Veeam ONE Reporting Service failed to start due to a missing certificate

Note: The issue appeared in Veeam ONE 13.0.1 P1.

How the problem manifested

The very beginning of the problems was that the data in the Veeam ONE Client stopped being displayed. There were a large number of queries from Veeam ONE hanging on the SQL server, which were visibly overloading it. As the fastest solution, we tried restarting the server. Then the problems described below appeared.

Clients

Veeam ONE Client displayed a message in the top bar: Configuration issue - Veeam ONE Reporting service has failed.

Veeam ONE Web Client showed an error instead of the login screen: Error - Failed to connect to Veeam ONE server.

Services

In the Services manager (Services.msc), it was visible that the Veeam ONE Reporting Service was not running. An attempt to start it manually ended with an error indicating that the service had stopped immediately after starting.

Event Viewer

In the Windows Application log, among numerous errors from the source Veeam.Reporter.CachingService.Service, one key message appeared from Veeam ONE Reporting Service with Event ID 8199. It contained text that was very helpful.

Failed to start Web API server. Cannot find certificate binded to port 2741

Resolving the issue - regenerating the certificate

• After Adding the Veeam ONE Server to a Domain, the Reports List Is Empty

Based on the error, Veeam Support Knowledge Base article 4310 was found. While it addresses a slightly different issue, it is quite similar. It contains information about where the Web API certificate can be managed. The Veeam ONE Settings Utility needs to be used, it can change the configuration of Veeam ONE software components. Strictly speaking, this tool should be used under the guidance of technical support.

Launching Veeam ONE Settings

• launch Veeam ONE Client
• in the main menu (top left corner), select Settings - Server Settings
• switch to the Other tab
• in the Support utility section, click Launch

Web API Certificate

• switch to the Server tab
• at the top, select the Web API Certificate tab
• the Status here showed Certificate is missing from the local machine certificate stores
• the Thumbprint that the certificate should have was also displayed

Generating a new certificate

• click the Generate button
• a message appears stating that a certificate has been issued and asking whether you want to use it, select Yes
• a further message informs you that the settings have been modified and asks whether you want to restart the services to apply the changes, select Yes
• save the settings using the Save button

The service is now running and Veeam ONE is functioning. A new certificate with the Friendly Name Veeam ONE Web API self-signed certificate has appeared in the certificate store at certlm.msc.