Blogs and podcasts

Bring your knowledge and expertise while creating blogs and podcasts

  • 817 Topics
  • 6,787 Comments

817 Topics

vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[Quicktip] Increase limit of snapshots per datastore

Last week I had to troubleshoot a backup job that was using a brand new proxy and repository server. No other job was using these components. Nonetheless just 4 VMs were processed at the same time. All other VMs showed status “Pending”. As additional information, “Resource not ready: Active snapshots limit reached for datastore” was shown too in active job log.After a short investigation we found out, all VMs were located on just one VMFS datastore. Fortunately there is a rather simple solution for this limitation. You can create a registry key on VBR server to increase the limit of active snapshots per datastore:HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup and Replication\MaxSnapshotsPerDatastore For more details see this forum posts:https://forums.veeam.com/vmware-vsphere-f24/active-snapshots-limit-reached-for-datastore-t19711.htmlNice detail: The change enters into force immediately – even the job is currently running!Keep in mind, this is a global setting!  

13
JMeixner
1 year ago
P
Philippe SNew Here
posted in Blogs and podcasts

Disaster recovery plan like powershell script

Hello,I'm taking the opportunity right now to work on a like disaster recovery plan like, with Veeam.Once the replica job is up and running, my goal is to be able to trigger a failover if the server's ping is knocked out, so I wrote a little homemade powershell script to do that. If it is useful take it.^^ Clear-HostFunction FailoverCheck{    $server = "SERVER NAME"    if (Test-Connection $server -Count 1 -Quiet -ErrorAction SilentlyContinue){        Write-Output "$server connected successfully."    }else{        Write-Output "Connection to $server failed."        Write-Verbose "Pause for 10 minutes...then try again" -Verbose        Start-Sleep -Seconds 5 # set to 600        if (Test-Connection $server -Count 1 -Quiet -ErrorAction SilentlyContinue){            Write-Output "$server connected successfully after 2nd try."        }else{            Write-Verbose "Failed again. $server needs restart." -Verbose            # Insert Command to restart application here.            $RestorePoint

1
Chris.Childerhose
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Thinking of becoming a Veeam Legend 2022?

The Veeam Legend programme is due to have its second intake in the coming weeks/months, and I wanted to put together a small collection of resources for people to find out more about this amazing sub-community. What is the Veeam Legends Programme? The Veeam Legends programme is at its heart, a Veeam community, its a sub-group of the wider Veeam Community Hub & R&D forums’ users. It was created as part of the ongoing recognition that Veeam wanted to give to its most active Veeam experts within these spaces.The Veeam Legends programme is one of three sub-communities within the ‘Veeam 100’ collective, with the other two being Veeam Vanguard and VeeaMVP. But whilst Veeam Vanguard focuses on external evangelism & activity, and VeeaMVP celebrates Veeam staff that contribute externally to the Veeam community, Veeam Legends is focused on Veeam platform-based activity. Are there perks to becoming a Veeam Legend? Of course there are! To date I’ve witnessed the following perks from th

51
E
10 months ago
Rick Vanover
Rick VanoverRICKATRON
posted in Blogs and podcasts

What is your BEST SysAdmin Story - I will feature it Friday!

This Friday - I am presenting on SysAdmin Day 2022 with Sagi Brody - one of the Veeam Vanguards.But I need YOUR HELP - What is your best SysAdmin Story? I will feature it on the show and stream. Tell me a good one - I’ll share it! You can join the show to see if your session is featured also! This Friday at 11:00 AM New York time, Sagi and I will be LIVE on 4 Veeam social feeds (LinkedIn, Facebook, YouTube and Twitter) with a special stream. Join us on the LinkedIN feed here.I have a story that, for now, I will only refer to as “The Coworker” and Sagi will share his best SysAdmin Day story as well.But what is your best SysAdmin Day story? Do you have a save the day moment? What about those pesky dev is actually production situations? Believe it or not - the SysAdmins are still heroes. I would love to hear your stories and any appreciation story to go with it.Speaking of appreciation…. Veeam’s celebration of SysAdmin Day puts some prizes on the line. We are doing a lucky draw where you

5
Geoff Burke
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Veeam Backup for Microsoft Azure: Updating Account Permissions

