Blogs and Podcasts

After the initial setup of Veeam Backup for Microsoft Azure I’ve had two different issues.The backup jobs finished with following warning:Crash-consistent snapshot of XYZ has been created. Cannot download VSS agent binaries from the storage account: The subscription is not registered to use namespace 'Microsoft.ServiceBus'. See https://aka.ms/rps-not-found for how to register subscriptions. Also FLR restores failed:Preparing worker for restore failed. Error: Cannot find any worker. Worker deployment failed, see logs for details Both of these messages had the same root cause and especially the first one already points to the right direction, the “Microsoft.ServiceBus” Resource Provider wasn’t registered in Microsoft Azure.The solution is really simple, just register this Resource Provider via the Azure Portal or use the Azure Powershell. Register-AzResourceProvider -ProviderNamespace Microsoft.ServiceBus I’m not sure if this Resource Provider should be registered by default, and if so,

Following the line of some of my topics, in Veeambp.com we can find a very useful unofficial tool                                                    This tool is not Veeam supportedIt was developed externally and is not linked with Veeam Software or ServiceNow in anyway, No support is offerred or inferred from Veeam Software on this tool. vSnow App is an application to integrate Veeam Backup Enterpriser Manager with ServiceNow vSnowApp for ServiceNow:The application offers integration with Veeam Enterprise Manager.vSnowApp provides following capabilities:Performance Dashboard Incidents Management Manage Backup Jobs. Failover Plans Agent Jobs Backup Servers Management How vSnowApp Works: vSnowApp function as an intermediary between Veeam Enterprise Manager and ServiceNow, after you deploy the vSnowApp, you can manage reporting and management of backup infrastructure from ServiceNow. Pre-requisites:ServiceNow MID Server Veeam Enterprise ManagerSupported ServiceNow Instances:New York Orl

Just a quick post on an interesting issue with the Guest Credentials test in Veeam Backup & Replication we’ve seen last week. Instantly after clicking “Test Now” in the Guest Processing section of a certain backup job, an error was displayed."Building list of machines to process Error: (Child group-vXYZ (Folder) for object XYZ was not found)"Normally you see such errors with vSphere when a certain object has been deleted or recreated. While Veeam displays names of objects, internally it works with MoRef IDs. So we’ve checked the job selection, custom credentials and the application aware processing settings. But all listed objects were still valid, especially no folders where used anywhere.We’ve contacted Veeam Support and had a remote session. The support engineer discovered some orphaned VM folders in the exclusions. After removing those, the error disappeared and the credential check worked again. From a logical point I thought those weren’t relevant for the check, so I didn’t c

Hello, everyone,I wanted to share the sizing of an accelerated WAN infra and the differences between WAN Low bandwidth mode vs WAN High bandwidth mode. The DR consists of 6 replica VMsSizing for Low bandwidth under 100 MBhttps://helpcenter.veeam.com/docs/backup/vsphere/wan_accelerator_sizing.html?zoom_highlight=sizing&ver=110 Using RVTool extract the list of VMs with the total Original VM on Source Vmware Tenant side: 1649 GB = 1.649 TB  · The connection between the client and the DR is a 100 Mb.Server1                                           1024 GB   Digest  2% 20.48                          Microsoft Windows Server 2012 (64-bit) Server2                                           200 GB    Digest 2% 4                                    Microsoft Windows Server 2012 (64-bit) Server3                                           150 GB    Digest 2% 3                                    Microsoft Windows Server 2016 (64-bit) Server4                                           200 GB    Di

While updating our VCSP stack with V11-RTM, I just stumble again onto this small but fine new feature to prioritize your primary backup jobs:More than once I had customers request several jobs to be finished with priority.You could of cause concatenate jobs with the schedule option “After this job:”. But this is not recommended as it does not use the ressources of your backup system accordingly. Valuable proxy/repo slots would linger out-of-work for quite a while.Overlapping jobs would lead to the second job jumping in with the first one still running, so saturating ressources. But this might easily oversteer and thus delay the first job.With the new option this problem can be solved by just the click of a checkbox.Prioritized jobs get a nice little flag in the job list. So how does it work?The Veeam scheduler runs all its tasks according to priorities:800: Restore jobs — restores are obviously the most important jobs 700: Continuous data protection jobs — new CDP ist also considered v

