Comprehensive data protection for all workloads
Post Reply
Homes32
Enthusiast
Posts: 31
Liked: 15 times
Joined: Oct 29, 2013 6:35 pm
Full Name: Jonathan Holmgren
Contact:

Feature Request: Centralized Credential Store

Post by Homes32 » Jun 15, 2015 8:14 pm

Would love to see a Centralized Credential Store integrated into Enterprise Manager. The option could then be made available in each console to use the central store instead of maintaining separate stores for each console. This could be done automatically when it detects Enterprise Manager (like licensing) or via a checkbox - Use central store....

P.Tide
Product Manager
Posts: 5319
Liked: 468 times
Joined: May 19, 2015 1:46 pm
Contact:

Re: Feature Request: Centralized Credential Store

Post by P.Tide » Jun 16, 2015 10:18 am

Hi Jonathan,

I believe that such a feature sounds a little bit similar to "The Entire Data Center Open All Doors Key".

Just imagine the scale of the disaster you'd face if that "key" was compromised... :shock:

Homes32
Enthusiast
Posts: 31
Liked: 15 times
Joined: Oct 29, 2013 6:35 pm
Full Name: Jonathan Holmgren
Contact:

Re: Feature Request: Centralized Credential Store

Post by Homes32 » Jun 16, 2015 8:44 pm

PTide wrote:Hi Jonathan,

I believe that such a feature sounds a little bit similar to "The Entire Data Center Open All Doors Key".

Just imagine the scale of the disaster you'd face if that "key" was compromised... :shock:
Its no different then what vmware and other enterprise software already does with SSO and credential storage. You are already storing all the credentials veeam uses inside the server console anyway and if you are using multiple consoles (ie. one for backups and backup copy and another at your DR site for replication) you have to maintain each credential store individually. This would give you the option (see my checkbox remark in OP) to manage them from one location and have them flow down to the consoles.

cheers!

P.Tide
Product Manager
Posts: 5319
Liked: 468 times
Joined: May 19, 2015 1:46 pm
Contact:

Re: Feature Request: Centralized Credential Store

Post by P.Tide » Jun 17, 2015 11:43 am

Its no different then what vmware...
Actually I think there is some... Imagine there is a Company-A and Company-B (Company-A's rival)

An access to Company-B's VMware SSO allows Company-A to stop/suspend/move/steal/delete current VMs, data from storages, but that would not be an unrecoverable damage - Company-B still got backups at hand.

An access to, lets say, Veeam Centralized Credential Store may get way more devastating. Company-A would be able to do anything with backups of your VMs and data or change some of your backup jobs so you will have noticed it when it's gonna be too late.

It's not ok to loose your live data, but everything's going to be fine if you have a recent backup, but It's not going to be fine if you get your backup infrastructure compromised, I think.

Homes32
Enthusiast
Posts: 31
Liked: 15 times
Joined: Oct 29, 2013 6:35 pm
Full Name: Jonathan Holmgren
Contact:

Re: Feature Request: Centralized Credential Store

Post by Homes32 » Jun 17, 2015 6:30 pm

Are we on the same page here? I am talking about the stored credentials that the Veeam services use to backup your servers. Not credentials used to login to veeam B&R console or Enterprise manager.

Gostev
SVP, Product Management
Posts: 24950
Liked: 3624 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Feature Request: Centralized Credential Store

Post by Gostev » Jun 17, 2015 11:46 pm

Hi, Jonathan. Your request makes sense to me. Just to clarify (not directly related), but what are the reasons for you using multiple B&R servers? Thanks.

P.Tide
Product Manager
Posts: 5319
Liked: 468 times
Joined: May 19, 2015 1:46 pm
Contact:

Re: Feature Request: Centralized Credential Store

Post by P.Tide » Jun 18, 2015 10:43 am

Homes32 wrote:Are we on the same page here? I am talking about the stored credentials that the Veeam services use to backup your servers. Not credentials used to login to veeam B&R console or Enterprise manager.
My bad, got it wrong, sorry about that.

Well, now I understand.

Thank you.

Homes32
Enthusiast
Posts: 31
Liked: 15 times
Joined: Oct 29, 2013 6:35 pm
Full Name: Jonathan Holmgren
Contact:

Re: Feature Request: Centralized Credential Store

Post by Homes32 » Jun 23, 2015 9:45 pm

Gostev wrote:Hi, Jonathan. Your request makes sense to me. Just to clarify (not directly related), but what are the reasons for you using multiple B&R servers? Thanks.
I have a B&R server at my main site that handles backup to NAS and backup copy to my DR site and another server at my DR site for replication/fail-over.

Post Reply

Who is online

Users browsing this forum: Baidu [Spider], Bing [Bot], kga360, Majestic-12 [Bot] and 42 guests