Blogs and Podcasts

Hello everyone, I'm continuing my exploration of Veeam v13. Today, I'm sharing with you a presentation of the Web UI and the thick client. In this first section, we will cover:Configuring a component via the WebUI Configuring a component via the thick client Configuring a backup job from the WebUI Performing a restore from the WebUIEnjoy the read!Find my previous article here :  1. Veeam Software Appliance WEB UI / Console⚠️ Reminder: We are testing a beta version here. Some features are still missing, incomplete, or may not be included in the final release.Deployment: In this Beta version, to deploy V13 as a virtual machine, the following prerequisites are required:Two hard drives of at least 256 GB each are mandatory. I have allocated 4 vCPUs and 16 GB of vRAM. Rocky Linux is used as the OS type, as this is what Veeam uses here. A paravirtualized SCSI adapter will be used by default.Additional Information:The design of the WebUI interface is 80% complete. The thick client interface i

As promised in Part XV, today we will be looking at common environment architecture topics. These are very important parts of planning and operating a secure backup environment.Of course, the backup environment cannot be viewed in isolation from the rest of the IT landscape. Everything interacts and influences each other. There are specific requirements for backup, but most of the considerations in this text also apply to the production environment. However, I will still refer to the backup environment in this text.But – as always – it is not an aspect that alone leads to a secure environment. Therefore, in this context we will also look at some side aspects in general.Designing an effective backup environment architecture is pivotal for maintaining data integrity, availability, and security in today's data-centric world. What are the main threats to backup data?Wrong placement of backup environment components Hardware damage to backup systems Power outages or disasters at one location

If Oracle backup provided over backup job with application aware processing, has limitation with restore i regards of number of channels. Restore via gui is possible over Veeam Enterprise and via Veeam Oracle Explorer:Veeam Enterprise Manager is restore possible only via 1 channel Veeam Oracle Explorer by default has set 1 channel To change number of channels for Veeam Enterprise manager is not possible, but is possible to change number of channels via Veeam Oracle Explorer via config.xml file: %programdata%\Veeam\Backup\OracleExplorer\Config.xml Content example: <Veeam>  <OracleExplorer>    <Oracle RmanCopyJobChannelsCount="4" />    <Oracle RmanCopyJobChannelsByDatafilesCount="true" />  </OracleExplorer></Veeam>  Our tests speed:>> - 1 channel: - 115 GB, 18 mins 109 MByte/sec>> - 4 channels: - 115 GB, 15 mins 130 Mbyte/sec>> - 12 channels: - 115 GB, 14 mins 135 Mbyte/sec The speed could not be much difference, but in case of TB of

Hello Veeam Community, I want to share a recent experience I encountered with the Linux-based Veeam Backup Appliance (used via plug-in to protect GCP workloads). This is part of our growing environment where we use Veeam Backup for Google Cloud. Issue Summary:Yesterday, I ran into a serious issue where the backup appliance became unresponsive. Here’s what happened: Problem Description:Appliance DB disk was full this caused log files to pile up. Logs were not auto-deleting, consuming critical DB disk storage space. The appliance showed the following errors below: "Failed to get server IP address" "Backup Appliance is unavailable"The Veeam plug-in was unable to communicate with the appliance, and no backups could proceed at that point.    Root Cause:The database disk inside the appliance reached full capacity. ( Above Screenshot ) Logs under the appliance’s backup storage directory were accumulating over time. The appliance could not boot its services properly due to no free space, which

I had the chance to spend some of my evenings on adding some more functionality to my little pet project… or as I have been referring to it, the RVtools for your Cloud and Kubernetes environments and platforms. We already had the ability to grab details on your Kubernetes, AWS and Azure resources, I also did add some Veeam Backup & Replication inventory as well. With this 0.0.3 release we added Google Cloud Platform (GCP) and Terraform State File inventory. But probably the biggest feature has been around the user experience. The concept of the tool was to be able to use either the CLI or browser and this remains the same but the UI now can be used with a lot more flexibility. I did a full on demo session of the state of the project and would love to get your feedback. What should I add next? What are we missing? What doesn’t work?  Project can be found here - https://github.com/MichaelCade/kollect  

