VMware Cloud Director (VCD) Plug-in

General information

Veeam Plug-in for VMware Cloud Director lets users of VCD organizations access the Veeam Self-Service Backup Portal from within the native VCD UI to provide a seamless customer experience.

The following deployments are supported:

1x VBEM with 1x VBR. VBR connects to multiple VCD environments.
1x VBEM with multiple VBR servers connected. Each VBR server connects to one or multiple VCD environments.
Multi-site VCD with each site having 1x VBEM and 1x VBR. Each VBR only connects to the site-local VCD environment.

When multiple VBR servers are connected to one VBEM, a single VCD environment must only be connected to one VBR server.

MFA and SSO

When VCD users login using the Veeam Self-Service Backup Portal, they can use their VCD credentials. However, if MFA is enabled, the login attempt will fail as this is not supported.

When VCD users login directly to VCD and use the Veeam VCD Plug-in, all VCD authentication methods are supported. This is because VCD completely handles the authentication and the Veeam VCD Plug-in uses the existing session to authenticate to Veeam instead of the user’s credentials.

Security Recommendations

Consider using a Web Application Firewall (WAF) to restrict access to Enterprise Manager (VBEM). VBEM uses one port (9443) to serve multiple web portals, including the administrative portal. The difference between these portals is the URL.

Using a WAF to restrict access to below URL scheme will allow only access to the Veeam Self-Service Backup Portal for VCD:

https://<EnterpriseManagerServer>:<Port>/vcloud/*