With the release of Veeam Backup for Microsoft Azure v4, I thought now would be a good time to discuss how to handle account permission changes. This tends to be required when Veeam release updates to the Veeam Backup for Microsoft Azure product, typically required to support new functionality.I was greeted by the request for all of these permissions after updating from v3 to v4Once you sign into Veeam Backup for Microsoft Azure after an update, you’ll likely have a notification similar to the above, depicting the missing permissions.There are two ways to update the permissions, and I’m going to take you through them both now. Method 1: Let Veeam Update its Permissions Yep, Veeam can handle this for you, and it’s really easy.Step One: Enter the Configuration section of the Web UI. Navigate to Administration > Accounts. Find your Azure account, select ‘Edit’.Step Two: Within the Edit Azure Account screen, edit any name & description details if required, otherwise click next to en

2
M
7 months ago
Link State
Link StateVeeam Legend
posted in Blogs and podcasts

VBR-VCC Storage migration data backup SEAL mode

Switching to Seal Mode - User Guide for VMware vSphere (veeam.com) Hello I wanted to bring to your attention a really interesting and useful feature.Create new Veeam  backup repository on new storage   Insert new exent on existing SOBRSet seal mode extent to be decommissioned After the extent is sealed, no further data is saved to the extent, and only read operations such as restore, merge and remove are allowed.Wait for the chains of all your jobs to reach the set restore points.Then verify that no Veeamzip \ export backups or oneshot backups without schedules are allocated on the old extent to be decommissioned.Such data will not be migrated needs a manual operation of moving veeamzip \export backup files etc.I love this feature allows me painless storage migrations for both standalone VBR environments and Veeam Cloud Connect platform .thanks for your attention

1
Chris.Childerhose
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Veeam Backup for Microsoft Azure: Repository Backup has Failed

 Ever had your backups fail? I sure have! But it’s all part of the fun & games of learning exactly how these systems work.Recently I spun up another instance of Veeam Backup for Microsoft Azure, and as part of my security mindset, I configured some elements of hardening to my infrastructure. Well, I missed a setting that I’m going to share with you today. Worker Job Completed with Error So, I had Veeam Backup for Microsoft Azure working, my daily snapshot job was also running fine, but it was the daily backup that wasn’t working. Some of the key terms I could pick out from the logs were ‘Worker: <Resource Name> (IP Address:Port): job completed with error’, ‘Error: This request is not authorised to perform this operation’, ‘Status 403’, and ‘ErrorCode AuthorizationFailure’ were the error messages I was being greeted with. Dissecting the Errors The key hint here was the job task ‘Backing up <VM Name> to Backup Repository. Followed by the worker not being authorised.Within

2
marcofabbri
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Securing Veeam Backup for Microsoft Azure: Password/Certificate Auth & Other Hardening Tips

Password Authentication & Certificate Authentications both have their pros and cons, but one undisputed stance is that certificates are more secure than passwords when used properly. To that end, I prefer to deploy certificate authentication when working with SSH, and when deploying Linux VMs, Azure prefers to as well.However, Veeam Backup for Microsoft Azure also signs you in with your Ubuntu user account, but doesn't support certificate authentication. Does this mean you're stuck with password authentication? Nope! Is it complex to configure? Also, nope! How does this work?Simply, we'll ensure that SSH is configured to only support certificate authentication, whilst configuring a password for authentication against the Veeam Backup for Microsoft Azure portal. For good measure, we'll also go through how to secure this platform further to reduce your attack risk. Getting set up with Certificate AuthenticationWhilst typically the more difficult part, Azure has done a great job of ma

4
MicoolPaul
1 year ago
coolsport00
coolsport00Veeam Legend
posted in Blogs and podcasts

Veeam Backup & Replication v12 – My Top v12 Features

While attending the VeeamON conference in Las Vegas back in May, Veeam announced they will be releasing Veeam Backup & Replication (VBR) v12 later in the year, and gave several sessions presenting what some of those features will be in the new release. I thought I’d do a write-up of what v12 features I’m looking forward to most, as well as provide a few extra lines of other notable features coming.Security-Veeam is upping its security game by implementing Multi-Factor Authentication (MFA) and Group Managed Service Accounts (gMSA). MFA is self-explanatory. From the VBR Menu > Users and Roles option, a Security window opens for you to select MFA for your Veeam user accounts (see figure below). But what about the gMSA? gMSA is a fantastic concept as it allows Veeam to use Active Directory service accounts while not storing the password locally on the Veeam server (i.e. when using for AAIP). Instead, VBR retrieves gMSA passwords on-demand from organization domain controllers. Platfo

