Skip to main content
This section explains how to configure RSA certificates for the TLS connection between Veeam and the KMIP server port on the CryptoHub, as required for this integration.

​
Configure the KMIP connection pair to use RSA certificates

1
Log in to CryptoHub with your administrator identities.
2
Go to Classic Tools > Administration > Configuration Tasks.
3
In the Configuration Tasks view, double-click Network Options.
4
Go to the TLS/SSL Settings tab.
5
In the Connection drop-down menu, select KMIP.
6
Uncheck Use System/Host API SSL Parameters.
7
Change the Cert Type to RSA.
8
Select [ OK ].
9
Confirm the changes by selecting [ OK ].

​
Create a new client endpoint for the Veeam service

1
Go to Services > Deployed Services and select the Veeam Backup & Replication service you deployed.
2
Select Endpoints.
3
Select [ Add New ].
4
Enter “veeam-fx” as the Endpoint Identifier, then select [ Add Endpoint ].
5
Your browser prompts you to download and save a zip file.

​
Use the Client App TLS CA to issue an RSA client certificate for Veeam

1
Go to PKI and CA > Certificate Management.
2
Select the plus (+) icon to expand the “Client App TLS CA” X.509 Certificate Container.
A randomly-generated 10-digit number is appended to the end of the “Client App TLS CA” name.
3
Right-click the CryptoHub [10_digit_number] self-signed CA certificate, and select Add Certificate > New Certificate.
4
Select the Classic preset.
5
Under Subject DN, enter “veeam-fx” as the Common Name for the certificate.
6
Leave set the defaults under Basic Info.
7
Under V3 Extensions, select the TLS Client Certificate profile.
8
Select [ OK ].

​
Enable the option to allow export of certificates using passwords

1
Go to Classic Tools > Administration > Configuration Tasks.
2
In the Configuration Tasks view, double-click Options.
3
Select the “Allow export of certificates using passwords” checkbox.
4
Select [ Save ].
5
Confirm the changes by selecting [ OK ].

​
Export the veeam-fx TLS certificate as a PKCS#12 file

1
Go to PKI and CA > Certificate Management.
2
Select the plus (+) icon to expand the “Client App TLS CA” certificate container.
3
Select the plus (+) icon to expand the CryptoHub [10_digit_number] CA certificate tree.
4
Right-click the “veeam-fx” TLS client certificate we generated and select Export > PKCS#12.
5
Set a password for the PKCS#12 file.
6
Under Export Options, select “Export Selected Certificate”.
7
Select [ Next ].
8
Enter a filename for web transfer, then select [ OK ].
9
The browser should prompt you to download the PKCS#12 file.