by vmNik » Mon Apr 18, 2016 1:21 pm people like this post
Is it possible to view/recover via SQL a password for an ESXi host attached to VBR? A remote host password has been forgotten but has a Veeam system in place there, attached with the ESXi host in question and able to backup, restore, etc. Looking at SQL table [dbo.Credentials] in VBR8, the list of users is shown. Is there a means to get a password from SQL?
by Gostev » Tue Apr 19, 2016 2:32 pm 1 person likes this post
Correct, using the product UI you certainly cannot look up stored passwords.
But the code itself obviously can do this (to be able to actually leverage those credentials), so generally speaking, it is doable. But it is a manual procedure that has to be performed on backup server using some system calls. Our support can do this for you (ask them to ask me if they've never done it before).
by omfk » Mon Feb 13, 2017 7:56 pm people like this post
Unfortunately that is not possible from the UI, however you can contact our support team and ask them to help you.
The answer from the support team was negative: "Unfortunatelly it's not possible to recover passwords from Veeam B&R 9.5. Passwords stored in Veeam are encrypted and it's not possible to recover them."
by signal » Fri Jan 05, 2018 12:33 pm people like this post
From a security perspective, how are the passwords stored? Are they encrypted? I see them in the database, they are not in cleartext, but different passwords share some similar characteristics, so it can't be any form of strong encryption as that would and should produce dissimilar strings.
by Gostev » Sat Jan 06, 2018 2:55 pm people like this post
We do use strong encryption of Microsoft CryptoAPI to encrypt passwords using machine-specific encryption key, which is an industry-standard approach. It basically guarantees that the decryption can only be performed on the specific machine, so there's no need to worry if someone steals the configuration database, or takes a picture of those values, etc. Thanks!