This no new part about what else is new in v12, because I this is great improvement in the upcoming release.With Veeam Backup & Replication (VBR) v12 it will be possible to use a Linux Hardened Repository (LHR) server as proxy server. Only limitation seems to be the transport mode. Only Network mode (NBD) is supported! This is because of security reasons. Network Mode was possible to implement without requiring root permissions on service. This is no show-stopper, because it is the most secure among all available transport modes. How does it workHow to get a LHR proxy server to work? It is simple as any other proxy server. Just create a new proxy server in VBR console:And select a LHR server in dropdown list:With that selection you get the information that only Network transport mode is supported for LHR.With confirmation, transport mode is set to Network in repository settings. Next I create a job that uses this proxy for backup. As backup target I use the local Hardened Repositor

While I was studying for the VMCE, a detail on deduplication caught my attention.I’m talking about inline deduplication. What's about?Inline deduplication is a feature offered by Veeam B&R and it’s used to reduce the amount of storage space required to store backup data by removing duplicate data. One of the main benefits of inline deduplication is in fact that it can significantly decrease the amount of storage space, amount of time and resources required for backups and this can be especially beneficial for organizations that generate a large amount of data on a regular basis.   Another advantage of inline deduplication is that it can improve the efficiency of backups, ‘cause backups can be completed faster and the amount of data that needs to be transferred and stored is reduced.  An example?An immaginary company named CatsFood has a file server that contains 10 terabytes of data and the organization wants to create a backup of this file server using, proudly, Veeam. Without inl

 Today’s post is a direct result of experience in the field, and it was certainly an interesting one!I was recently working with a customer that wanted to migrate to the Veeam Availability Suite. They had an Enterprise SAN solution that they were using for booting their VMware ESXi hosts, in addition to storing their workloads on. The customer’s virtual estate was large, with some servers that were highly transactional, and a great candidate for storage snapshots.Everything was going well, until I performed the storage integration with Veeam, and hit a severe issue. after performing the storage rescan, all of the ESXi hosts within the cluster suffered a PSOD near simultaneously. I’ve certainly never seen that before, and upon asking all of my peers in the wider Veeam community and even some Veeam technical contacts, NOBODY had seen this before. The Culprit: The issue thankfully was not one that required much troubleshooting to discover what was going wrong. Each of the ESXi hosts were

This has been a hot topic since some time: With administrative access to the VBR server, credentials stored in the configuration database can be decrypted.That may sound critical at first, but one shouldn't forget the important detail 'administrative access'.Veeam stores its credentials in an encrypted state using the Microsoft Data Protection API and a Machine key specific to the VBR server. This is a security standard and a safe way of storing passwords, while enabling the Veeam services to use those for authentication.And just like the services, an administrator can access and decrypt the credentials.This is no secret and Veeam has even published a KB article on how to recover credentials from the configuration database: https://www.veeam.com/kb4349And again, please remember that this requires administrative access to the backup infrastructure.In general an administrator or 'root' will always have the highest available permissions and therefore can do anything on a system.This is th

Recently I got this error below during the Oracle redo log backup:Oracle redo log errorMy backup job configuration is about a Veeam Linux Agent in an Oracle Linux and the application aware was configured to backup logs with 15 minutes interval and delete logs older than 24 hours:Application aware configurationThis kind of configuration is very common on critical databases and I have this same configuration in various environments.So, the first thing I assumed is that the cause of the problem was not on the Veeam side.Looking on Linux side I discovered that the user used on Guest Processing configuration needs to be part of the oinstall group on OS.So, the only thing I did was put this user on this group:usermod -aG oinstall <my_user>  After that, all Oracle redo logs started to being process successfully:Oracle redo log success 

Veeam Backup & Replication is a data protection and disaster recovery solution for virtual, physical, and cloud environments. With Veeam Backup & Replication you can Create crash-consistent and application-consistent backups of virtual and physical machines, quickly restore physical machines, EC2 instances, VMs, VM disks, guest OS files, and application items, perform a backup health check to verify that backups are not corrupted and are ready for restoring, create VM replicas and switch to them in case of a disaster and automate transferring of backups to tapes and other external repositories. Veeam Backup and Replication Configuration Database Settings come with the Veeam.Backup.DBConfig.exe utility that allows you to manage connection settings for Veeam Backup & Replication and/or Veeam Backup Enterprise Manager configuration database. Using this utility, you can:1. Connect to a different Microsoft SQL Server instance. If you specify a database that does not exist yet, i