 Recién integrándome al grupo, me llamó la atención el sistema de insignias (badges) en el perfil de muchos usuarios. Esa curiosidad me llevó a investigar más sobre cada una, y aquí te comparto lo que descubrí 👇En la Comunidad Veeam, tu participación no pasa desapercibida. Cuanto más compartes, ayudas o lideras... más visibilidad y reconocimiento puedes ganar. Desde certificaciones hasta hackathons, hay una insignia para cada perfil.🧑‍🤝‍🧑 Comunidad y Reconocimiento🏅 Medalla 🎯 ¿Cómo la consigues? 🐼 Veeam Legend Ser constante, activo y colaborativo en el Hub 🛡️ Veeam Vanguard Postularte con aportes técnicos relevantes (blog, labs, presentaciones) 🧠 Top Contributor Publicar y responder con contenido útil y validado por la comunidad 👑 Top Panda (1000+) Acumular karma por tus contribuciones valiosas 🎓 Certificación y Especialización🏅 Medalla 🎯 ¿Cómo la consigues? 📘 VMCE Aprobar el examen de Veeam Certified Engineer 🌟 VMCA Obtener la certificación como V

 Over the last few years, the time to execute ransomware attacks dropped 94%; now, criminals take, on average, just 3.85 days to deploy a ransomware attack.On the other side, according to the “Veeam Ransomware Trends – 2023 Global Report”, recovering the affected environment after a ransomware incident takes an average of 3.3 weeks of work, equivalent to 136 business hours of business downtime.Here is the link for this Veeam’s report:https://go.veeam.com/ransomware-trends-report-2023Along with exploiting application vulnerabilities, hackers heavily utilize client-side compromise techniques to deploy ransomware.In each attack, criminals must take well-known steps to reach their targets. Based on this, models were created to identify and prevent cyber intrusion activity. One of the most famous is the Cyber ​​​​Kill Chain, developed by Lockheed Martin.For this purpose, we will focus on four stages of a client-side attack: delivery of exploitation, installation, command-and-control, propag

In part I of this series we have seen how to move a tape library with all data to another VBR server which has already data on it.https://community.veeam.com/blogs-and-podcasts-57/veeam-and-tape-i-moving-a-tape-library-with-data-from-one-vbr-server-to-another-1654 The open question was, how do I get my tapes with data to the correct media pools without losing my data…When you select to move a tape to a media pool the following message appears:So, the tapes are marked free, and the data is lost when a tape is moved? A quick check of the helpcenter and the forums says exactly this…https://helpcenter.veeam.com/docs/backup/vsphere/moving_tapes_to_custom_pool.html?ver=110But is this correct?Fortunately, it is not. The tape is marked free when it is moved, but the data on the tape is not lost. Its metadata is deleted from the Veeam database – and this can be recreated. All the tapes from the new library are assigned to the pool “Imported”   Move the tapes to their corresponding media pools.

Scenario:Very recently a customer asked me if Veeam could leverage Data Domain mtree replica for DR purposes.Of course, the answer is YES! While this idea is not new, I thought it would be a good reminder of Veeam’s backup import capabilities. Steps:You must use Data Domain repository on the source site. It most likely will be declared as a DDboost share. The mtree should be replicated to the DR site. Note that the mtree replica will be Read Only! The mtree replica needs to be exposed as a share over your protocol of choice (CIFS, DDboost), so it can be defined in the DR VBR server. In this example, I chose DDboost.Note again that this DDboost share is Read Only! The last step is to declare that DR DDboost share and import backups You should now be able to access these backups from the “Disk (Imported)” section. Remember that you will have to manually rescan that repository in order to refresh new “mtree replicated” restore points.

