Blogs and podcasts
Bring your knowledge and expertise while creating blogs and podcasts
- 480 Topics
- 3,560 Comments
Update: Patch 20210525 brings CDP support for 7.0 U2The long-awaited patch for Veeam Backup&Replication v11, which brings support for vSphere 7.0 U2, has been released.https://www.veeam.com/kb4126It's important to note that CDP won't work with 7.0 U2 as there's a driver signing issue. So if you're working with Veeam CDP then you still should wait before updating.Added VMware vSphere 7.0 U2 support including new vSphere API version awareness and virtual hardware version 19 compatibility. Note: CDP functionality is not yet supported with vSphere 7.0 U2 due to the I/O filter drivers signing infrastructure issue at VMware, support will be added in the next cumulative patch.More information on the vSphere 7.0U2 support can be found in the forums: https://forums.veeam.com/vmware-vsphere-f24/vsphere-7-0-u2-support-t72668.html
Are all my virtual machines being backed up correctly and within the required RPO? Of course!I think..., or not 😉? Do I implement best practices in creating jobs?If using vSphere, do I use folders or tags or use whole clusters to add virtual machines to the job?If using HyperV, do I use whole clusters or hosts or in case of using SCVMM do I use tags? Yes, OK, that ’s fine, did I not forget a new VM giving the correct tag or putting in the correct vSphere folder?Yes it can happen to everyone to forget a VM putting correctly to the backup job (automatically or manually). Especially if you are working with colleagues (1 person is creating a new VM but is not aware about the backup and forgets to tell a colleague...). It happens.Everyone is very busy so can forget to add the new VM at the backup job or vSphere folder or tag or... To be sure we have several options to verify :Using Veeam ONE If you are using already Veeam ONE : perfect!You can schedule the report Protected VMs so you can v
More en more companies are being a victim of malware, ransomware or even hackers.It is always important to implement the golden 3-2-1-1-0 rule (in detail explained in a former post of me - 3-2-1-1-0 Golden Backup Rule | Veeam Community Resource Hub).Next to this rule, one of the first things to keep in mind is to protect as much as possible your backups because those can save you when you are being attachked and you need them.The first thing that comes in mind, is to harden your Veeam Backup & Replication server as much as possible.I will give you here 10 tips you can implement. There are of course more things possible, but it's a start.1 - Do not domain-join the backup server in the production domainA best-practice is to put the VBR server in a workgroup and not AD domain-joined for smaller environments.Why? If ransomware is nested in a roaming profile of a domain-user connecting to the domain-joined VBR server, this malware can be activated on the VBR server and impact the backup
Just wanted to share a VM recovery tip with you all I recently discovered when needing to recover a VM no longer being processed by a VBR Backup Job it was in due to Deleted VM Maintenance Schedule. To assist with my recovery, you have to be utilizing Storage Integration technology with Veeam. My specific environment uses Nimble Adaptive Flash Arrays, so be sure to understand how your Storage Vendor’s snapshot technology works before assuming my “tip” will apply to your environment. Let’s assume you’re backing up VMs with vSphere Tags and during tag maintenance you mis-apply a tag, or forget to (re) apply a tag to a VM needing to be backed up. Or maybe you use vSphere “containers” to back up your VMs (i.e. Datastores, VM Folders), and you mistakingly move a VM out of the Container and the VM is no longer getting backed up. As a good Backup Admin does, such that you are, you review your VBR jobs daily to verify they succeeded: BOOM! Well done, Backup Admin! But, you weren’t being as t
The following post is not directly related to backup. I hope it is helpful anyway.At a customers backup server a very strange behavior was observed. After a few days without problems, scheduled tasks never seem to get finished. So a current running – never ending – task prevents the next run from starting. A reboot of the server resolved the problem – for a few days.SolutionAfter a research I found out, scheduled tasks get started with a lower priority than interactively started tasks. See my scheduled PowerShell script in screenshot here.Normally this is not a big deal. It does not matter when tasks like reports last longer than manually started. Nevertheless they should at least finish.The solution is to rise the priority of scheduled tasks. Unfortunately this cannot simply be set in the GUI. It can be done in a few steps, I list here.Start Windows Task Scheduler, right-click your task and select Export… and save XML file to a temporary location. Edit XML file with an editor of your
Good afternoon!Though this is a Veeam Community site, not everyone may know, or have heard, Veeam is having their big yearly conference next month - May 25-26 (26-27 APJ). As with last year’s event, this year will also be of the online variety. Hopefully next year we’ll get to meet in person! You may be asking, “why should I attend?” Well, let me provide a few very good reasons why:Knowledge is power! And Veeam will have a lot of it on display via deep-dive sessions and demos. Veeam Solutions Architects, such as Tim Smith, and Senior Director of Product Strategy @Rick Vanover and his team of amazing professionals will deliver on-point content to help you implement Veeam in your environmet according to best practices and recommendations. What’s New? Every year @Anton Gostev gives his “staple” What’s New session about what you can expect in the next Veeam version release. Though I haven’t seen any detailed schedule or agenda on the VeeamON content, I’m sure this session will still be gi