The Veeam Legend programme is due to have its second intake in the coming weeks/months, and I wanted to put together a small collection of resources for people to find out more about this amazing sub-community. What is the Veeam Legends Programme? The Veeam Legends programme is at its heart, a Veeam community, its a sub-group of the wider Veeam Community Hub & R&D forums’ users. It was created as part of the ongoing recognition that Veeam wanted to give to its most active Veeam experts within these spaces.The Veeam Legends programme is one of three sub-communities within the ‘Veeam 100’ collective, with the other two being Veeam Vanguard and VeeaMVP. But whilst Veeam Vanguard focuses on external evangelism & activity, and VeeaMVP celebrates Veeam staff that contribute externally to the Veeam community, Veeam Legends is focused on Veeam platform-based activity. Are there perks to becoming a Veeam Legend? Of course there are! To date I’ve witnessed the following perks from th

Hi Folks,We have a real treat on our next Kubekorner show. We will talk to Yongkang He and will get a demonstration of Amazon EKS Cluster Automation & Protection. This is another “don’t miss it” show   

Show current job for each driveIt is just a small improvement but very helpful in daily tape operations. In VBR v12 console you will see the tape job that is currently using a drive.PowerShell newsWe get some new PowerShell cmdlets with v12 (beta):Find-VBRTapeCatalogItem Find-VBRTapeCatalogItemVersion Find-VBRTapeCatalogueHost Get-VBRTapeBackupSession Get-VBRTapeCatalogueDirectory Get-VBRTapeCatalogueFile Get-VBRTapeMediumForSession Start-VBRTapeFileRestoreUnfortunately I did not manage to get much data out of these new cmdlets. Will have to wait for availability of command reference guide. Something I still miss, is the ability to get the content of tapes with PowerShell. 

I was today the first day in the office after my vacation. After starting my VBR V12 BETA3 instance, I noticed that the trial license has expired at 12/31/2022.At login I was stunned that the second factor for login was not active.So, I had a look at the “Users and Roles” dialog and there was no checkbox “Require two-factor authentication for interactive logon” available.“Users and Roles” Dialog without “Require two-factor authentication for interactive logon” availableOK, the difference to my last login before Christmas is the expired license. I installed our NFR license and checked the “Users and Roles” dialog again.Now the checkbox “Require two-factor authentication for interactive logon” is available again and the 2FA is working again at next login.“Users and Roles” Dialog with “Require two-factor authentication for interactive logon” availableConclusion is that – at least with the BETA version – 2FA is available only with a valid license. Your installation is left without a more s

AWS CLI ProfilesIn my previous articles I used the AWS CLI to interact with the object storage platforms for demonstration purposes.  This article will focus on a very powerful feature of the AWS CLI, the usage of profiles.If you find yourself often interacting with several object storage platforms and/or use multiple object storage accounts, then using profiles for the AWS CLI will simplify your efforts.  It has for me. Creating the first profileFor an example, let’s say you need to access three object storage platforms regularly.  For the remainder of this article, the storage platforms will be:platform1 platform2 platform3You could use the “aws configure" command to reset your environment to use the credentials and region every time you switch to another object storage target.My first step is to see what AWS cli profiles I have configured and set:Let’s see what profiles are configured:aws configure list-profilesThere are no existing profiles, so let’s create one up for object storag

Hey Veeam community. I am starting my New Year’s resolution early and posting my first video on YouTube. It’s a walkthrough of Veeam Backup for Salesforce. I’m planning to post more videos as I find it helps deepen my understanding of various Veeam solutions. I hope to document some parts of Veeam products that I found challenging or hard to implement. I welcome all comments as I know there are a bunch of people here with much more experience at this than I have. Have a great rest of 2022! Cheers! 

One of my roles at Veeam is to work with our Technology Alliance Partners, resellers, and customers assisting them with their object storage related questions.  Quite often I need to be able to analyze the S3 API requests that Veeam’s software sends to the object storage repository.  One of my favorite tools that I use for this analysis is S3 bucket access logging.By enabling this feature on a bucket, you will be able to capture information on all requests made to that bucket.  Requests like PUT, GET, and DELETE are all gathered and stored in a log that you specify when you enable the logging. Please Note: Not all object storage solutions support the S3 bucket access logging, so make sure that you check their documentation and/or support to verify that they support it.You can either use the interface provided by your object storage solution or you can use the AWS CLI.  In this article I will use the AWS CLI.The first step is we need a dedicated bucket to store our S3 logs in.  It is a

It shouldn’t be news to you that Veeam B&R had 2 critical vulnerabilities (CVSS 9.8/8.8) in March 2022. Patches were released for v10a and v11a at that time.Here’s the corresponding KB article and a post from @Iams3le:Veeam KB4288If you haven’t updated yet, then here’s another good reason.Last week the Cybersecurity & Infrastructure Security Agency (CISA) added both vulnerabilites to their known exploit catalog. This means that attackes are now actively exploiting the vulnerabilities and targeting environments which use Veeam B&R.CISA Known Exploited Vulnerabilites Catalog I hope you don’t need more reasons to keep your Veeam installation up-to-date? Please also keep in mind that any other Veeam build below v10 is also affected. But as those are already End of Fix/Support, they didn’t receive any patches.

