The error "Required port 443 for Veeam Backup & Replication is occupied by another application" is rarely a sign of Veeam being broken; rather, it highlights a classic Windows port contention issue. By methodically identifying the process using netstat, removing HTTP.SYS reservations, reconfiguring IIS or SSRS, or changing Veeam’s own port, you can resolve the conflict in under 15 minutes.
Remember, port 443 is prime real estate. Decide which application—Veeam or the existing service—is more critical for your environment, then adjust accordingly. With the steps above, you’ll have Veeam Backup & Replication listening securely and ready to protect your data.
Need further assistance? Visit the official Veeam R&D Forums or open a support case with Veeam Customer Support. Include the output of veeamportssniffer.exe (available in the Veeam ISO tools folder) for rapid troubleshooting.
The error "Required port 443 for Veeam Backup & Replication is occupied by another application" typically occurs during an upgrade to Veeam Backup & Replication (VBR) v13, as this version introduces a hardcoded requirement for port 443 for its REST API and Web UI. Review of Issue & Solutions
Industry feedback indicates this is a significant hurdle for environments where port 443 is already used by other critical services like Hyper-V Replication or third-party web applications.
Upgrade Blockage: The VBR v13 installer strictly blocks upgrades if port 443 is in use. There is currently no supported way to change this port within Veeam or bypass the check.
Common Culprit - Hyper-V: A frequent cause is the Hyper-V Replica service on the same server. An "easy fix" reported in Veeam R&D Forums involves changing the Hyper-V replication port from 443 to another value (e.g., 444) before proceeding with the Veeam upgrade.
Troubleshooting Tool: Users on Reddit recommend running netstat -anob in an elevated command prompt to identify the specific process ID (PID) currently bound to port 443.
Official Guidance: Veeam KB4557 advises that if third-party software is using the port, it is generally better to reconfigure that software rather than trying to modify Veeam's expected configuration. Summary of Resolution Steps
Identify the Conflict: Use netstat -anob to find what service is using 443.
Temporary Workaround: Stop the conflicting service long enough to complete the Veeam upgrade. Permanent Fix:
If it is Hyper-V Replication, change the port in Hyper-V Settings > Replication Configuration.
If it is a web service (like IIS or Apache), move that service's SSL binding to a different port.
Consult the Veeam Ports Guide to ensure no other required ports are blocked.
Major Issues After Upgrading to Veeam V13: Port 443 Conflict
When upgrading to or installing Veeam Backup & Replication (VBR) v13, many administrators encounter the error: "Required port 443 for Veeam Backup & Replication is occupied by another application". This occurs because port 443 is now hardcoded for the mandatory Veeam REST API Service and Web UI in version 13. Why Port 443 is Required
In Veeam v13, port 443 is used for the Identity Service and REST API Gateway. If another service is already listening on this port, the Veeam services will fail to bind, preventing the VBR console from starting or the upgrade from completing. How to Identify the Conflicting Application
To resolve the conflict, you must first identify which process is currently using port 443.
Command Line: Open a command prompt as administrator and run netstat -anob | findstr :443. This will display the Process ID (PID) and the name of the executable using the port.
PowerShell: Use the command Get-NetTCPConnection -LocalPort 443 to find the associated PID. The error "Required port 443 for Veeam Backup
Common Culprits: Frequently conflicting services include IIS (Internet Information Services), Hyper-V Replication, Remote Desktop Web Access, or third-party security agents like Qualys. Solutions and Workarounds
Currently, there is no supported method within the Veeam installer to change the port for the REST API Gateway. You must free up the port on the host server: Stop or Reconfigure the Conflicting Service:
If IIS is using the port, you can change its binding via the IIS Manager (InetMgr.exe) by selecting "Edit Bindings" for the website and changing 443 to a different port.
If Hyper-V Replication is the cause, go to Hyper-V Settings > Replication Configuration and change the port from 443 to another value (e.g., 444).
Temporary Stop for Upgrade: If the conflicting application is only needed occasionally, stop the service, complete the Veeam v13 upgrade, and then attempt to restart the other service. Note that Veeam v13 services will still fail to start if the port is occupied later.
Use a Dedicated Server: Veeam recommends installing VBR on a dedicated server to avoid port conflicts with other web-facing applications. Troubleshooting Connectivity
Major Issues After Upgrading to Veeam V13: Port 443 Conflict
The "Required port 443 for Veeam Backup & Replication is occupied by another application" error typically occurs when upgrading to Veeam Backup & Replication (VBR) v13. In this version, port 443 is hardcoded for the new Veeam Web Service/API Gateway and cannot be changed through standard supported methods. Identifying the Conflicting Application
To resolve the conflict, you must first identify which application is currently using port 443:
Command Line: Run netstat -aon | findstr :443 in an elevated Command Prompt. The last column displays the Process ID (PID) using the port.
PowerShell: Use Get-NetTCPConnection -LocalPort 443 | Select-Object OwningProcess to find the PID, then use Get-Process -Id to identify the specific application name.
Task Manager: Match the PID found in the steps above to the list under the Details tab to see the application's name and location. Common Conflicts and Fixes The most frequent culprits for this conflict include: Veeam B&R 13 Change Web Service Port 443
Let's dive deep into the issue of port 443 being occupied by another application when trying to use it for Veeam Backup replication.
Understanding the Issue
Veeam Backup & Replication uses various ports for communication between components, including the Veeam Backup Server, Proxy Servers, and Repository Servers. One of these ports is TCP 443, which is typically used for HTTPS traffic.