I had the discussion two times last week, so I think it is worth sharing here.You may have noticed, VMware deprecated image level backup of its vCenter Appliance (VCSA) with vSphere 7. What does this mean? Basically, it is still supported to do image level backup and restore with VCSA 7.0. But it will not be supported in future releases. Notice that U1 and U2 are still 7.0 versions. With 7.n, with n>0, VMware will not support image restore of VCSA any more. From my perspective, this step was taken because problems arise when restoring this Linux appliance. I have seen many appliances requiring a filesystem check after restore or crash. When you are lucky, everything works fine afterwards. If not, you have to file a support ticket.To avoid this, VMware offers a new way for VCSA backup. Since 6.5 it is possible to run file-based backups and restore of VCSA. Since 6.7 this can be scheduled. With this, new protocols are supported as well: FTP, FTPS, HTTP, HTTPS, SFTP, NFS, or SMB. Pleas
With the recent topic of how to change the IP/DNS Name of the vCenter recently posted I wanted to share for those with experience in SQL how you can modify the vCloud URL within Veeam.This requires some SQL knowledge and that you shut down the Veeam services during the process. The main query is as follows:SELECT * FROM Hosts WHERE type=1 OR type=6 OR type=14; Under the "options" column for the relevant row(s) we're going to see the reference(s) to the old cell hostname. Then once you are ready follow these steps:0) Veeam Configuration Backup1) Stop Veeam Services2) Backup VeeamBackup SQL DB3) SELECT * FROM Hosts WHERE type=1 OR type=6 OR type=14;4) Copy the "options" value5) Modify the copied "options" column value to have the new VCD URL6) Note the id column of the related row7) Perform the update query on the objects that need the new URL:UPDATE Hosts SET options='NEW_options_VALUE' WHERE id='ID_FROM_STEP_6';8) Start Services9) Open Console, and "next" through the properties of the
How can we see here, vCenter IP/FQDN is not possible to change inside of Veeam B&R. In my case I put the IP of vCenter server on Veeam Backup & Replication and now I’d like to change it to a hostname accordingly the DNS server name. So, first of all we need to open the Console / PowerShell on burger menu of Veeam B&R. So, at this moment we need type the command:$Servers = Get-VBRServer -name "old-name-or-ip"On my case the IP of my vCenter server is 192.168.10.100. After that we just need type the following command:$Servers.SetName("new-name-or-ip")On my scenario it is ROM2SRVVLVC01. And now, with this two only commands we can see that the vCenter name was changed on Veeam Backup & Replication: To finish I just rescan the vCenter server again to see all the set up is ok.
For my first Veeam Community post, I thought I would share with you all something I’ve been doing for over a decade - an exam prep Study Guide; this one being for VMware VCP-DCV 2021. For those who haven’t followed me over the years, I started creating these “outlines”, i.e. Study Guides, for my own benefit to help me with tech cert exam prep. I then thought others in the community may benefit using them, so I decided to share them online. I generally post them on Twitter, so if you’d like to follow me, you can do so from here.When reviewing the VMware ‘Blueprint’ for the DCV 2021 exam as compared to the 2020 exam, I was initially overwhelmed by the additional content for 2021. As I dove deeper into the 2021 exam Objectives, it turns out a lot of them were similar to what was asked to know for the 2020 exam, so it wasn’t too bad to review. As with most of my Guides, I enjoyed learning about the new tech VMware implemented with vSphere 7 - e.g. Identity Federation & Lifecycle Manage
Hey everyone,I wanted to share this recent blog post I made with yourselves as whilst it’s not directly related to Veeam, I was helping someone that had locked themselves out of a Veeam database and needed to take a native backup for a support case with Veeam. I was recently helping a customer create a SQL database backup for a support ticket and noticed that they had an interesting SQL Server configuration. There was only a single account with sysadmin rights, the sa account, but this account wasn’t allowed to sign in. The SQL Server was domain joined but there was just a single group allowed with Windows Authentication and that had the “public” server role only.There are a few reasons this could happen, accidental permission changes, or groups and/or user accounts being deleted from the domain that had been assigned the sysadmin role as examples. Thankfully it’s not the end of the world for you if you find yourself in this situation. Breaking Back into your database! This will invol