48
Scott
8 months ago
Iams3le
Iams3leVeeam Legend
posted in Blogs and podcasts

Moderate. VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

VMware ESXi contains Return-Stack-Buffer-Underflow (CVE-2022-29901, CVE-2022-28693) and Branch Type Confusion (CVE-2022-23816, CVE-2022-23825) vulnerabilities due to the Intel and AMD processors it utilizes.There is a resolution to this issue, and as such there is no workaround discussed in this guide. VMware has evaluated the severity of these issues to be in the Moderate severity range with a maximum CVSSv3 base score of 5.6. VMware ESXi enables you to:Consolidate hardware for higher capacity utilization. Increase performance for a competitive edge. Streamline IT administration through centralized management. Reduce CapEx and OpEx. Minimize hardware resources needed to run the hypervisor, meaning greater efficiency.Multiple side-channel vulnerabilities in Intel (CVE-2022-29901, CVE-2022-28693) and AMD (CVE-2022-23816, CVE-2022-23825) CPUs have been disclosed. Patches are available to mitigate these vulnerabilities in affected VMware products. Below are the impacted products.VMware ES

1
Chris.Childerhose
1 year ago
Iams3le
Iams3leVeeam Legend
posted in Blogs and podcasts

VMSA-2021-0025.2 - VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)

VMware vCenter Server is advanced server management software that provides a centralised platform for controlling your VMware vSphere environments, allowing you to automate and deliver a virtual infrastructure across the hybrid cloud with confidence.This privilege escalation vulnerability in VMware Center Server was reported to VMware by  Yaron Zinar and Sagi Sheinfeld of Crowdstrike for reporting.Present IssueThe vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.1. Impacted ProductsThe following products are impacted. Workarounds are available to remediate this vulnerability in the affected VMware products.VMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation).Known Attack VectorsA malicious actor with non-administrative access to vCenter Server may expl

4
Chris.Childerhose
1 year ago
anthonyspiteri79
anthonyspiteri79Product Strategy
posted in Blogs and podcasts

GTwGT Episode 48 with MinIO

Hear the problem statement that led to the founding of ⁦@Minio from COO and Co-Founder ⁦@garimakap⁩ … Episode 48 looks at the state of Object Storage and how the data profile of what’s stored is shifting!

0
anthonyspiteri79
1 year ago
kirststoner12
kirststoner12Product Strategy
posted in Blogs and podcasts

5 Steps to Getting Started with Veeam ONE

Veeam ONE is an important part of Veeam Availability Suite. If you are new to Veeam, or currently running Veeam Availability Suite, you may not know that you have a powerful monitoring solution not only for your data protection environment but also your virtual environment. Veeam ONE provides visibility into your environment by monitoring and analyzing data trends that identify resource usage, helping plan for capacity, ensuring applications are performing efficiently and confirming backup operations are completing successfully. Veeam ONE does all of this, and if you are first getting started with Veeam ONE, this blog post is for you.Monitoring your environmentOnce you have added your environment into Veeam ONE, it immediately starts collecting data on how resources are being consumed, finds any problem areas and identifies bottlenecks. By switching through the different Veeam ONE Client views, you can monitor different environments, get more granular based on infrastructure components

8
vNote42
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

VMware vSphere+ & vSAN+ Announced

Today, VMware have announced vSphere+ & vSAN+, VMware’s attempt at providing cloud benefits to traditional ‘on-premises’ virtualisation environments.Let’s dive in! What is vSphere+?VMware vSphere+ is a subscription service for vSphere licensing, complimented by the addition of cloud-based services bundled into the subscription pricing. Subscription pricing being the most predictable element in my opinion as this is how the model most tech companies are using to license their products. Cloud ConsoleVMware will be providing a cloud console for centralised ‘single pane of glass’ management for all your VMware vSphere deployments, globally.It will be possible to view global inventory, security posture, resource capacity, and even offer the capabilities to tackle configuration drifts between instances vis Desired State Configuration.Alerts will be centrally collated within the Cloud Console, with VMware enabling simplified workflows for sysadmin tasks such as centralised updating of vCe

14
regnor
1 year ago
Geoff Burke
Geoff BurkeVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

The Kasten Tsunami Pre-Show from the Lake. Today Local Openshift

If I survive the Tsunami, Sea Monsters, or hordes of American fishermen I will return later to talk about RedHat’s Kubernetes distribution for testing: Local Openshift!  