When you try to configure Veeam Backup replication, you may encounter an error message indicating that port 443 is already in use by another application. This can be frustrating, especially if you're not aware of what application is using the port.
Common Causes of Port 443 Occupation
Here are some common causes of port 443 being occupied:
How to Identify the Occupying Application Need further assistance
To identify which application is using port 443, follow these steps:
On Windows:
On Linux:
Once you've identified the occupying application, you can:
Additional Considerations
When changing ports, consider the following:
By following these steps and considerations, you should be able to resolve the issue of port 443 being occupied by another application when trying to use it for Veeam Backup replication.
In Veeam Backup & Replication (VBR) v13, Port 443 is a hardcoded requirement for the REST API and Web UI services. If this port is occupied by another application during installation or upgrade, the Veeam services will fail to bind and start. Identifying the Conflicting Application
Before resolving the conflict, identify which process is currently using port 443.
Command Prompt: Open CMD as Administrator and run:netstat -anob | findstr :443
PowerShell: Use this command to find the specific process name:Get-Process -Id (Get-NetTCPConnection -LocalPort 443).OwningProcess Common Applications Causing Conflicts
Hyper-V Replication: If the VBR server also acts as a Hyper-V Replica server, it may already be using 443 for HTTPS replication.
IIS (Internet Information Services): Web servers hosted on the same machine often default to 443 for HTTPS.
VMware vCenter/ESXi: If VBR is installed on a machine with other management tools, they may occupy the port. Resolution Steps
Because port 443 is currently hardcoded and cannot be changed within Veeam v13 settings, you must reconfigure the conflicting application. Option 1: Reconfigure Hyper-V Replication (If Applicable) If Hyper-V is the culprit, change its replication port: Go to Hyper-V Settings > Replication Configuration.
Change the Specify the Port value from 443 to a different port (e.g., 444).
Update the replication settings for each individual VM on the host to match the new port. Option 2: Temporary Service Suspension If the conflicting application is only needed occasionally:
Stop the conflicting service (e.g., IIS or a custom web app). Complete the Veeam VBR v13 upgrade or installation.
Attempt to restart the original service on a different port if possible. Option 3: Use a Dedicated Backup Server How to Identify the Occupying Application To identify
Veeam best practices recommend installing VBR on a dedicated server to avoid resource and port conflicts. If port 443 is essential for a primary line-of-business application on that server, migrating Veeam to a separate VM or physical host is the most stable long-term solution.
For deeper connectivity troubleshooting, you can refer to the Veeam Ports Finder Tool to map out all required communications.
Blog Title: Troubleshooting Veeam: "Port 443 is Required but Occupied by Another Application"
Meta Description: Struggling with Veeam Backup & Replication installation? Learn how to identify the process hogging port 443 and resolve the conflict quickly.
We’ve all been there. You’re in the middle of deploying or updating Veeam Backup & Replication, feeling confident, when suddenly the wizard stops you dead in your tracks with the dreaded error:
"Port 443 is required for Veeam Backup & Replication but is currently occupied by another application."
Port 443 is the default for HTTPS—Veeam needs it for communication between the backup server, proxies, repositories, and the WAN accelerator (especially for Cloud Connect or guest interaction proxies). If something else has claimed that port, your installation won’t proceed.
Let’s break down how to identify the culprit, fix the conflict, and get your Veeam deployment back on track.
After freeing port 443:
Check Veeam event logs (Event Viewer → Applications and Services Logs → Veeam Backup).
tasklist /svc /FI "PID eq 1234"
Or using PowerShell:
Get-Process -Id (Get-NetTCPConnection -LocalPort 443).OwningProcess
Windows:
tasklist /fi "PID eq <PID>"
Or in PowerShell:
Get-Process -Id <PID>
Linux (if applicable):
Veeam Backup & Replication is designed to work best on port 443. Changing Veeam’s port can cause issues with Cloud Connect providers, Veeam Agent management, and WAN Accelerators. It is best practice to move the conflicting application to another port.
Scenario 1: IIS (Internet Information Services) is using Port 443
If System (PID 4) is holding the port, it is likely IIS.
Scenario 2: VMware Update Manager If you are running Veeam on a vCenter Server or a server with Update Manager installed:
net stop W3SVC
sc config W3SVC start= disabled
Then restart the Veeam Backup Service:
net stop VeeamBackupSvc
net start VeeamBackupSvc
| Measure | Description |
|---------|-------------|
| Dedicated Veeam server | Avoid installing Veeam on servers already running IIS, Exchange, or other HTTPS services. |
| Port auditing | Regularly run netstat -ano to monitor port usage. |
| Installation order | Install Veeam first, then other web services (or reconfigure their ports immediately). |
| Documentation | Maintain a "Port Usage Register" for critical infrastructure servers. |
Port 443 is the standard HTTPS port. Common applications that conflict with Veeam include:
| Application / Service | Typical Context | |----------------------|------------------| | IIS (Internet Information Services) | Default web server on Windows; may host other websites or management consoles. | | Microsoft Exchange Server | Uses port 443 for Outlook Web Access (OWA) and Exchange Admin Center. | | Skype for Business / Teams (on-prem components) | Uses port 443 for web conferencing and mobility services. | | Apache / Nginx | Third-party web servers running on same Windows VBR server. | | VMware vCenter Server (embedded) | If Veeam is installed on a vCenter Server (not recommended). | | SQL Server Reporting Services (SSRS) | Uses port 443 for report manager. | | Third-party antivirus / proxy services | Some inject a local HTTPS inspection proxy. |