Failed to connect to Microsoft Azure Plug-in - Unable to load the certificate

[gwyn]

Hello,

after upgrading VBR to 12.3.1.1139 (currently the latest version) we wanted to upgrade the Veeam Backup for Azure appliance which we manage in VBR with all of our installation. However, before even attempting to upgrade, we got this error:



There are some information mentioning re-adding the Azure compute account (however unrelated to this situation) which I tested. (https://helpcenter.veeam.com/rn/veeam_b ... ntegration). I even tried to let Veeam create the App registration directly in Entra ID.

However, Veeam creates the app registration using Secret which worked fine. But I wanted to use certificate for authentication. So within the new Azure compute account (or Entra ID App Registration) I created a self signed certificate the same way we did until now and the I got the error message again.

I believe there are some changes regarding the requirements for the certificate. On the VBR the certificate is imported in Local Computer personal store and Trusted Root as well. Did try to restart the VBR server. This has nothing to do with the appliance itself since because of this error I am not even able to add it back after removing it from the infrastructure.

There is an opened support case #07660031 already pending further investigation.

Anybode else having this issue and was able to resolve it? Or maybe there is some KB/Link mentioning the certificate change?

Thank you

[lyudmila.ezerskaya]

Hi!
This issue may occur due to a certificate misconfiguration, which prevents Veeam Backup & Replication from communicating with the plugin.

Please proceed with the investigation together with the support team.

[gwyn]

Hello,

just an update on the issue:

"It appears that the issue is related to Veeam Backup & Replication (VBR) version 12.3.1, where adding or upgrading the appliance is failing with Certificate as the Authentication method. I have reported this to our ATS team, and we are currently investigating it on our end."

At the moment, use secret for the authentication.

[lyudmila.ezerskaya]

Thank you for the update.

[gwyn]

Hello,

this issue was fixed by RND team which provided an updated version of the Microsoft Azure plug-in - version 12.8.0.297.

Either it will be released through the download page soem day (?) or you can reference the case ID if you encounter this issue.

Thanks

[nielsengelen]

Hi,

Thanks for sharing the update. If anyone runs into this issue, please open a support case.

We'll look into adding this to into a future update/patch.

[antonskd]

Hello,
it seems to be we met the same problem.

Recentely we updaded the Veeam B&R to build version 12.3.2.3617. Together with main build , MS Azure Plug-in was upgraded form 12.7.1.18 to 12.8.0.293. since then, we have the same problem as was described in the beginning of this thread - we are failing to connect the Veeam appliance for MS Azure with certificate-based authentication. We had to fallback on the Password authentication, which is not prefferrable option for us.

We tried to re-install the old version of the plugin, but it seems that there is no backward compatibility.
Have anyone expirienced the same problem with the new version of the plug-in?
how can we download the newest Microsoft Azure plug-in - version 12.8.0.297 ?

[nielsengelen]

Hi,

You can download 12.8.0.293 from this link and if required, update the appliance using the built-in updater.

If you still face issues, then please open a support case for assistance.

[gwyn]

Hello,

I just wanted to update that the recently released version of Veeam still lacks the working plugin (12.8.0.297). Furthermore, if you have this plugin installed (version 12.8.0.297), you cannot update Veeam Backup & Replication. It will fail because of this fix. You need to uninstall this version of plugin, update Veeam, uninstall the broken version and install the 12.8.0.297 plugin.

It would be great to submit KB for this. Authentication using secret to Azure is really not secure. Especially in this case.

That is all
Thank you