Securing Veeam ONE Reporter and Business View Websites

To protect sensitive user data, you can configure SSL communication between the Veeam ONE Reporter and Business View websites, and the client web browser.

To configure SSL communication, perform the following steps.

Step 1. Obtain and Install a Valid Certificate

Obtain a valid SSL certificate and install it on the machine that hosts the Veeam ONE Web UI component.

You can obtain an SSL certificate from a Certificate Authority or generate a self-signed SSL certificate. If you choose to generate a self-signed certificate, make sure that you specify a custom subject alternative name (SAN). As a result, you will be able to enter both a FDQN and a short hostname in the certificate, and use them when accessing the Veeam ONE Reporter and Business View URLs in your browser.

For details on setting up SSL certificates on IIS, see this Microsoft KB article.

Step 2. Disable the Default IIS Website

To disable the default unsecure HTTP binding:

1. Log on to the machine where the Veeam ONE Web UI component is installed.
2. Open the Internet Information Services (IIS) Manager, expand the localhost node and navigate to Sites.
3. In the Connections pane, select Default Web Site.
4. In the Manage Website section on the right, click Stop.

Step 3. Assign the Certificate to Veeam ONE Websites

To assign the certificate to the Veeam ONE Reporter website:

1. Log on to the machine where the Veeam ONE Web UI component is installed.
2. Open the Internet Information Services (IIS) Manager, expand the localhost node and navigate to Sites.
3. In the Connections pane, select VeeamReporter.
4. In the Edit Site section on the right, click Bindings.
5. In the Site Bindings window, click Add.
6. Configure a new binding:

1. From the Type list, select https.
2. From the IP address list, select All Unassigned.
3. From the SSL certificate list, select the necessary certificate.
4. Click OK.

7. In the Site Bindings window, select the default HTTP binding and click Remove.
8. Select the new HTTPS binding and click Edit.
9. Change the value in the Port field to 1239 (or another value if you changed the port number during installation).
10. Click OK.

To assign the certificate to the Veeam ONE Business View website:

1. Log on to the machine where the Veeam ONE Web UI component is installed.
2. Open the Internet Information Services (IIS) Manager, expand the localhost node and navigate to Sites.
3. In the Connections pane, select VeeamBusinessView.
4. In the Edit Site section on the right, click Bindings.
5. In the Site Bindings window, click Add.
6. Configure a new binding:

1. From the Type list, select https.
2. From the IP address list, select All Unassigned.
3. From the SSL certificate list, select the necessary certificate.
4. Click OK.

7. In the Site Bindings window, select the default HTTP binding and click Remove.
8. Select the new HTTPS binding and click Edit.
9. Change the value in the Port field to 1340 (or another value if you changed the port number during installation).
10. Click OK.

Step 4. Change Veeam ONE Reporter URL in Veeam ONE Monitor Settings

You must change Veeam ONE Reporter website URL in Veeam ONE Monitor settings. Otherwise, you will not be able to generate Veeam ONE reports from the Veeam ONE Monitor console.

1. Open the Veeam ONE Monitor console.
2. Navigate to Options > Server Settings.
3. In the Server Settings window, open the Other Settings tab.
4. On the Other Settings tab, click Launch in the Support utility section.
5. In the Veeam ONE Settings window, switch to Reporter > Website Settings.
6. In the Website address field, replace the http part of the address with https.

7. Click Save, click Close and then click OK.
8. Close the Veeam ONE Monitor console.
9. Open the Veeam ONE Monitor console again and make sure that you can access Veeam ONE reports by selecting a report from the Reports menu.

Step 5. Create New Veeam ONE Reporter and Veeam ONE Business View Shortcuts

The Veeam ONE Reporter and Veeam ONE Business View icons in the Start menu and on the desktop cannot be modified to use HTTPS. This means that after you perform the steps described above, the icons will stop working.

You will need to add your own shortcuts with HTTPS URLs. Create browser shortcuts on the desktop and specify the following locations for them:

• Veeam ONE Reporter: https://webserver.domain.tld:1239
• Veeam ONE Business View: https://webserver.domain.tld:1340

Accessing Secured Veeam ONE Websites

To access Veeam ONE Reporter and Veeam ONE Business View, browse to:

• Veeam ONE Reporter: https://webserver.domain.tld:1239
• Veeam ONE Business View: https://webserver.domain.tld:1340