Veeam One V9.5 upgrade feedback - SQL Sysadmin & HTTPS

[Jamesdld23]

Hello,

please find below a feedback of our upgrade from Veeam One 9.0.0.2062 to Veeam One 9.5.

Issue 1 :
Used procedure : https://www.veeam.com/pdf/release_notes ... tes_en.pdf ...
In our context the Veeam service account is not sysadmin on the SQL Instance, we followed the upper procedure without changing anything on SQL privileges and we received the below error during the upgrade process :

"Win32 exception occured while executing SQL script ... Error details: The SELECT permission was denied on the object 'sysjobs', databate 'msdb', schema 'dbo'."

After this error the installation could not restart, the installer displayed : "Setup has detected inconsistent configuration: some Veeam ONE components are missing; Remove the installed Veeam ONE components manually and start the setup wizard again."

To solve this issue I did the followings :
1. Restore the VM that is hosting the Veeam One application (through Veeam Backup & Replication of course )
2. Attribute sysadmin privilege on the Veeam One SQL instance
3. Re-start the upgrade
4. When upgrade is done, remove the sysadmin privilege on the Veeam One SQL instance and restart the Veeam One application server.

Would be nice to add in the upgrade procedure this sysadmin trick, I suppose that we will have the same behaviour for Veeam Backup & Replication upgrade.

Issue 2 :
We were already using https connections, the upgrade force the web site to use the local machine https certificate.
To solve this you should re attribute the certiicate through IIS.

Regards,
James

[Vitaliy S.]

Hi James,

Thanks for your feedback, and it is good to know that you're already using https connection by default! Unfortunately, the decision to make a switch to using https for everyone, results in this inconvenience with IIS for those who're already using https.

As to the upgrade procedure and sysadmin role, then I will share it with our QC and documentation teams.

Thanks!

[jevontane]

I'm having the exact same issue but am worried giving the sysadmin role to my Veeam ONE SQL account will break SQL during the upgrade process as this SQL Instance/Server runs multiple other SQL databases for various applications. Are the changes the Veeam ONE upgrade makes to the system databases safe?

[Vitaliy S.]

Veeam ONE doesn't change anything in other databases (including system) and your SQL Server configuration. All the changes that are performed are done to Veeam ONE databases, so yes, it is safe.

[jevontane]

Thanks for the reply. Was just curious as not sure why it needs sysadmin permissions to, quote "object 'sysjobs', databate 'msdb', schema 'dbo'".

[Vitaliy S.]

This is required to create a Veeam ONE maintenance job. MSDB contains methods to create this job, thus this requirement.

[Jamesdld23]

I just got Issue 2 when upgrading from Veeam B&R 9 to 9.5 ... :
We were already using https connections, the upgrade force the web site to use the local machine https certificate.
To solve this you should re attribute the certiicate through IIS.

[Vitaliy S.]

Yes, sorry for that James. The security certificate will be preserved during next upgrades after we've switched to https.

[Vitaliy S.]

To update the topic. Here is the latest edition of permissions required by Veeam ONE service account > Connection to Microsoft SQL Server

[Jamesdld23]

Do you mean that the service account won't need to be sysadmin when performing Veeam ONE upgrade?
If so, it's a really good news

[Vitaliy S.]

Yes, this should no longer be required.