M365 SecureStore - Setup Veeam Explorers

This is for configuring your Veeam Backup & Replication (VBR) server so you can use the Veeam Explorers to restore Exchange, Sharepoint, Teams and OneDrive data more flexibly from our hosted solution.

Steps to setup the Veeam Explorers:

• On your VBR server, open the VBR Console application
• Go to Backup Infrastructure section, Service Providers sub-section
• Click the Add Provider button
  • In the DNS Name or IP Address field, enter dpsgw-akl.vgrid.nz
  • Leave the port as default
  • Leave the Allow service provider management unticked
  • Click Next
• Credentials will be:
  • Username: username sent to you
  • Password: password sent to you (unless you have changed this)
• Click Next
• Your firewall must allow outbound connections on TCP port 6180 to the DNS entry above
• Assuming this connects successfully, review the summary, click Finish
• You should now see a Service Provider entry for our platform

Steps for connecting Veeam Explorer applications (process is the same for Teams, Exchange, Sharepoint or OneDrive):

Adding Service Provider

• Open the respective Veeam Explorer application
• Click the Add Org button
• Select Veeam Backup for Microsoft 365 Service Provider
• Ensure the following are selected in the dropdowns:
  • Service Provider is dpsgw-akl.vgrid.nz
  • Modern Authentication
  • Default
• Specify point in time (at very bottom of the page) allows you to select a restore point for this session

Authenticating

• You will see a web link and a code
• Click Copy code
• Click the web link to open it in a web browser
• You will be prompted to enter code. Paste the code, click Next
• Enter an Entra ID (this is a user account with suitable permissions for restoring the resources in question, usually a Global Admin)
• Click Continue to confirm you want to sign into Microsoft Azure CLI
• After sign-in is successful, return to the Veeam Explorer application to continue

Continuing at Veeam Explorer application

• The Waiting for user login... section should have changed to You are authenticated for Microsoft 365 (with username you authenticated with)
• It will be possible to click Connect button to attach the explorer
  • You may get certificate errors at this point as we use self-signed certificates for the internal aspects of our M365 solution
  • This is normal and you can chose to always accept these (or accept them each time)
• Complete your recovery tasks
• Close the Veeam Explorer application when finished

Note that you will need to have completed a backup before any recovery points will be available.