1
Chris.Childerhose
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Veeam & SQL Server 2012, The Approaching End of Life & How to Migrate

 It’s that time of the IT lifecycle again, where we talk upgrades and decommissioning.On the 12th July 2022, Microsoft SQL Server 2012 will go End of Life. Not just to extended/security patch support, but completely out of support.So, why am I talking about Veeam? If you’ve got an installation of Veeam that utilised a SQL Server Express database, and you installed Veeam prior to 9.5 Update 4, odds are you’ve got a SQL Server 2012 Express database. This creates a security risk as of the next Microsoft patch cycle, scheduled for the 12th July 2022.I would also like to state that whilst this isn’t the focus of the article, if you’ve got a Veeam Backup & Replication or Veeam ONE environment that’s not running v11 yet, you really need to upgrade, as everything prior is at end of fix. Which version of SQL Server should I migrate to?Unless you are limited by the operating system support for SQL Server 2019, I don’t recommend going for anything older. This is because SQL Server 2017, whils

14
regnor
1 year ago
Rick Vanover
Rick VanoverRICKATRON
posted in Blogs and podcasts

Configure, Notify, Action: Veeam ONE’s ransomware detection

I speak to people often about ransomware and Veeam ONE has a helping hand here that can do more than many people think. What is important however is that the alarms and reports that matter get to the right persona are made visible. In this post I want to cover the 4 alarms and 1 report that matter the most AND how to handle the conditions that make these happen. Let’s get into it, these simple steps will make a different in getting Veeam ONE’s ransomware or malicious activity detected quickly.Possible Ransomware Activity AlarmThis alarm is in the Alarm Management section for both VMware and Hyper-V and looks at two sets of rules: sustained high CPU and disk writes; but also looks at sustained network transfer (exfiltration). At a minimum, this alarm should have an email sent to two or more persons (backup admins, security team, etc.) via email and separate the emails with a space: I also recommend going into the actions section, and put in a script that does something relevant to your

12
Rick Vanover
7 months ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - IV] Active full/Retry of a single VM of a job

Although the post is very small, the news in it is big 😃With v12 you can start a Active Full backup of a single VM processed by a job. Just open the progress dialog of the job and right-click the VM you want to backup. As you can see, this can also be used to run a Retry just for selected machines. Important: this will just work when you use the also new feature in v12: True per-machine backup files 

4
CarySun
23 days ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

Do we need a new tape standard?

The question may sound provoking. I asked myself during reading an article about Quantums concern about the LTO roadmap:https://blocksandfiles.com/2022/06/17/quantum-thinks-lto-tape-falls-short/For short: Capacity of tape media fall behind capacity of single disks. Also therefore tape does not fit for hyperscale that good. They need huge volumes of cheap storage. Best solution would be to use tape as very slow disk drives.  And because hyperscaler use tapes within their own environment, they do not care about standards. And because they are the biggest customers for tapes, it could happen that we see a new tape technology arise. At least this is my option.What do the community think about this?

8
JMeixner
1 year ago
MicoolPaul
MicoolPaulVeeam Legend, Veeam Vanguard
posted in Blogs and podcasts

Veeam Backup for Microsoft 365 v6a - Teams Export API Previewed

Today I want to share a sneak peek at the next release of Veeam Backup for Microsoft 365, v6a. Like traditional minor/interim releases, this release will mainly include bug fixes. However, there’s an interesting feature being released that I’ll be sharing some details on. Goodbye Exchange, Hello Teams Export APITo understand what’s changing, we need to understand what is going, and why this change is necessary. Currently, Veeam are protecting Teams channel ‘chat’ data via Exchange Online. Notice I say Teams channel, currently Veeam doesn’t protect any ‘Direct Messages’, either 1:1 or group chats, so chat in this context refers to posts and comments within a Teams channel. How does Veeam currently process my Teams data?To achieve the protection of this Teams data, Veeam reads a hidden folder within Exchange Online, called ‘TeamsMessagesData’. This is true whether you use Basic or Modern Authentication.If you weren’t already aware, Microsoft are completing removing Basic Authentication S

