Case #08225281. It's a P2 (I wish I could change it to P1), and the support team says they have no recovery procedure and will return to us with a reply in a week (in the meantime, a week has already passed and still no solution - other than reinstalling)!
I was wondering if any of you had issues with booting the VSA appliance after SAML configuration.
We've recently migrated from VBR on Windows to the VSA, and are facing this issue after a reboot. Everything was working fine.
Basically, Veeam Backup service fails to start due to inability to access Identity service:
Code: Select all
[15.09.2026 13:33:49.595] <22> Error (1) Failed to connect to identity service at 'http://localhost:9299/'
[15.09.2026 13:33:49.597] <01> Error (1) CVbServiceImpl failed to create.
[15.09.2026 13:33:49.597] <01> Error (1) Failed to connect to identity service (http://localhost:9299/) - InternalServerError. (Veeam.Backup.Identity.Client.IdentityConnectionException)Code: Select all
[15.09.2026 13:44:59.633] <11> Error (1) Could not configure Service Provider certificate
[15.09.2026 13:44:59.633] <11> Error (1) Certificate D1E93AB76DE3EF4D0756248D7B29D0FFF5FAAD71 doesn't contain a private key. (System.InvalidOperationException)
[15.09.2026 13:44:59.633] <11> Error (1) at Veeam.Backup.Certificates.X509PublicOrPrivateCertificate.ToPrivate()
[15.09.2026 13:44:59.633] <11> Error (1) at Veeam.Backup.IdentityService.Saml2ConfigurationHelper.ConfigureServiceProviderCertificate(SPOptions spOptions, CIdentityProviderOptionsInfo idpAndSpOptions, ICertificatesDbScope certificatesDbScope)
[15.09.2026 13:44:59.636] <11> Error (1) Microsoft.AspNetCore.Server.Kestrel Connection id "0HNOJ4SJH77E5", Request id "0HNOJ4SJH77E5:00000001": An unhandled exception was thrown by the application.
[15.09.2026 13:44:59.636] <11> Error (1) System.InvalidOperationException: Certificate D1E93AB76DE3EF4D0756248D7B29D0FFF5FAAD71 doesn't contain a private key.
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.Certificates.X509PublicOrPrivateCertificate.ToPrivate()
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.IdentityService.Saml2ConfigurationHelper.ConfigureServiceProviderCertificate(SPOptions spOptions, CIdentityProviderOptionsInfo idpAndSpOptions, ICertificatesDbScope certificatesDbScope)
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.IdentityService.Saml2ConfigurationHelper.<>c__DisplayClass0_0.<AddVbrSaml2Authentication>b__0(SPOptions spOptions, IdentityProviderDictionary _, Saml2Notifications notifications)
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.Identity.Server.OAuthServiceBuilder.<>c__DisplayClass26_0`1.<UseSaml2Authentication>b__2(Saml2Options samlOptions)
[15.09.2026 13:44:59.636] <11> Error (1) at Microsoft.Extensions.Options.OptionsFactory`1.Create(String name)
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.Identity.Server.Saml2HandlerWrapper.<>c__DisplayClass13_0.<InitializeAsync>b__0()
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.IdentityService.AutoUpdateSaml2OptionsCache.GetOrAdd(String name, Func`1 createOptions)
[15.09.2026 13:44:59.636] <11> Error (1) at Veeam.Backup.Identity.Server.Saml2HandlerWrapper.InitializeAsync(AuthenticationScheme scheme, HttpContext context)
[15.09.2026 13:44:59.636] <11> Error (1) at Microsoft.AspNetCore.Authentication.AuthenticationHandlerProvider.GetHandlerAsync(HttpContext context, String authenticationScheme)
[15.09.2026 13:44:59.636] <11> Error (1) at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
[15.09.2026 13:44:59.636] <11> Error (1) at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.ProcessRequests[TContext](IHttpApplication`1 application)