The Veeam Backup and Replication (VBR) Console is a client-side component that provides access to the backup server. In this article, we shall discuss the steps on how to install Veeam Backup Console on a Jump Server or any Admin workstation (PC). The VBR Console enables users to manage data protection and disaster recovery (DR) operations directly on the backup server. Please see how to get MBAM BitLocker Recovery Keys from Microsoft SQL Server, how to prevent Microsoft Teams from starting automatically on Windows, and Veeam Backup Deployment options for Microsoft 365 Data.
By default, the Veeam Backup & Replication console is installed on the backup server automatically when you install Veeam Backup & Replication. You do not need to install the console manually. By running on a JUMP Server or on a privileged workstation, it isolates users from direct access to backup infrastructure components and the Veeam database.
However, keeping the console on the backup server is recommended because restoring a configuration backup is not possible from a console installed on a client device (Jump server), as shown below. More of these limitations will be discussed at the end of this article
Please see What are the Differences between UEFI and BIOS, How to update the BIOS on your Dell system, how to Prevent OS Reinstallation: Change from legacy BIOS to UEFI, and Fix for security vulnerabilities in the BIOS firmware for some Intel Processors.
Drawbacks connecting directly to the Backup Server
Connecting directly to the backup server has several drawbacks, and it follows the same principle as not connecting to Domain Controllers directly. Instead of initiating an RDP session to the backup server, administrators can use the Veeam Backup & Replication console on their workstations, much like managing Active Directory with Microsoft RSAT tools.
RDP connections to the backup server are limited to two concurrent users, preventing a third connection due to Windows RDP restrictions. By installing the Veeam console on a workstation, administrators can bypass this limitation, enabling multiple users to manage backups without consuming RDP sessions.
This approach ensures seamless access while maintaining security and efficiency, as if working directly on the Veeam Backup & Replication server.
For best practices, some security frameworks recommend limiting direct access to critical infrastructure.
You can install as many remote consoles as you need so that multiple users can access Veeam Backup & Replication simultaneously. Veeam Backup & Replication prevents concurrent modifications on the backup server. If several users are working with Veeam Backup & Replication at the same time, the user who saves the changes first has the priority. Other users will be prompted to reload the wizard or window to get the most recent information about the changes in the configuration database.
Please see how to Set up Veeam Backup for Microsoft Azure, how to add or remove email addresses from a mailbox, and how to change the default start page for File Explorer on Windows 11.
Veeam Backup and Replication Console Installation Prerequisites
To proceed with the installation. Kindly ensure that the Veeam Backup & Replication console is on the same version as Veeam Backup & Replication installed on the backup server. Otherwise, perform an upgrade to version 12.3, as it is in my case.
But if you have multiple VBR with different versions running in your environment, then you would need another separate console for connecting to the backup server.
Also, ensure your device meets the system requirements, and that the user account used for installation must have sufficient permissions. Please ensure the following ports are open for adequate communication with the backup components.
The workstation must be able to communicate with the VBR server and backup repositories.
Please see how to mitigate Veeam Threat Hunter Service Scanning Interference, how to Get MBAM BitLocker Recovery Keys from Microsoft SQL Server, and how to Fix Error 1069: Windows could not start the Veeam backup service on local computer.
Veeam Backup and Replication Console Installation
In this section, we shall be installing the Veeam Backup and Replication console in a standalone mode. You can install the console on any workstation (PC) and access Veeam Backup & Replication remotely over the network.
Download the Veeam Backup & Replication latest ISO image from the following “Veeam Product Downloads page“. Upon download, mount the installation image as shown below.
Next, run the setup file as shown below by double-clicking on it.
Click Yes on the UAC window
On the Splash screen, click on Install as shown below.
Select the second option to install Veeam Backup and Replication 12.3. This option will give you the opportunity to install the console.
Select the “Install Veeam Backup and Console” component as shown below.
Please read and agree to the license terms by clicking on “I Accept”.
Next, the setup wizard will perform some system configuration checks if the required software is installed on the device.
System Configuration Check
Note: If some of the required components are missing, the setup will try to install them automatically. After the components are successfully installed, a reboot is required. To reboot the machine, click Reboot. If the setup wizard cannot install some of the required software components automatically, install them manually and click Retry. But this was not the case in this guide.
I am fine with the default installation folder. If you are not, then click on the customise settings. To proceed with the installation, click on “Install”.
As you can see, the Veeam Backup and Replication console installation is in progress.
In the second step, Veeam Explorers are installed.
In the third step of the installation, the Plug-ins for VBR are installed.
At the last step, it finalises the installation and starts the services.
As you can see, the console is successfully installed, and this describes the steps on how to install Veeam Backup Console on a Jump Server.
Connecting to the Veeam Backup and Replication Server Remotely
The Veeam Backup & Replication console connects to the backup server using the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO), which leverages Microsoft’s built-in Windows authentication. SPNEGO supports both Kerberos and NTLM authentication.
Note: Enabling NTLM increases the attack surface of your backup infrastructure. To enhance security, disable NTLM and enforce Kerberos as the sole domain authentication protocol.
To connect to the backup server, launch the console shortcut on yur desktop and populate the credentials field as required and click on connect.
Unfortunately, we are presented with an error, as shown above. Ensure you upgrade your VBR server to the stated version as displayed in the image below. To ensure fast logon, click on Save Shortcut for convenience.
Fast logon shortcut saved to Desktop.
The VBR Console is being launched
Please see Upgrade Veeam Backup and Replication to version 12.2, how to Fix missing path and delete a Veeam Backup Repository, and how to Migrate Veeam Configuration Database to PostgreSQL Server.
Remote Console Limitations
During a recent discussion at the Veeam Summit in Berlin, someone suggested stripping the console from the backup server. Also, in one of the recaps, I overheard Rick saying he would suggest the console to be stripped off VBR. All these birthed this article. While this is a great idea, it raises several concerns that need to be addressed. But there is also a solution to this:
- Configuration Backup Restoration: The remote console cannot restore from a configuration backup directly to the backup server, as discussed above. I also noticed that even after adding the workstation as a managed server, this was still not possible.
- Managed Server Integration: Machines running the remote console are not automatically added to the list of managed servers. As a result:
- You cannot import backup files that reside on a remote console machine. Therefore, if you must perform actual import, it makes sense to be on the backup server to perform this tasks.
- You cannot assign backup infrastructure roles (e.g., repository server, proxy server) to the remote console machine.
Note: To perform these operations, you must add the remote console machine as a managed server to Veeam Backup & Replication.
Also, see how to Backup Mac with Veeam Agent for Mac to Synology DS923+ NAS, how to Harden your Veeam Backup Server with Microsoft AppLocker, and how to Install Splunk and Veeam App on Windows Server to monitor VBR.
FAQs
The remote console maintains the session for 5 minutes if the connection is lost, ensuring minimal disruption for users. If the connection is re-established within this period, users can continue working without needing to log in again.
The console supports automatic updates. Every time you connect to the backup server locally or remotely, the console checks for updates. If the backup server has updates installed, the console will be updated automatically.
Downgrade of the console is not supported. If the console is of a higher version than the backup server (for example, you have upgraded the console manually), the connection to the server will fail.
I hope you found this article very useful on how to install Veeam Backup Console on a Jump Server. Please feel free to leave a comment below.
The post How to install Veeam Backup Console on a Jump Server appeared first on TechDirectArchive.