11
Chris.Childerhose
1 year ago
marcofabbri
marcofabbriVeeam Legend
posted in Blogs and podcasts

Backup job issue, incorrect function with Synology backup repository

Problem: Like a shooting star, sometimes can happens that some backup job on a Synology NAS fails with this error:Error: Incorrect function. Agent failed to process method {ReFs.SetFileIntegrity}.with VB&R 11.0.1.1261 and DMS 7.0.1 with a SMB share.It seems to be related to “Fast clone” feature inside Synology control panel.  Solution: Adding this registry key in the VB&R machine seems to solve the issue[HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup and Replication]"UseCifsVirtualSynthetic"=dword:00000000 As reported in this thread, that registry key tweaks the full fast clone feature.https://forums.veeam.com/microsoft-hyper-v-f25/error-incorrect-function-agent-failed-to-process-method-refs-setfileintegrity-t68754.html  More about this topic:All said above, I found this topic on reddit where the issue is present on Veeam 9.5u4 and always a Synology NAShttps://www.reddit.com/r/Veeam/comments/omridr/synology_ds1821_and_veeam_95u4/What is Fast clone:https://kb.synology.com/en-id/

16
marcofabbri
4 months ago
regnor
regnorOn the path to Greatness
posted in Blogs and podcasts

VB365: Processing site XYZ finished with warning: Failed to backup list: XYZ. Unknown Error

UPDATE: Please see Update 3, as the hotfix/workaround needs to be undone because of possible side-effects.Just a quick information.Currently there could be an issue with Veeam Backup for Microsoft 365 and Sharepoint. Some sites will be backed up with the following warning:Processing site XYZ finished with warning: Failed to backup list: XYZ. Unknown ErrorI have seen this with 2 different customers and Veeam support is aware of this issue and actively working with Microsoft on it. At the moment I don’t have any further information, but I’ll keep updating this post.Update 1:I just found out that there's already a hotfix available: https://www.veeam.com/kb4326I haven't tested it so far, but will report back next week. Also here's the corresponding R&D forums post: https://forums.veeam.com/veeam-backup-for-microsoft-365-f47/warning-on-my-sharepoint-site-t81314.htmlUpdate 2:It looks like the issue itself is gone since Saturday; perhaps Microsoft did change something on their side. I did

10
regnor
1 year ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - IV] Best Practice Analyzer

Also new in v12 is the Best Practice Analyzer in VBR console.  In Beta2 there are 6 tests divided into two categories: Security settings and product configuration. The individual points are self-explanatory.  I hope that more and more tests will be added to this feature in next versions.

18
marco_s
1 month ago
vNote42
vNote42Veeam Vanguard
posted in Blogs and podcasts

[What (else) is new in v12 - III] PowerShell news

There are a lot of new PowerShell cmdlets for VBR alone - without agents and explorers. in v11 we have 1178, in v12 1334 cmdlets. So the list is too long to show here. Categories I could see:GFS scheduling options Hyper-V Surebackup/Instant Recovery CDP Tape … I have to check separately :) Application Groups OracleAnother nice feature is that we now can see PowerShell commands at the end of wizards.In older versions we saw parameters for Veeam.Backup.Manager.exe. 

10
vNote42
1 year ago
JMeixner
JMeixnerVeeam Legend
posted in Blogs and podcasts

Veeam Proxy for Linux has Problems with LVM

We had some problems with restoring VMs in the last time.After some research we found that the Proxy on Linux has a problem with the assignments of physical volumes. It seems that there are PVs of target machines are preserved in the LVM archive files of the proxy… This is causing problems at restore time – leaving the restored VMs unbootable.I have double checked the Veeam documentation about prerequisites (https://helpcenter.veeam.com/docs/backup/vsphere/backup_proxy_requirements.html?ver=110) and found no hint that LVM is a problem with Linux proxy.The problem occurred with Suse Linux only, we are in the process to check if there is the same problem with RedHat Linux. To visualize the problem, I will show it from the Veeam Proxy perspective and from the target VMs perspective. Veeam ProxyList the physical volumes with pvs. One device is not found…Grep for the UUID of the missing volume in the directory /etc/lvm/archiveIn this case the UUID is found in three files. At these three occ

26
H
8 months ago

Badge winners

  • Veeam Employee
    Jace28has earned the badge Veeam Employee
  • Veeam University Freshman
    SMilyhas earned the badge Veeam University Freshman
  • Blogger of the Month
    JMeixnerhas earned the badge Blogger of the Month
  • Veeam University Pro
    admdhas earned the badge Veeam University Pro
  • Conversations Champion
    asdffdsa6132has earned the badge Conversations Champion
Show all badges
Terms & Conditions