When it comes to sizing a new Backup environment or just new repository server, one metric that is always asked is the daily change rate. You can also see in the most popular - unofficial - Veeam sizer:https://rps.dewin.me/ https://rps.dewin.me/rpc/      Even with VeeamONE it was not simple to get this information easily for VMs and physical machines. This gap was closed with the version v11a of Veeam ONE. The previous report named VM Change Rate History was replaced by the new Data Change Rate History. Fortunately not just the name changed, it also gets some new features!What's new in report configurationIncludes Agent backups. Now these job-types are supported: VM Backup Replication Agent Backup   You can select the base of change rate calculation: Data transferred or read.   What's new in the report itselfIncludes a nice graph for change rate history - for VM and agent data. Includes daily change rate. In Summary In detail - per machine   This is a great help for siz

There has been a significant focus on how to make Veeam Backup resilient to ransomware.  More specifically - how to have Veeam backups available for recovery in case of an incident.In the past few months, I have had discussions with customers who have successfully recovered their production data after a ransomware attack. The common theme among these successful recoveries has been the availability of a secondary off-site copy of their backups to recover from, as their primary backup repository was compromised and destroyed outside of the Veeam software.Veeam ransomware protection should be the customers’ focus, and it is always a priority goal in my architecture designs. Secure by design is also a core design principle of the Veeam Architecture team.Off-site backup copies can provide an additional layer of data security:They are usually behind a VPN with a robust firewall deployment They are typically kept on a different network segment They often use an additional authentication metho

Hola!Esta entrada no es nada “tech”, es de comunidad y de ayudar a los demás!En esta ocasión, ayudar a otra comunidad creo que es el mejor regalo que podemos hacer, ya que el enfoque de todo esto es colaborar y ayudar!Por suerte y desgracia, yo pertenezco a estas dos asociaciones, hacen una gran labor, y gracias a su trabajo y cariño, muchas familias pueden atender a sus hijos, y aliviar un poco su carga!Si quieres colaborar, o no sabes cómo ayudar, sigue los enlaces y colabora, puedes hacer un donativo, o comprar un regalo para alguien en su tienda solidaria.Asociación NUPAAsociación MENUDOS CORAZONES Regala pensando en los demás!Luis.Hi!This entry isn't “tech at all, its about community and helping others!In this post, I believe that helping other community is the best gift we can offer, our focus as a community is always that, sharing and helping others!fortunately and unfortunately, I do belong to this two communities, associations, they do a great job, and thanks to that, and also

Os dejo el webinar que hicimos junto con Wasabi sobre Protección moderna de datos con almacenamiento S3 Object Storage, de la mano de la Comunidad de usuarios de Veeam, Victor Perez de Mingo y Wasabi. 

Hi all In this post I want to describe my personal experience in preparing and taking the VMCE exam.I know that there are some other topics written about the VMCE exam, like a good post of our top legend @MicoolPaul 😉, but I also want to share my personal experience.It’s very hot these days because some of our legends have recently received a free VMCE course of VEEAM. How cool is that from Veeam 😊.So especially for these co-legends (and in the meantime I luckily have met them in person at the Veeam 100 Summit event 😊) and hopefully other people wanting to take the course and exam. Requirement : Yes, indeed taking an official 3-day VMCE course is a requirement before taking the VMCE exam.For me it’s almost 5 years ago that I took the VMCE course – version 9.5 at that time. Because I work for a certified Veeam reseller and service provider, one of the requirements is that we have to have at least 1 VMCE in the company if we want to keep a Gold Partnership with Veeam.Because I’m the o

Veeam has just released a warning about a potential data loss issue for the Cloud products (AWS, Azure, GCP).IssueAccording to the article, data loss can occur in the background during the movement of backup objects.Affected versionsThe following versions are affected:Veeam Backup for AWS 5.0.0.452 Veeam Backup for AWS 5.1.0.39 Veeam Backup for Microsoft Azure 4.0.0.679 Veeam Backup for Google Cloud 3.0.0.859SolutionHotfixes have been released for the 3 products and it’s advised to install the update immediately.Veeam Backup for AWS 5.1.1.8 Veeam Backup for Microsoft Azure 4.0.0.705 Veeam Backup for Google Cloud 3.0.0.868Besides that, Health Check should be enabled for all policies in order to notice any backup chain problems.For more information visit KB4383