Blogs and Podcasts

4-Eyes Authorization is one of the most effective controls for protecting backup data from a single compromised credential. Most solo admins and small teams skip it because it sounds like it requires a dedicated security team. It doesn't. Here is how to implement it when you're a team of one.Full article with step-by-step setup guide at anystackarchitect.com - link in profile. The Threat Model Ransomware operators don't just encrypt production data. The playbook now includes credential theft, lateral movement to the backup server, and destruction of backup data before the encryption payload runs. If your Veeam admin account is compromised and 4-Eyes is not enabled, an attacker with that credential can delete every backup job, remove ever

Veeam's Hardened Linux Repository has been the gold standard for immutable backup storage since v11. Veeam v13 ships a pre-hardened alternative: the Veeam Software Appliance (VSA). The question is whether you build your hardened repo manually or take the appliance. The security calculus is not as obvious as it looks.This post breaks down the architectural differences, where the VSA wins, and where DIY is still the right call. The Three-Pillar Security Model Both the VSA and a correctly built DIY hardened repo implement the same core security model: Single-use credentials - the Veeam backup service account is used once, then cannot authenticate again

 Veeam University Pro is a training program developed by Veeam with focus at end users. The platform is part of Veeam’s educational program and offers in-depth technical courses designed to help professionals achieve official Veeam certifications. It is a paid professional training program offered through an annual subscription. CertificationsVeeam has recently changed its certification program. Through Veeam University Pro, you can now prepare for the following certifications:VMCE – Veeam Certified Engineer Validates that a professional can install, configure, and manage the Veeam Data Platform.VMCE+ (new)Focuses on more advanced knowledge of the platform and integration bet

In this article, we’ll explore why backup validation matters and how you can validate backup integrity using Veeam Backup & Replication.A question I always ask customers. Do you test your backups? The answer I get is I don’t have the time or the resources. So, how do you know if the backup is good? Well, it's successful. A successful backup isn't always effective and should be tested periodically. Veeam can help validate the backups.Backups are often considered the last line of defense in any data protection strategy. However, a backup that cannot be restored is effectively useless. Many organizations invest heavily in backup infrastructure but overlook one critical aspect: backup validation.With modern cyber threats, ransomware attacks, and increasing data volumes, verifying the integrity of backups is essential. Fortunately, Veeam provides built-in mechanisms to ensure that backups are not only created successfully but can also be restored when needed.

Choosing the right object storage for backup and ransomware protection is not just about capacity — it’s about immutability, compliance, operational simplicity, and cost predictability.Here’s a clear comparison of three common approaches when using Veeam Backup & Replication: ✅ Veeam Vault (AWS/Azure)Designed as a managed STaaS offering, Veeam Vault delivers always‑on immutability, built‑in encryption, and a logical air‑gap by design. It integrates natively with SOBR and Capacity Tier, offers predictable per‑TB pricing, and removes infrastructure management overhead from the customer. ✅ Native AWS S3 / Azure BlobProvides strong integration and scalability, including Object Lock / immutable containers and support for compliance mode. However, immutability and air‑gap depend heavily on correct

Modes, GFS Retention, Seeding, and SOBR Targets Backup copy jobs are the mechanism that delivers the second copy in your 3-2-1 strategy. They are also one of the most frequently misconfigured features in Veeam. The mode choice between Immediate and Periodic has consequences that are not obvious until a GFS full does not get created when expected. The retention interaction between primary jobs and copy jobs surprises people who assume the copy just mirrors the primary's retention. Seeded copy jobs for WAN environments require a specific setup sequence that most people skip, and then wonder why the initial copy runs for three weeks over the WAN when it could have seeded from a local drive.This post covers backup copy jobs completely: how the two modes work and when to use each, GFS retention on copy jobs with the specific caveats that catch people, seeded copies, source selection, SOBR as a copy target, PowerShell aut