Hello There, I just wanted to share an issue I had on one of my customer to avoid others the problem:We setup a standard Veeam Backup & replication Server on a W2019 VM and a Std SQL 2019 on another one to host the DBs from VBR and Enterprise Manager.The DBA from the customer insisted to setup an alias for the DB server when pointing Veeam to its Database server as it’s their best practice to facilitate migration (He was obviously not aware how easy it is to move Veeam Database). So he setup a CNAME that pointed to the real SQL server.The setup went well using the CNAME. We created a “management job” to save Veeam by itself, VBR+SQL servers. The job detected the roles and proceeded as normal but failed on SQL VSS processing. We spent a lot of time to validate that permissions were right (the DBA didn't gave us the sysadmin rights on the backup service account, wise guy) and that the service account on the SQL had the proper permissions too for the VSS writers. Long Story short: I f
Today’s topic will be regarding Cloud Native workloads within Azure & AWS and how best to adhere to Veeam’s 3-2-1-1-0 best practices and how concepts can differ from traditional on-premises data protection. Remember the 3-2-1-1-0 best practice is a minimum desired standard and going above and beyond these minimums will help your data availability and recoverability objectives.The public cloud has provided a huge transformation opportunity for organisations, the pay as you go model enables organisations to deploy quickly and without the overheads of infrastructure management. But these platforms are still part of a shared-responsibility model, with a key risk that you retain being, the protection of your data.3 - Copies of Your DataLets start with the easiest one. Three copies of your data, including your production data. Public cloud services such as Azure will inform you that they retain three synchronous copies of your data as a minimum via their “Locally Redundant Storage” offer
It is not uncommon to reset root password in VMware VCSA (vCenter Service Appliance). This can be necessary when account is locked or password is expired. Normally, you have to shut it down, enter GRUB and edit start parameter to boot into bash. There you can reset root password. Afterwards you boot VM again. Here is the link to this procedere: https://kb.vmware.com/s/article/2147144With vCenter 6.7 U1 it us much easier! Since then it is possible to use a Single-Sign On (SSO) administrator account (for example: email@example.com) to login to Appliance Interface (Port 5480) and shell. And exactly this can be used to reset the root password. In short it goes like this: Take a snapshot/backup of VCSA - it is always a good idea to start with a backup Login as a SSO-administrator using a SSH client or console. Enable and start shell: shell.set --enable true shell Change root password sudo passwd root DoneHere is the link to the more detailed VMware KB-article: https:/
This document provides step by step instructions to configure Azure Active Directory for SAML authentication in Veeam Enterprise Manager. There are four editions of Azure AD (AAD): Free, Office 365 (which comes together with O365), and two Premium editions P1 and P2. Comparison for all of them can be found at https://azure.microsoft.com/en-us/pricing/details/active-directory/Below you can find steps to setup Veeam Enterprise Manager and Azure AD integration based on AAD from Office 365.Let’s start with the Azure side. Go to Azure portal then go to Azure Active Directory. Go to Enterprise applications → New application → → “Create your own application” → then provide a name for our application i.e. Veeam EM, and select “Integrate any other application you don’t find in the gallery” → Create Within a few moments’ applications will be created and visible under Enterprise Application view. Open it. Now let’s add some users (Step 1). In this version of AAD, only users can be added. In Pre
If you haven’t heard, Veeam Disaster Recovery Orchestrator v4 (formerly known as Veeam Availability Orchestrator) is now available, and better than ever.Now VDRO can orchestrate recovery for 4 types of your protected data:Veeam CDP Replicas - NEW in v4 Veeam Replicas Veeam Backups Replicated Storage Snapshots (NetApp ONTAP and Lenovo ThinkSystem DM)This means you have the ultimate in flexibility and choice when it comes to protecting all of the data in your environment. From mission critical apps, to those dev environments that would be nice to recover easily but are usually ignored for DR planning purposes, you can do it all with the same tool, the same way.It couldn’t be simpler to create a DR plan in Orchestrator. Check out this video where I create a CDP Replica orchestration plan, run a readiness check, and launch a failover in less than 10 minutes.There are some subtle differences between plan types, but yes, Orchestrator is really that easy to use. You can even get granular an
So, today I’m gonna show you a simple comparison with 1 VM per job versus 2 or more VM per jobs. On my scenario I have 2 VM for my Active Directory environment with 40GB size each.----------------------------------------------------------------------------------------------------------------------------So, in first example I create 1 job per VM: In this shape it consume exactly 40GB on my repository: ----------------------------------------------------------------------------------------------------------------------------In the second example a create a unique job for the same 2 VM’s: And in this shape it consume 37GB on my repository:---------------------------------------------------------------------------------------------------------------------------- How can we see deduplication of Veeam B&R gives a good space on our backups.In this environment was only 2 small VMs, but now you can imagine how this impact an entire datacenter.