Hey all,I'd like to share an experience I encountered with one of my clients who uses the Virtual Lab functionality to test their backups.Problem:Suddenly the SureBackup starts to fail. When the SureBackup job launches, it fails during VM registration with vCenter Investigation:My virtual labs are properly set up in Veeam and the association with the ESXi is OK. As a reminder, a Virtual Lab must be assigned to a unique ESX host. If you move the Virtual Lab Vm to another ESX, your jobs will failed. On the vCenter side, all virtual labs are presents in their respective folder.But I noticed that the Resource pools are all missing.My client is using DRS in his Vmware infrastructure, I asked him if DRS has been disabled recently and the answer was : YES!Impact when DRS is disabled:As resource pools are a bit of DRS functionality, they are deleted when DRS is disabled.Solution:You may turn off vSphere DRS for a cluster.If you disable vSphere DRS, the resource pools are removed from the clust

VM networking was much simpler. In VMware, there is a lot of planning when managing the network. You create virtual switches per host and assign properties like MTU size, VLAN, etc and pair those with physical NICs. You setup VMkernel NICs with specific roles to control host traffic. With Scale computing, you set a native VLAN on the physical switches and use standard VLAN Trunking to the host. You assign an IP on the management network which uses the default VLAN and then tag VMs on their virtual NICs directly, skipping all the complex concepts of a vSwitch. A separate Linux bridge with different physical NICs or a subinterface with a VLAN is used for the cluster backplane used for storage and inter-node cluster communication depending on how many NICs the host has. If a VM needs to be on multiple networks, you can assign one NIC with a certain VLAN, and another NIC with a different VLAN. You can also choose not to tag at the port and let the guest OS setup VLAN tagging, similar to as

In some situations/scenarios it is absolutely necessary to move the Veeam Configuration Database (PostgreSQL) to another hard disk of the Backup & Replication Server (e.g. if the C: partition is too small). After installation, the Postgres databases are located under: C:\Program Files\PostgreSQL\xx\data (Unfortunately, the path cannot be changed during the Veeam installation).Moving the PostgreSQL database is actually quite simple and can be done with pgAdmin. Before you start the migration, you should create a VMware snapshot and/or a Veeam Configuration Backup.Download pgAdmin from their website (pgAdmin – PostgreSQL Tools) and install it on the Veeam Backup & Replication Server.Add a second hard disk to the VBR server and create a folder for the database in it.Because the PostgreSQL service runs under the “Network service” account, the folder must be correctly authorized. To do this, add the “Network service” user with “Full control” to the folder under “Security”.Stop the V

 We've been a certified Scality ARTESCA partner for almost six months. In addition to my lab installations, I've already deployed four productive ARTESCA systems for our customers, both single-node and three-node cluster systems.Since the beginning of June, version 3.1.1 has been available for Scality ARTESCA.  Documentation & Release NotesThe corresponding documentation and release notes can be found at https://documentation.scality.com/ . Access is via OneLogin with an existing Scality account. To upgrade from version 3.1.0 or 3.0.X to the latest version, follow the steps described here: https://documentation.scality.com/Artesca/3.1.1/upgrade.html . Or check out the step-by-step process in the corresponding blog post here 😉.  ARTESCA UIAfter successfully logging into the ARTESCA UI with the appropriate authorization… …we are greeted by a notification that a new ARTESCA version is available.The update components can be downloaded via the ARTESCA UI, as in this scenario, with the