How the HA cluster works The v13 HA cluster is a two-node active/passive setup for the Linux Software Appliance. One node is primary and runs all backup and replication operations. The secondary sits in standby, continuously receiving a replicated copy of the primary's configuration database. If the primary goes down, you promote the secondary and work resumes against the same repositories.Replication between nodes uses Patroni, the PostgreSQL high availability framework. The primary's configuration database is continuously streamed to the secondary as WAL logs. TCP must be open between nodes for this to work - if the TCP connection drops, WAL logs accumulate on the primary until the secondary reconnects. The secondary is read-only and cannot run backup jobs independently while in standby.What replicates between nodes: the VBR configuration database and configuration state. What does

Testing new backup technologies in a lab is one of the best ways to understand how they will behave in a production environment. Recently, I deployed another use case for Ootbi (Out-of-the-Box-Immutability) from Object First and integrated it with Veeam Backup & Replication in a small lab environment. This environment will also be used as a use case for my customer demos. The goal was simple:Deploy immutable object storage Configure it as a Veeam backup repository Run backup and restore tests Understand the operational experience What stood out most was how quickly immutable object storage can be integrated into a Veeam data protection architecture. Lab Environment OverviewFor this deployment, the lab environment consisted of the following components: Component Purpose

In this series we will be going over setting up the full Veeam Data Platform suite ready for configuration of each of the services it offers, but what do you get with the different subscription levels of VDPVeeam have information on the feature comparison here, but here is a rough breakdownFoundationFull hypervisor/agent support Instant recovery Backup for Entra Inline ransomware detection Immutability Syslog event forwarding Security Analyzer for VBR SureBackup Cloud VM supportAdvancedEverything in Foundation Veeam Threat Center And Threat Hunter Integrated AV Veeam ONE reporting and monitoring Veeam Enterprise ManagerPremiumEverything in Adv

In this article I'm going to walk you through deploying a SOBR from scratch in my lab environment — not just the wizard clicks, but the design decisions, the gotchas, and the things I wish I'd known the first time I built one at scale.In recent years, before Veeam introduced direct-to-cloud capabilities, SOBR was used for tiering backups to the cloud. It can still be used today and play into the 3-2-1 backup strategy. Another use case for SOBR is when you have multiple nodes for Object First or Exagrid and want Veeam to view them as a single backup repository. For this article, we’ll focus on Object First.The SOBR is one of Veeam's most powerful (and frankly, most underutilized) architectural features. It lets you pool multiple repositories into a single logical target, adds tiered storage with automatic offload to object storage, and makes managing the lifecycle of your backup data dramatically simpler. What is a Scale-Out Backup Repository?

Introduction Veeam Backup and Replication v13.0.1 supports a direct in-place upgrade from v12.3.1 build 12.3.1.1139 or later on Windows. The installer runs a hard configuration check before the upgrade proceeds and will stop on several specific conditions. This post summarizes the full upgrade process -- blockers, deprecated features, platform changes, component order, wizard walkthrough, and known post-upgrade issues -- based on the official Veeam documentation and confirmed community experience. Full article with expanded tables and PowerShell references at anystackarchitect.com.Supported Upgrade Path Direct in-place upgrade to v13.0.1 requires v12.3.1 build 12.3.1.1139 or later. See KB4763 for the official version requirement. If below that build, update to v12.3.1 first (KB4696), then upgrade to v13. 

 Have you ever wondered where we Veeam 100 members are distributed around the world?Based on Veeam 100 Directory | Veeam Community Resource Hub and the public location information I have from our LinkedIn profiles, I sat down and provided a world map that answers exactly the above question, or shows it on the map. In the backend, I use MapGeo and Google Sheets for this. As soon as you press directly on a member or their point on the map, the photo stored from the Veeam 100 Directory (in the Community Hub) opens.For short information such as names, titles and, if applicable, Blog URL just “hover” over the po

