Veeam Self Service Portal integration with VMware Cloud Director 10.1
I want to start this post off by saying that I enjoyed getting to attend VeeamOn 2020 virtually this year. One of my favorite sessions was "vCloud Director Use Cases" by Timothy Hudson and Chris Arceneaux. This one really hit home with me. One of the projects we are working on in our cloud environment was enabling the self-service portal in Veeam. I had read where the self-service portal could be integrated with the vCloud Director tenant, but seeing it in this session was all the motivation I needed to get this working. So for that I want to say thanks to Timothy and Chris for a awesome session.
After successfully getting this deployed I wanted to share my experience. It was very exciting to be able to be able to give the control of the backups back to the tenants and free up our time to focus on other projects. Below is the link the the github site to download the Veeam plug-in for vCD. Lots of great documentation here also.
Here is a direct to the vCD plug-in download
First things first
So before getting started lets lay a little ground work. As we get started the post assumes the following.
- You are a VCSP. (Veeam Cloud Solutions Partner)
- You already have VMware Cloud Director 10.1 deployed and working.
- You have both a Veeam Backup and Replication Server and a Veeam Backup Enterprise Manager Server installed and configured to see both vCenter and vCloud Director. NOTE: They do not need to be installed on the same machine.
- Veeam Enterprise Plus licensing installed
Lets check a few things to be sure all is ready.
First log into the Veeam Enterprise Backup Manager and click the configuration icon in the top right
Now on the left side menu click the Backup Server(s) and be sure they are showing up. Next click on the vCenter Server(s) and do the same. Now lets focus on the Self-Service section then on the vCloud tab. Note: These tabs will be pre-configured if the Veeam Backup and Replication Server is configured to backup vCenter and VMware vCloud Director. We will not cover this part of the setup in this post.
Keep in mind, if the Self Service does not show up then the Veeam Enterprise Plus license has not been applied. As you can see from above I have one tenant configured so far. to add more click the Add
As you can see the fields are populated based on vCloud Director and the Repository information imported by the Veeam Backup and Replication Server. Also, based on the backup templates configured we can set the default backup job(s) available to the tenants. Also, we can define the rights we want each tenant to have. So every time a tenant created a new backup they get the pre-defined settings we set. Here is a screen shot of the advanced settings.
From here we need to be sure that IIS is correctly configured on the Veeam Backup Enterprise Manager. If you haven't already, use the link below to download the vCD plugin.
After the download is unzipped, in the directory there will be a powershell script named Set-IIS-Config.ps1, I highly recommend using this script to configure IIS. Open the script in your favorite script editor and got line 13. Next go to the $vcd and enter the FQDN of your vCloud director server between the "" as shown below
Once complete, save the script. Be sure to run this script on the Veeam Backup Enterprise Manager server. As you will notice on the github site, it is very well documented how to do the IIS config manually if you wish. Here is a link to the documentation.
To test the Veeam Self-Service Portal, use the following link https://<VeeamEnterpriseManagerName>:9443/vCloud/<OrgName> log in as the Org Administrator for that tenant.
Now lets move on to the vCloud Director side and complete the configuration.
Log into vCloud Director provider HTML5 site https://<vCD FQDN>/provider
Here is where the documentation on the github site changes. In version 10.1 the menus changed a little. So from here on the top bar of the provider site select the More drop down then Customize Portal.
We should see Manage Plugins. In the center select Upload as shown below.
In the unzipped folder that was downloaded from the github site select the Plugin.zip file. there should be a validation as shown before clicking next
Next select the Scope and the Tenants to Publish to. then validate and Finish
Once the plug-in installs we will need to refresh the screen to be able to see the new plug in. I went back to the default provider site and reload. Once back at the provider site select the More drop down. Now you should see Managed Backups. Select Manage Backups and lets configure the plug-in
The screenshot above will not show this, but all the Tenants in vCloud Director will show up in a list under where the screenshot stops. you will see a Tenant Name, Portal URL and service Account columns. Notice that the Portal URL shows UNSET. Click the SET VEEAM PORTAL button to continue
Here enter the Veeam Backup Enterprise Manager FQDN and click Next then Finish
Once complete you will notice that the Portal URL is now configured for each Tenant and the Service Account should have a check mark. Veeam creates a new user for each tenant named veeam.sa this account has a randomized 30 character password that is generated for each tenant. Also note that this user is created with Org Administrator rights. Lets log into a tenant that was configured and see what the tenant will see. Be sure to log in with a user that has Org Administrator rights. Users with anything less will not have access to the managed backups section.
Once in the tenant go to the More drop down and elect Managed Backups
As you can see, this screen looks exactly like the Veeam Self-Service Portal. Now we will take a quick look around. From here the Tenant will have the permissions we set earlier while configuring the Enterprise manager. The will have the ability to configure a backup job by a pre-defined template, restore a VM, or restore a File on a VM. Here a re few screenshots to show the options;
Well there you have it. Configuration done! Now the tenant can manage their backups inside their vCloud Director tenant. I was very happy to find this integration was possible. Again, thanks to Chris and Timothy for the session. It not too late to register for VeeamON 2020 and watch this and many other sessions. Here is a link to register.
Thanks for reading and I hope this helps get the VSSP working inside your vCloud Director tenants.