Prerequisites

Install the ARTESCA Root Certificate Authority (CA) before configuring your partner application.

Refer to the Application Feature Compatibilities for more information on supported versions and features for each application.

Install ARTESCA Root Certificate Authority

Installing ARTESCA’s root CA on the host computer prevents interruptions to application operations when leaf certificates automatically renew.

The certificate must be installed on the server that hosts the application.

Application

Component

Veeam

  • Veeam Backup & Replication backup server, Veeam 365 backup server.

  • Backup proxies servers for Veeam Backup & Replication, Veeam 365, and Kasten.

  • Gateway servers if Veeam agents are connected to ARTESCA via gateway mode.

  • Veeam agents (Linux/Windows/OSx) when direct mode is used.

Commvault

  • Commvault server

  • Media agent

Other

Any application component that directly connects to ARTESCA

Download the Certificate

  1. Click the username in the top right-hand corner of the ARTESCA UI and select Certificates from the drop-down list.

    Note

    The username in the following image is Holly Day.

    The list of certificates is displayed.

  2. Click Download on the top right under Artesca-CA Root Certificate.

Import the Certificate

Refer to the procedure matching your operating system.

Import the Certificate to Windows

You can import the certificate using either the UI or CLI method.

  1. Log in to the Windows machine as a system administrator.

  2. Click Start > Run, type mmc, and then press enter.

  3. On the File menu, click Add/Remove Snap-in….

  4. Select Certificates, and click Add.

  5. Select Computer Account, click Next, and then Finish.

  6. Click Ok.

  7. Double click Certificates (Local Computer), select Trusted Root Certification Authorities.

  8. Right click Certificates, select Import from the All Tasks menu.

    This opens up the Certificate Import Wizard, click Next.

  9. Select the file artesca-ca.pem in the file browser, and click Next.

    Tip

    Select All files from the file extension dropdown to see artesca-ca.pem file.

  10. Select Place all certificates in the following store.

  11. In the Certificate store window, choose Trusted Root Certification Authorities.

  12. Click Next.

  13. Click Next, then Finish.

    A prompt will appear showing that the certificate import was successful. Artesca-CA is displayed under the list of certificates.

The following example assumes that ARTESCA root CA certificate is downloaded to the C:\Users\Administrator\Downloads folder.

Import-Certificate `
-FilePath "C:\Users\Administrator\Downloads\artesca-ca.pem" `
-CertStoreLocation Cert:\LocalMachine\Root
Import the Certificate to Linux

You can import the certificate using either CentOS/RHEL/Rocky or Ubuntu/Debian.

  1. Copy Artesca-CA Root Certificate to /etc/pki/ca-trust/source/anchors/.

    sudo cp artesca-ca.pem /etc/pki/ca-trust/source/anchors/

  2. Update the certificate store.

    sudo update-ca-trust

  1. Copy Artesca-CA Root Certificate to /usr/local/share/ca-certificates/.

    sudo cp artesca-ca.pem /usr/local/share/ca-certificates/

  2. Update the certificate store.

    sudo update-ca-certificates

Application Feature Compatibilities

Use this table to identify which versions and options are available for each application.

Application

Application Version

Application Options

Bucket Object Lock

Bucket Versioning

Lifecycle Expiration

Veeam Backup and Replication

11 [1], and 12.0 and later

Immutability enabled

yes

yes

no

9.3 and later

No immutability

no

no

no

Veeam Backup for Microsoft 365

6.0

Non-immutable copy, or primary target

no

no

no

7.0

Immutable copy

yes

yes

no

Commvault

< 11.26

WORM enabled

yes

yes

Contact Commvault support [2]

11.26 and later

WORM enabled

yes

yes

no

10.00 and later

Standard, no WORM

no

no

no

Footnotes: