Availability for the Always-On Enterprise
vmNik
Novice
Posts: 6
Liked: never
Joined: Apr 10, 2015 12:14 am
Contact:

Recover ESXi password in Veeam

Post by vmNik » Apr 18, 2016 1:21 pm

Good morning.

Is it possible to view/recover via SQL a password for an ESXi host attached to VBR? A remote host password has been forgotten but has a Veeam system in place there, attached with the ESXi host in question and able to backup, restore, etc. Looking at SQL table [dbo.Credentials] in VBR8, the list of users is shown. Is there a means to get a password from SQL?

Thank you.
VCP5-DCV

vmniels
Veeam Software
Posts: 2023
Liked: 447 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: Recover ESXi password in Veeam

Post by vmniels » Apr 18, 2016 2:21 pm

You can't recover passwords from the database.
VCP-DCV
Veeam Certified Architect (VMCA)
http://foonet.be

Gostev
Veeam Software
Posts: 23107
Liked: 2914 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Recover ESXi password in Veeam

Post by Gostev » Apr 19, 2016 2:32 pm 1 person likes this post

Correct, using the product UI you certainly cannot look up stored passwords.

But the code itself obviously can do this (to be able to actually leverage those credentials), so generally speaking, it is doable. But it is a manual procedure that has to be performed on backup server using some system calls. Our support can do this for you (ask them to ask me if they've never done it before).

omfk
Enthusiast
Posts: 65
Liked: 6 times
Joined: Nov 30, 2016 9:48 pm
Full Name: Frank Knappe
Contact:

[MERGED] Recover password for CIFS share

Post by omfk » Feb 10, 2017 11:23 am

Hello,

is there a way to recover the password which I set for giving B&R for a copy job towards a CIFS share?

BR
Frank

PTide
Veeam Software
Posts: 4412
Liked: 361 times
Joined: May 19, 2015 1:46 pm
Contact:

[MERGED] Re: Recover password for CIFS share

Post by PTide » Feb 10, 2017 11:50 am

Hi,

Unfortunately that is not possible from the UI, however you can contact our support team and ask them to help you.

Thanks

omfk
Enthusiast
Posts: 65
Liked: 6 times
Joined: Nov 30, 2016 9:48 pm
Full Name: Frank Knappe
Contact:

Re: [MERGED] Re: Recover password for CIFS share

Post by omfk » Feb 10, 2017 7:31 pm

Thanks for the reply. I'll give it a try on Monday.

omfk
Enthusiast
Posts: 65
Liked: 6 times
Joined: Nov 30, 2016 9:48 pm
Full Name: Frank Knappe
Contact:

Re: [MERGED] Re: Recover password for CIFS share

Post by omfk » Feb 13, 2017 7:56 pm

PTide wrote:Hi,

Unfortunately that is not possible from the UI, however you can contact our support team and ask them to help you.

Thanks
The answer from the support team was negative:
"Unfortunatelly it's not possible to recover passwords from Veeam B&R 9.5. Passwords stored in Veeam are encrypted and it's not possible to recover them."

Correct or not?

BR
Frank

Gostev
Veeam Software
Posts: 23107
Liked: 2914 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Recover ESXi password in Veeam

Post by Gostev » Feb 13, 2017 8:08 pm

Not correct, but it is possible that they simply misunderstood your inquiry, and thought that you are talking about backup file password (and not ESXi host password).

omfk
Enthusiast
Posts: 65
Liked: 6 times
Joined: Nov 30, 2016 9:48 pm
Full Name: Frank Knappe
Contact:

Re: Recover ESXi password in Veeam

Post by omfk » Feb 14, 2017 7:27 am

I replied to their email with a picture showing the dialog in question. I'll keep you informed.

Veeam Support - Case # 02067079

BR
Frank

omfk
Enthusiast
Posts: 65
Liked: 6 times
Joined: Nov 30, 2016 9:48 pm
Full Name: Frank Knappe
Contact:

Re: Recover ESXi password in Veeam

Post by omfk » Mar 02, 2017 8:13 pm 1 person likes this post

Update:
I had a remote session with Veeam support and using a power shell script it was possible to display the password(s) in question.

Thx again
Frank

peter84
Service Provider
Posts: 1
Liked: never
Joined: Dec 28, 2015 3:27 pm
Full Name: Peter Doesberg
Location: Netherlands

[MERGED] Get ESX password out off veeam

Post by peter84 » Aug 18, 2017 1:05 pm

Hello,

The backup on our ESX host is running fine at this moment. But my colleague forgot to save our esx password in our database.
So is it possible to get the password out of veeam?

DGrinev
Veeam Software
Posts: 1263
Liked: 135 times
Joined: Dec 01, 2016 3:49 pm
Full Name: Dmitry Grinev
Location: St.Petersburg
Contact:

Re: Get ESX password out off veeam

Post by DGrinev » Aug 18, 2017 2:27 pm

Hi Peter and welcome to the community!

You cannot do that yourself using Veeam Backup & Replication UI, however, if you open a support case our team should be able to assist you with this task. Thanks!

signal
Enthusiast
Posts: 58
Liked: 3 times
Joined: Oct 06, 2016 1:19 pm
Contact:

Re: Recover ESXi password in Veeam

Post by signal » Jan 05, 2018 12:33 pm

From a security perspective, how are the passwords stored?
Are they encrypted?
I see them in the database, they are not in cleartext, but different passwords share some similar characteristics, so it can't be any form of strong encryption as that would and should produce dissimilar strings.

Gostev
Veeam Software
Posts: 23107
Liked: 2914 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Recover ESXi password in Veeam

Post by Gostev » Jan 06, 2018 2:55 pm

We do use strong encryption of Microsoft CryptoAPI to encrypt passwords using machine-specific encryption key, which is an industry-standard approach. It basically guarantees that the decryption can only be performed on the specific machine, so there's no need to worry if someone steals the configuration database, or takes a picture of those values, etc. Thanks!

signal
Enthusiast
Posts: 58
Liked: 3 times
Joined: Oct 06, 2016 1:19 pm
Contact:

Re: Recover ESXi password in Veeam

Post by signal » Jan 11, 2018 12:46 pm

Which CSP is used?
Which algorithm and key length is used?

Post Reply

Who is online

Users browsing this forum: Dima P., Giacomo_N, Majestic-12 [Bot] and 77 guests