Challenge
When attempting to add Quantum DXi storage with firmware 3.x to Veeam Backup & Replication, the following error is shown:
Failed to StartAgent: Failed to construct ClientAgentProtocol.
If the Quantum DXi storage was added to Veeam Backup & Replication prior to upgrading to Veeam Backup & Replication 12 or newer, after the upgrade, the storage will be listed as unavailable.
Cause
Veeam Backup & Replication cannot connect to the Quantum DXi storage because a secured TLS communication channel cannot be created.
Starting in Veeam Backup & Replication 12, communication with deduplicating storage appliances is secured using a TLS connection. In order to create such a TLS connection, urandom, random, and srandom are required, and Quantum DXi firmware version 3.x does not include these utilities.
Solution
Upgrade Quantum DXi device to firmware version 4.x or newer (if available for model).
More Information
Workaround
The following registry value can be created on the Veeam Backup Server to force Veeam Backup & Replication to connect to the storage device without using a secure TLS connection.
Key Location: HKLM\SOFTWARE\Veeam\Veeam Backup and Replication\Value Name: TlsIncompatibleHostIpsValue Type: String Value (REG_SZ)Value Data: <IPs of Quantum devices, separated by commas>
Note:
The TlsIncompatibleHostIps registry value does not function as a workaround for:
transaction log backup jobs (i.e., MSSQL, Oracle, or PostgreSQL).
Enterprise Database Plug-In Jobs
Veeam Plugin for Oracle RMAN
Veeam Plugin for SAP HANA
Veeam Plugin for SAP on Oracle
Veeam Plugin for DB2
Veeam Plugin for MS SQL
The TlsIncompatibleHostIps registry value can be used to bypass the TLS requirement for all older Linux hosts, Quantum, Fujitsu, and Infinidat storage.