Required Package Changes in Solaris 10 and 11.3
Challenge
- Solaris 10 does not include the CA certificates required for S3 repository connections, nor does it natively provide OpenSSH with modern features. For secure S3 access and SSH communications with the Veeam Software Appliance (VSA) for Veeam Backup & Replication, you must install both OpenSSH and the CA certificate bundle from the OpenCSW repository.
- Solaris 11.3 does not natively provide OpenSSH with modern features. For SSH communications with the Veeam Software Appliance (VSA) for Veeam Backup & Replication, you must install OpenSSH from the OpenCSW repository.
Solution
Solaris 10 and 11.3: Install and Configure OpenSSH
To use OpenSSH instead of the legacy SunSSH, follow these steps:
- Install OpenSSH client and server:
- Edit the
/etc/opt/csw/ssh/sshd_configfile and enable:HostKey /etc/opt/csw/ssh/ssh_host_ecdsa_key
- Verify the list of available sshd services:
Expected output on Solaris 10 (on Solaris 11.3, the status of cswopenssh may be "maintenance"):
online <mon_dd> svc:/network/ssh:default online <mon_dd> svc:/network/cswopenssh:default
- Disable the SunSSH daemon:
- Restart OpenSSH daemon (via disable → enable, rather than via restart):
- Verify that the correct SSH service is running:
Expected output:
disabled <mon_dd> svc:/network/ssh:default online <mon_dd> svc:/network/cswopenssh:default
Additional Steps for Solaris 10: Install CA Certificates for S3 Access
By default, Solaris 10 lacks the necessary CA certificates for S3 connectivity. These can be obtained from OpenCSW:
- Install the OpenCSW certificates as documented here: Install cacertificates on Solaris 10
Note: The OpenCSW repository is a trusted Solaris community resource, but it is not the native Oracle Solaris repo. - After installing the certificates: To ensure compatibility with software expecting certificates to be located in the standard location, link the certificates directory to the expected path:
The CA certificates are installed to/etc/opt/csw/ssl/certs, not the standard/etc/openssl/certs.
If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please, try again later.