Backup & Replication includes the following steps:

The user initiates the process of connecting Veeam Backup & Replication to the Veeam Data Cloud Vault. This task is performed in Veeam Backup & Replication, at the Account step of the New Object Storage Repository wizard. For details, see Using with Veeam Backup and Replication, step 7.
The My Account portal sends a request that includes the Veeam Backup & Replication installation ID to do the following:

Create a Microsoft Entra application that Veeam Backup & Replication will use to work with Veeam Data Cloud Vault storage in Microsoft Azure.
Assign the required roles and permissions to Microsoft Entra ID application. These roles and permissions define that the application has access to the Veeam Data Cloud Vault storage.

The request is passed to Veeam Data Cloud Vault.
Veeam Data Cloud Vault performs operations requested at the step 2 in Microsoft Azure.
The result of the process becomes available on the My Account portal.
In Veeam Backup & Replication, at the Account step of the New Object Storage Repository wizard, the user clicks the refresh icon, selects the storage vault and proceeds to the next step of the wizard.
Veeam Backup & Replication creates a security certificate and passes this certificate through the My Account portal to Veeam Data Cloud Vault and Microsoft Azure.

When the user runs backup jobs targeted at Veeam Data Cloud Vault, Veeam Backup & Replication communicates with the Veeam Data Cloud Vault storage in Microsoft Azure directly over a secure connection ensured by the security certificate.