Using S3 Object Lock’s Governance mode with Veeam Backup & Replication v12.1 Veeam Backup & Replication (VBR) v12.1, which was launched in December of 2023, has many great features and new capabilities.  One of those features is the ability to use S3 Object Lock’s Governance mode when you setup an object storage repository to be immutable.  The purpose of this blog is to introduce you to the Governance mode and how to use it within VBR 12.1.So, what is Governance mode?  To answer that I first need to briefly explain S3 Object Lock.  It is a feature of S3 and S3 Compatible object storage to prevent objects from being deleted or modified until the object lock retention has been met and the lock expires. There are two modes for the object lock retentionCompliance GovernanceCompliance mode has been used by Veeam Backup & Replication since v10 of VBR was released in February of 2020.  Compliance mode locks the objects with a high level of strictness.  This strictness includes: p

For those with IBM Flash System Storage, you will have noticed a surprise at the end of your 12.2 upgrade. It will ask you to install the plug-in on your Veeam server at the end of the process. It will also tell you that backup jobs may not work properly until you do. The first take away is don’t start this upgrade at 3PM on a Friday thinking you have plenty of time to upgrade your entire Veeam infrastructure before the end of the day.  This extra step didn’t take too long but still added some extra time to the process. As with anything, check the release notes, and compatibility with all hardware, software, and firmware before doing installs on production servers.   This is a very simple install that requires hitting next a few times and waiting.  Setup In this test, I’m using both backup from storage snapshots, as well as snapshot only jobs. Snapshot jobs are easy to configure as seen below.For the backup repository, choose snapshot only. If you configure a secondary destination, you

I had the discussion two times last week, so I think it is worth sharing here.You may have noticed, VMware deprecated image level backup of its vCenter Appliance (VCSA) with vSphere 7. What does this mean? Basically, it is still supported to do image level backup and restore with VCSA 7.0. But it will not be supported in future releases. Notice that U1 and U2 are still 7.0 versions. With 7.n, with n>0, VMware will not support image restore of VCSA any more. From my perspective, this step was taken because problems arise when restoring this Linux appliance. I have seen many appliances requiring a filesystem check after restore or crash. When you are lucky, everything works fine afterwards. If not, you have to file a support ticket.To avoid this, VMware offers a new way for VCSA backup. Since 6.5 it is possible to run file-based backups and restore of VCSA. Since 6.7 this can be scheduled. With this, new protocols are supported as well: FTP, FTPS, HTTP, HTTPS, SFTP, NFS, or SMB. Pleas

If you have usecase to change location (disk) of PostgreSQL binaries with databases, where is not an option by Veeam wizard and change user, and if you need to change from default postgres user to different one. Or only one of the option.My usecase is to change from D:\ to E:\ drive and change back from non-standard user veeam to postgres due custom installation of PostgreSQL.Changing user of databases is possible, but not for templates, so easy. This usecase is for administrators with minimal knowledge, so via easiest way :) Stop Veeam Services After Veeam application is down, change on PostgreSQL could be provided.First is needed to create postgres user as is missing due custom installation (not via Veeam wizard). This could be done for existing role.Change postgres back as roleSet user as owner of databases - VBR and EM.      Changing from veeam user to postgres userVBR DatabaseEnterprise Manager DatabaseChecking of ownership via psql.OwnersLocal backup of all      This Dump will be

One of the standout features in Veeam’s arsenal is the ability to verify backups in an isolated VMWare and / or Hyper-V environment using SureBackup and DataLabs. These tools allow organizations to automatically spin up virtual machine and agent-based backups in a secure, sandboxed network…. often referred to as a “Clean room”, where Veeam can (but not limited to):Ensure the backup does not contain any malware / ransomware / virus’ Check for file system consistency Verify application services start as expected Perform custom script checks to validate functionalityWhile these capabilities shine in an on-premises VMware and Hyper-V environment, verifying backups in Azure brings a different set of technical challenges:No vSwitch / vRouter control in Azure Lack of deep VM network customization No ability to intercept or NAT Traffic Azure resource constraints and API GapsWhile Azure presents challenges, the importance of verified, clean backups remain critical. Even with these challenges, w