The updated NetApp lab-on-demand with Veeam protecting VMware workloads is live. It is based on the Windows VBR 13 version since the USAPI plugin is still in development TBD. The storage snapshot orchestration is still based on the ZAPI API. It provides a fast and easy way to demonstrate Veeam's goodness with NetApp. Immutability is provided by NetApp StorageGRID bucket with S3 object lock. Demonstrate a SQL backup and restore via app aware processing. What's a lab without a migration activity. This lab also includes an instant VM recovery to Hyper-V. The last section of the lab allows you to scan a backup with SureBackup. Since this is a lab, feel free to play around. To access the lab make sure you have a NetApp Support account with “partner” access link below. Once your NetApp account has been created click on the link for the lab link below. There is also a step by step lab guide that is easy to follow. Please use lab wisely so you do not get caught launching a lab and not using

 Most Veeam environments are technically solid. The backup jobs run. The hardened repo is configured. Immutability is on. But when someone asks "can you walk me through exactly what happens if the backup server goes down at 2am on a Saturday," the answer is usually a pause followed by "well, we would figure it out."That gap is what this article is about. A DR runbook is not a Veeam config export. It is an operational document that a trained engineer who has never touched your environment can pick up and execute under pressure. This article covers how to build one, what it needs to contain, how to test it, and how to produce the kind of audit ready documentation that satisfies a compliance reviewer or a customer asking for proof of recoverability. 1. What a DR Runbook Actually IsA runbook is a step b

Dear all, this is just a quick guide, but maybe helpful for some of you!I had this behaviour with the latest release from yesterdays ISO, to patch to the latest release… After mounting the ISO and click on Setup.exe I received the following error:Unable to run the installer because files from this ISO are blocked for security reasons. Use the “Unblock” option in the file properties to proceed.  It’s an easy step, but keep in mind, this you have to do on the ISO file itself, not on the Setup.exe file 😉So right-click on the ISO, and choose Unblock under Security. Hit OK/Apply and have fun, while applying your urgent updates! 

Why Updates Matter & Why Order Matters Even MoreEvery software product loves a good update – fresh features, performance boosts, and a healthy dose of bug fixes. But in the world of a Software, updates aren’t just a routine chore; they’re a carefully orchestrated symphony. Many customers forget that the sequence of these updates isn’t random. If you ignore dependencies, you risk breaking the finely tuned harmony of your backup and monitoring infrastructure.So, before you hit „update all,“ remember: the right order keeps your environment running smoothly and avoids compatibility headaches. Here’s the recommended update order for Veeam products:Service Provider Tools (if u

Over the last few days I have been working through the Veeam Recovery Orchestrator Essentials training on Veeam University, which is part of the Veeam Data Platform Security Expert learning track.Are you coming from a background mainly focused on Veeam Backup & Replication and Veeam ONE, and want to learn how the Ochestrator fits into the bigger picture. This course is esentially for you. You will love it 😁. Veem Recovery Ochestrator (VRO) essentially closes the loop: backups are created with VBR, monitored with Veeam ONE, and then recovery itself can be automated and documented through the orchestrator.This self-paced course promises to automate runbooks, recovery plans, and compliance reporting, turning backups into testable DR workflows. Currently at 56 after the exam and now at 64% with the next chapter after powering through the marathon Chapter 4, with the exam score below. 

Latest Veeam Backup & Replication v13 introduces the Veeam Deployment Kit, a package used to enable certificate-based authentication.Once installed on a target server, Veeam leverages the certificate for authentication instead of the traditional username and password. You can find the complete procedure in this link:👉 https://nolabnoparty.com/en/using-the-veeam-deployment-kit/

What this migration actually does Veeam used SQL Server as the only configuration database option for years. In v12 they added PostgreSQL support. In v13, PostgreSQL is the default for all new installations, and it is the only supported option for the Linux Software Appliance. If you have an existing VBR server running on SQL Server and want to move to the Linux Appliance - or simply want to drop the SQL Server dependency - this is the process.It is not a live database conversion. Veeam does it through a backup and restore cycle: you create a configuration backup from your existing instance, then restore it to a PostgreSQL instance using the Migrate mode in the Configuration Restore wizard. The VBR server stays on the same machine. All infrastructure, jobs, credentials, schedules, and settings carry over. The only thing that changes is what database engine VBR connects to. 