This is the second part of my SQL Instant Recovery posts. First part:I would like to list some of the software’s behaviors here.Veeam Explorer for Microsoft SQL Server is closed. One could gain the impression from the documentation Veeam Explorer does the whole work. This is not the case, if Explorer gets closed, just start it again. Mount Server, proxy or repository Server is offline. This is a problem, because these components are necessary for keeping your Instant Recovery database alive. Fortunately Veeam took this into account. So the system checks periodically (every 5 minutes) if needed components are online again and re-establish all connections. If you fixed the problem before next scheduled retry, you can trigger the retry manually by pressing the Retry button.Restoring to original locating with original database still in place. The Explorer wants to have your decision confirmed. Veeam VBR Server uses older SQL Server version than source Server. This is generally not a proble
See here how it works in a step by step guide.To start in Instant SQL Recovery wizard, select your server and choose Restore application items.Here you choose if you want to restore to the latest available restore point, or select a listed one. At the end of wizard press Browse. Veeam Explorer for Microsoft SQL Server starts.Choose the database you want instantly recovered and select to do so. You have these options to choose from: Latest restore point. Point-in-time state. Recover to another server. This you can used to recover DB using a different name while original DB is still in place. In this demo, I selected point-in-time state to show additional options.Select point-in-time state you want recover to.Notice:First option recovers to date and time, recovery point was created. Second option lets you choose the exact date and time to restore to. As noted, transaction log backup is required here. Checking option to restore to a specific transaction, lets you choose a marked tran
One of the challenges that I have faced learning Kubernetes is persistent storage. It is a steep learning curve but one of the most essential areas elements necessary to make containers become a real force in the world of computing. There are many flavors of Kubernetes persistent storage and making the right choice for your workload and application s is no trivial matter.Would it not be nice if there was some helpful utility to test and validate my persistent storage setup?Well now there is thanks to Veeam Kasten’s Kubestr!As stated on its web page “Kubestr is a collection of tools to discover, validate and evaluate your kubernetes storage options.”Lets take a look at what this thing can do:You can download Kubestr here: https://github.com/kastenhq/kubestr/releases/tag/v0.4.13 I chose the Linux binary and downloaded to my control node.Untar the the tarball and you are ready to go. In linux make the file kubestr executable by typing in sudo chmod +x kubestr Then run .kubestr and it will
Hello community,I don’t know if this is common knowledge (I guess all the hardcore Windows Admins hanging around here know this), but I think I share this, nevertheless.I have tried to back up a Windows 10 PC with a server managed VEEAM agent for the first time today (up to now there were Windows Server only). In this environment is no Windows Domain present, local users on all systems only.When I tried to connect to the Windows 10 PC from my VEEAM Server to create a managed server the connection was refused. No specific error message, it just failed… OK, I tried to ping the PC and to connect to it, all ok. Then I tried an administrative share and it failed, too. So, it seems not to be a VEEAM Problem, but a Windows problem…I did some internet research and found that the Windows administrative shares are not accessible by local accounts over the network since Windows Vista. OK, this is some time, but… when do you do such a thing?After some more reading I finally found the solution. You
Hey everyone!VMware released some unexpected news yesterday regarding the end of support for vSphere & vCenter 6.5 and vSAN 6.5 & 6.6. These were both originally intended to reach End of General Support (EoGS) this year, on the 15th November 2021. VMware are now extending this general support window to the 15th October 2022, no changes to the end of technical guidance have been announced.This date might seem familiar, vSphere 6.7 reaches EoGS on the 15th October 2022, meaning unless you have an extended support contract with VMware, this is the date you will need to migrate away from the vSphere 6.x platform by!VMware have kept things simple by extending the EoGS for vSAN 6.5 and 6.6 to this same date which also coincides with vSAN 6.7 EoGS.In summary, things are a lot more simple, on a vSphere/vCenter/vSAN 6.x release that isn’t already EOL? It will reach EoGS on the 15th October 2022 now.However, like so many freebies, there can be strings attached, such is the case here. So,
When you will download data from Exchange Online – Microsoft will throttle your traffic. In previous years to change it, you should open a support ticket to MS. Now you can temporarily change this directly on Microsoft 365 admin center. This can be especially useful for initial full backup for multiple mailboxes. How to setup this? Go to the Microsoft 365 admin center and in the top right corner open help and just type “ews”. Then you have to run tests as a results you will have option to select duration 30, 60 or 90 days with higher throughput speed.select one of available value and update settings.
Login to the community
Log in with your Veeam account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.