Feature Request - Client Certificates with Cloud Connect

[bernd.dausch]

Hello Veeam Team,

can you integrate the mandatory use of Client Certificates for Cloud Connect Connections?

Then every Cloud Connect Customer needs a "second Factor" to Access his Backup Repository,
and we as Service Provider can ensure that only Customers with a valid Cloud certificate
can make TLS Connections to our Gateway.

Best Regards,

Bernd

[veremin]

It's not planned for the nearest future, since such functionality is likely to complicate tenant's experience.

But what about using encryption? In this case, as someone having tenant's credentials tries to get a content of backup files, he won't be able to do so without knowing a corresponding password.

Thanks.

[Gostev]

Encryption does not protect backups from deletion.

[dellock6]

Hi Bernd,
the idea may be interesting, but I see two concerns:
- creation: who should create these certificates? VBR itself? And what CA would sign them?
- delivery: properly passing the client certificate to each tenant would require an alternative channel to be completed, otherwise the possibilities to compromise the client certificate would be too high. how would you plan to pass these certificates to tenants?

Luca

[bernd.dausch]

Hi Luca,

I see this as a security option and a own Certificate Infrastructure is necessary, and not need for VBR to create certificates.

At the Moment we deliver Client Certificates in one of this ways:

- Password Protected PKCS12 - File with a Secure Password
- HardwareToken (Aladdin eToken)

Bernd