KB4930 release notes and known issues

Summary

How to Configure HTTP Proxy for Veeam Service Provider Console 9.3+ KB ID: 4930 Product: Veeam Service Provider Console | 9.3 Published: 2026-09-18 Last Modified: 2026-09-18 Purpose This article explains how to configure an HTTP proxy for Veeam Service Provider Console 9.3 and later, which introduced a dedicated proxy configuration mechanism that is disabled by default and does not use the WinHTTP, Internet Options, or environment variable proxy settings described in KB4875 . If a proxy is required to reach the internet and this mechanism is not configured, product update, license auto-update, and single sign-on features fail. Typical entries appear in Server.log : VeeamAutoLk>>AutoLkClient: Failed to get data from the AutoLk service ... A connection attempt failed ... (vac.butler.veeam.com:443) Saml2IdentityProvider: Failed to retrieve data from 'https://login.microsoftonline.com/...' due network error. Exception: System.Net.WebException: The operation has timed out. In versions prior to Veeam Service Provider Console 9.3, the software had no dedicated proxy setting and always used the .NET defaults: the HTTPS_PROXY / HTTP_PROXY environment variables first, then the Internet Options (WinINET) proxy of the service account, as described in KB4875 . Solution Summary Veeam Service Provider Console 9.3 introduced a central HttpClient configuration section. All HTTP clients created by the Veeam Service Provider Console Server, Web UI, REST API, and Management Agent read from it, and the default value of HttpClient_UseProxy is False . Until this key is set to True , every outbound connection is sent directly, regardless of OS-level proxy settings. Configuration Key Reference Key Type Default Description HttpClient_UseProxy Boolean False Master switch. False : no proxy is used, and OS-level settings are ignored. True : uses HttpClient_ProxyAddress if set, otherwise the OS proxy. HttpClient_ProxyAddress String Proxy URI, for example http://proxy.corp.example:8080 Empty: the OS proxy is used, as described in Option 2 below (see also KB4875 ). Set: the proxy is configured directly in Veeam Service Provider Console, as described in Option 1 below. The settings below apply only when HttpClient_ProxyAddress is set, and do not affect the legacy OS proxy settings ( KB4875 ). HttpClient_ProxyBypassOnLocal Boolean True Sends local destinations directly rather than through the proxy. HttpClient_ProxyBypassList List | -separated Regular expressions for additional destinations that bypass the proxy. HttpClient_ProxyUsername String Proxy user. Credentials are sent only when this is non-empty. HttpClient_ProxyPassword String Proxy password. Stored in clear text in the configuration file. Swipe to show more of the table Part 1: Identify Configuration File Location The HttpClient_* keys are added to one of two JSON files, depending on which Veeam Service Provider Console component is being configured: Veeam Service Provider Console Server, Web UI, and REST API: %ProgramData%\Veeam\Veeam Availability Console\Configuration\Service\configuration.overrides.json Veeam Service Provider Console Management Agent: %ProgramData%\Veeam\Veeam Availability Console\Configuration\Agent\configuration.overrides.json The same folder can also contain incremental configuration files named configuration.overrides.NNNNNNNN.json . Those files are generated and merged automatically, and should not be edited manually. Part 2: Add the Keys to the Configuration File Add the HttpClient_* keys to the GeneratedConfiguration object in the file identified above. Keep any existing keys already present in the file. Every value, including Boolean values, must be written as a quoted JSON string, for example "True" , not true . Option 1: Use Modern Built-In Proxy Client (Recommended) This mode is recommended because it does not depend on Windows Internet Options, and unlike legacy proxy methods, it supports proxy authentication. Configuration Example { "GeneratedConfiguration" : { "Http

Improvements and security content

• How to Configure HTTP Proxy for Veeam Service Provider Console 9.3+ KB ID: 4930 Product: Veeam Service Provider Console | 9.3 Published: 2026-09-18 Last Modified: 2026-09-18 Purpose This article explains how to configure an HTTP proxy for Veeam Service Provider Console 9.3 and later, which introduced a dedicated proxy configuration mechanism that is disabled by default and does not use the WinHTTP, Internet Options, or environment variable proxy settings described in KB4875 . If a proxy is required to reach the internet and this mechanism is not configured, product update, license auto-update, and single sign-on features fail. Typical entries appear in Server.log : VeeamAutoLk>>AutoLkClient: Failed to get data from the AutoLk service ... A connection attempt failed ... (vac.butler.veeam.com:443) Saml2IdentityProvider: Failed to retrieve data from 'https://login.microsoftonline.com/...' due network error. Exception: System.Net.WebException: The operation has timed out. In versions prior to Veeam Service Provider Console 9.3, the software had no dedicated proxy setting and always used the .NET defaults: the HTTPS_PROXY / HTTP_PROXY environment variables first, then the Internet Options (WinINET) proxy of the service account, as described in KB4875 . Solution Summary Veeam Service Provider Console 9.3 introduced a central HttpClient configuration section. All HTTP clients created by the Veeam Service Provider Console Server, Web UI, REST API, and Management Agent read from it, and the default value of HttpClient_UseProxy is False . Until this key is set to True , every outbound connection is sent directly, regardless of OS-level proxy settings. Configuration Key Reference Key Type Default Description HttpClient_UseProxy Boolean False Master switch. False : no proxy is used, and OS-level settings are ignored. True : uses HttpClient_ProxyAddress if set, otherwise the OS proxy. HttpClient_ProxyAddress String Proxy URI, for example http://proxy.corp.example:8080 Empty: the OS proxy is used, as described in Option 2 below (see also KB4875 ). Set: the proxy is configured directly in Veeam Service Provider Console, as described in Option 1 below. The settings below apply only when HttpClient_ProxyAddress is set, and do not affect the legacy OS proxy settings ( KB4875 ). HttpClient_ProxyBypassOnLocal Boolean True Sends local destinations directly rather than through the proxy. HttpClient_ProxyBypassList List | -separated Regular expressions for additional destinations that bypass the proxy. HttpClient_ProxyUsername String Proxy user. Credentials are sent only when this is non-empty. HttpClient_ProxyPassword String Proxy password. Stored in clear text in the configuration file. Swipe to show more of the table Part 1: Identify Configuration File Location The HttpClient_* keys are added to one of two JSON files, depending on which Veeam Service Provider Console component is being configured: Veeam Service Provider Console Server, Web UI, and REST API: %ProgramData%\Veeam\Veeam Availability Console\Configuration\Service\configuration.overrides.json Veeam Service Provider Console Management Agent: %ProgramData%\Veeam\Veeam Availability Console\Configuration\Agent\configuration.overrides.json The same folder can also contain incremental configuration files named configuration.overrides.NNNNNNNN.json . Those files are generated and merged automatically, and should not be edited manually. Part 2: Add the Keys to the Configuration File Add the HttpClient_* keys to the GeneratedConfiguration object in the file identified above. Keep any existing keys already present in the file. Every value, including Boolean values, must be written as a quoted JSON string, for example "True" , not true . Option 1: Use Modern Built-In Proxy Client (Recommended) This mode is recommended because it does not depend on Windows Internet Options, and unlike legacy proxy methods, it supports proxy authentication. Configuration Example { "GeneratedConfiguration" : { "Http

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Official publisher evidence