Port conflicts in your Veeam environment? There’s a registry key for that.In this month’s Regkey of the Month, we look at how you can customize the network ports used by Veeam Backup & Replication through registry settings.Why would you do this?✔ Avoid port conflicts with other applications✔ Align with strict firewall or security policies✔ Gain more control over agent deployments and infrastructure communicationUnderstanding these lesser-known registry options can save hours of troubleshooting in complex environments.If you manage or architect Veeam environments, this one is worth a read.https://integriservices.blogspot.com/2026/03/regkey-of-month-march.html

Microsoft 365 (M365) has become indispensable in everyday office life: emails, documents, Teams chats, SharePoint – everything in one place, all in the cloud. But many admins rely too much on the idea that “everything is somehow secure.” That’s a mistake!  Why should you back up Microsoft 365 services at all?The well-known Shared Responsibility Model states: Microsoft provides the infrastructure, but you are responsible for backing up and restoring your own data.In short: Microsoft protects against infrastructure, network, and hardware failures and takes care of maintaining the Microsoft architecture and software. However, Microsoft is not respo

System Center Virtual Machine Manager (VMM) centralizes and simplifies datacenter management by providing a single platform to configure, monitor, and control virtualization hosts, networking, storage, and deployment resources. Thereby, enabling administrators to efficiently provision and manage virtual machines and services across private clouds. Before integrating SCVMM with VRO, you must install the VMM Console on the VRO server. Else, the integration will fail. Note that, this article is a continuation of the following:Note: A Hyper-V cluster can be added to the Veeam infrastructure and is ready to serve as a source and target for backups, replication, and other operations.

My recent blog post was about installing the plug-in on a Windows server; this blog will go through the installation on a Veeam v13 software appliance.I recently deployed the Veeam Plug-in for HPE Morpheus VM Essentials version 13 (RTM) on my lab Veeam software appliance, which is running v13.0.1. Once tested, I'll have it available to demonstrate to my customers.Veeam has introduced a dedicated plug‑in that enables image‑level backup and restore for virtual machines running on HPE VM Essentials. This integration brings VM Essentials into the same unified protection workflow as VMware, Hyper‑V, and other supported hypervisors. The plug‑in is not bundled with the main Veeam Backup & Replication installer, so it must be added separately. What the Veeam Plug‑in for HPE VM Essentials DoesThe plug‑in extends Veeam Backup & Replication to understand and interact with HPE VM Essentials resources. Without it, Veeam cannot discover

Sometime last year, ​@ertelle1 created the below blogpost where she stated Veeam Recovery Ochestrator now supports Microsoft Hyper-V “Veeam Recovery Orchestrator 7.2 - Available Now!”With the current opportunity available to some of us as documented below, I have decided to create various articles to reinforce my knowledge.Since the Orchestrator server must be connected to the SCVMM servers or Hyper-V Cluster (which I no longer have in my lab) enviionrment. I will be showing you guys the steps to

A question I ask in all of my customer demos is, " Do you have a 3-2-1 backup strategy and most of the time, I get the answer yes. Other times, the answer is what is that? I’ll take that opportunity to educate them on what it is and how to protect themselves. In this article, I’ll go through what the 3-2-1 backup strategy is and how to implement the 3-2-1-1-0 strategy. IntroductionYou've probably heard the 3-2-1 rule a hundred times. Keep 3 copies of your data, on 2 different media types, with 1 copy offsite. It's been the gold standard of backup strategy for years — and for good reason.But the threat landscape has changed. Ransomware doesn't just encrypt your production data anymore; it hunts for your backups too. That's why the industry evolved the rule to 3-2-1-1-0, and if you're running Veeam in your environment, you're actually in a great position to implement every digit of it.In this post, I