Veeam Deployment Kit certificate lifetime

[MaartenA]

Hi,

We have Case #07921903 open because the AAP is not working with persistent guest agent when only installing the Veeaminstaller Service (like it was in V12) from the MSI that is on the V13 Windows installation ISO (we use the appliance)
After reading https://helpcenter.veeam.com/docs/vbr/u ... tml?ver=13 again it seems the certificate needed for AAP to work comes via this Deployment KIT.

I am wondering what will happen when this certificate will expire because it is only valid for one year. Will Veeam auto-renew this certificate or do we need to mass deploy this Kit / certificates again to all systems?

[david.domask]

Hi MaartenA,

The temporary certificate included with the Deployment kit should be replaced on the first backup that uses AAIP with the persistent guest agent option enabled in the job -- I just checked on one of my VMs and the replacement certificate is valid for 10 years -- are you seeing differently for your machines?

Basically, the initial certificate installed with the Deployment Kit is not meant to be permanent, it should be replaced as soon as a backup job with AAIP + Persistent Agent option is run or once one of the other uses for Deployment Kits are utilized (e.g., Agent deployment)

[MaartenA]

A great, yes i see a new certificate getting placed indd. thanks
FYI. i think support is not fully aware of this new requirement.

[david.domask]

Glad to assist.

I will work with our TechWriters to update the existing User Guide with more information on the handling of the temporary / permanent certificates, and also reached out to Support to share the information.

Thanks for bringing this gap in documentation to our attention.

[david.domask]

To close out this topic, we've updated the Persistent Agent User Guide page with more details on the deployment kit certificate handling.

Thanks again Maarten for the questions