Enable Support for Modern Authentication

This section describes how to apply Patch T00002119 and enable Arcserve UDP to use Modern Authentication for Office 365 backups..

Follow these steps:

1. Download P00002119.zip file on the UDP console machine and one or more proxy machines.
2. On the console and all proxy machines, follow these steps:
1. Unzip the contents to a folder.
2. Using an administrator or equivalent account, run the ExtractModernAuthTool.ps1 PowerShell script.
3. Notes:
• During installation, to acknowledge and set the Script Execution Policy as RemoteSigned, type Y and press Enter when the prompt displays in the PowerShell console.
• During installation, a message displays on the PowerShell console that the source is untrusted. To add "Arcserve (USA) LLC" as a trusted source, on the PowerShell console, type R and press Enter when prompted.
3. Follow the instructions on the Arcserve Wizard to install the patch P00002119 using the Local install UI option. Remote installation is not supported.
3. On the console machine, navigate to the following location:
4. C:\Program Files\Arcserve\Unified Data Protection\Management\BIN\ModernAuthentication\ModernAuthentication_Tool
4. To configure Modern Authentication settings, using an administrator or equivalent account, run Arcserve.Office365.ModernAuthentication.exe.
5. The Authentication settings for Office 365 wizard opens.
5. For Modern Authentication, select one of the following, and then click Next.
• If you select Create Certificate Automatically, click Next, and then do the following:
• 
1. Enter and re-enter the certificate password as needed, and then click Next.
2. 
2. On the Create Application in Azure window, click the Create Application in Azure button.
3. 
4. The Azure portal opens.
3. Log in using your Azure administrator credentials.
4. The Application gets registered successfully.
5. 
4. To grant permissions in Azure, click Next, and then click the Click Here link.
5. 
6. The Azure portal opens.
5. Log into the Azure portal with the credentials that was used to register the application.
6. Navigate to API Permissions, and then click Grant admin consent for .
7. 
• If you select Use Existing Certificate, click Next, and then do the following:
1. Browse and select the file location for .pfx and .cer files, enter the certificate password, and click Next.
2. 
2. On the Create Application in Azure window, click the Create Application in Azure button.
3. The Azure portal opens.
3. Log in using your Azure administrator credentials.
4. The Application gets registered successfully.
4. To grant permissions in Azure, click Next, and then click the Click Here link.
5. The Azure portal opens.
5. Log into the Azure portal with the credentials that was used to register the application.
6. Navigate to API Permissions, and on the right-pane, click Grant admin consent for .
7. 
6. If the backup proxy and UDP console are in different machines, follow these steps:
7. Note: Skip this step if the backup proxy and the UDP console are in the same machine.
1. On the console machine, navigate to the following location:
2. C:\Program Files\Arcserve\Unified Data Protection\Management\BIN\Office365
2. Copy the Certificate folder and the ModernAuthenticationConfiguration.xml file.
3. In one or multiple proxy machines, paste the copied folder and file in the following location:
4. C:\Program Files\Arcserve\Unified Data Protection\Engine\BIN\Office365
7. Update Office 365 Nodes in UDP Console with the registered user name.
8. UDP is now set to use Modern Authentication.