View Source

In order to keep the Backup Agent secure, connections are only accepted from specified Backup Managers. To authorize a Backup Manager to backup the Server, you must first add a key of the Backup Manager to the Backup Agent. The Windows Backup Agent Configuration Utility allows users to add an encryption key that allows the Backup Manager to connect to the Windows Backup Agent.

Adding the Backup Manager public key to the Backup Agent means creating a text file on the server (Backup Agent machine). The default directory is {{C:\Program Files\Idera Server Backup\conf\server.allow}}.

!File with Server Public Key on Server_English.png!

Follow the instructions below to add the Manager Public Key to the Backup Agent on your Server using the Windows Backup Agent Utility.

{note:title=Notice}Make sure the Backup Manager is running and the Manager port (default 80) and Backup Agent port (default 1167) are not busy by other applications. See also: [ServerBackup:Restart Backup Manager], [ServerBackup:Configure Backup Manager ports], and [ServerBackup:Configure Backup Agent port]. {note}

1. Run the Windows Backup Agent Utility. Read more in [Launch Windows Backup Agent Configuration Utility].

2. The main window of the Windows Backup Agent Utility will be displayed. Switch over to the "Authorized Server Backup Managers" tab.

!Backup Agent Configuration Utility_Authorized Server Backup Managers_outlined tab_AGENT IS INSTALLED ALONE_English.png!

3. Click on the "Add..." button located on the right to authorize a Backup Manager.

!Backup Agent Configuration Utility_Authorized Server Backup Managers_outlined tab_AGENT IS INSTALLED ALONE_Add button_English.png!

4. The "Add Server Key" dialog will be displayed.

!Add Server Key window_English.png!

5. Enter the following information to inform the Utility how to contact the Backup Manager.
* *Filename* \- Enter Host name that will be shown in the "Installed Keys" list. The file containing Encryption Key will have this name.
{info:title=Note}There is backup configuration setting {{IPAuthentication}} that allows the system to check if the Filename matches IP. If {{IPAuthentication}} is "0," then the "Filename" value can be different from the "Server Backup Manager" value. See [ServerBackup:Change Windows Backup Agent configuration].
{info}

* *Protocol* \- Select "http" or "https" from the drop-down menu.
* *Server Backup Manager* \- Enter the IP address or DNS Host Name that the Backup Manager uses.

!Add Server Key window_Filled out_English.png!

6. Click on the "OK" button.

!Add Server Key window_Filled out_OK button_English.png!

7. Once this information is entered and verified, the backup manager will be contacted to find its Public Key and the IP address that it will use for outbound connections. During this process, the Windows Backup Agent Configuration Utility uses the current Backup Agent port settings.

If you have defined the appropriate Backup Manager properties, the Manager Key will be successfully added to the Backup Agent database and the requests from the Backup Manager will be allowed. The Key name will appear on the "Authorized Server Backup Managers" tab.

!Backup Agent Configuration Utility_Authorized Server Backup Managers_server for authorization added_English.png!
{info:title=Note}After the Server Key is added, requests from the Backup Manager should be accepted.
{info}
{info:title=Note}
During the Key adding the following error message can appear. Eliminate issues connected for example with a firewall permissions and repeat the procedure.
!Failed to get key from server message_English.png!
{info}

See also:
* [Uninstall the key from Windows Backup Agent]
* [View keys added to Windows Backup Agent]
* [Reset the public key]
* [Add key to Linux Backup Agent]

{excerpt:hidden=true}To allow a Backup Manager to connect to your Windows Backup Agent to perform backups, you must first add a Manager Public Key to the Backup Agent. Instructions on how to add the Key to your Backup Agent using the Windows Backup Manager Configuration Utility.{excerpt}