When discussing Azure App Registrations backup and recovery, one question that often comes up is, “How does Veeam handle secrets and certificates that are embedded within these registrations?”. It is a great question and I wanted to take the opportunity to double click on this.Client Secrets:Client secrets in App Registrations are treated similarly to passwords. Once a secret is created, its value is only displayed once and is never retrievable again. This behaviour is by design, enforced by Azure and Microsoft Graph to maintain strong security hygiene.It is because of this that:Veeam does not back up or restore the actual secret values as that data is not exposed by the Microsoft Graph API. Veeam does capture metadata such as secret names, creation dates, expiration dates, and key identifiers. The secret value itself must be stored securely elsewhere, such as in Azure Key Vault, at the time of creation. Here is a great post from ​@johan.h which shares how to leverage Veeam to protect

Hi Folks, My name is Geoff Burke. I am Community Manager at Object First. I am a Veeam Vanguard and Veeam Legend. I was asked to write something about the Veeam Community and do a short video for the Spotlight series.  Being part of the Veeam 100 Community has been truly a transformative experience for me. I was accepted into the Veeam Community as a member of the inaugural Veeam Legends in 2021. Since then I have been lucky enough to renewed numerous times and was also accepted into the Veeam Vanguards.Make no mistake, the Veeam Community is not about you or me, it is about us! The people you engage with in these communities are top professionals and are very generous when sharing their knowledge. They help you become a better data protection expert and grow. You make friends around the globe and these relationships really to enrich your life.Most importantly the Veeam 100 community is fun! The yearly summits in either Prague or Berlin are the highlight of the year, where you not only

Out-of-the-Box Immutability (Ootbi) is a purpose-built backup storage appliance developed by the founders of Veeam, specifically for Veeam!OOTBI delivers secure, simple, and powerful on-premises backup storage without requiring any security expertise. It will interest you to know that we have discussed extensively the steps to set up, configure and integrate OOTBI with Veeam. Please refer to the following links on the steps to set up and configure a physical appliance.If you're unable to test or purchase the physical appliance, you can still explore OOTBI using the virtual Storage Appliance (vSA) in a virtual environment, as demonstrated in this guide. If you have access to a vSphere environment, follow the steps below to set it up in your labIn this guide, I’ll show you how to deploy the VSA in a Proxmox VE environment. Additionally, here’s a complementary resource showcasing Veeam Hardened Repository (VHR) installed and configured on Proxmox VE.Note: Because you cannot run a Type 2 h

升级到 veeam v12.3.1.113，但此客户端更新界面无法关闭。我该怎么办？

当前的 VBR 版本是 v12.1.156，我需要升级到最新版本的 veeam，即 v12.3.1.113，但它提示备份任务正在运行。我该怎么办？ 

Dear Community,My recommendations: before upgrading the VBR Application, first upgrade the connected appliance.Upgrading the Veeam Backup for Google Cloud (VBGC) appliance from version 5 to version 6 is a significant process that involves an automated sequence of steps. This upgrade not only updates the VBGC software but also transitions the underlying operating system and database to newer versions. In this article, I share my firsthand experience with the upgrade, detailing each step and highlighting important considerations to ensure a smooth transition. Prerequisites before initiating the upgrade:Green Highlighted is very Important Part and all upgrade depend on it.Verify Compatibility: Ensure that your current VBGC version is 3.0 or later. Backup Configurations: Although the upgrade process creates a snapshot, it's advisable to manually back up your configurations. Check Permissions: Confirm that the service account used has the necessary permissions, including compute.instances.s

I shared with the Community last week how to configure Veeam HA in the new VDP v13 BETA Preview. If you'd like to see those posts, here is Part 1 and Part 2.I want to switch gears a bit and now take a look at Veeam's new ability to create Custom Roles in the Remote Console. Before diving into this topic, as with my other posts…let me share a few disclaimers:> As is stated in my blog title, the build I'm using is a VDP v13 BETA build. Buttons, topics, functionality, feature location, role types, etc may change when this version reaches GA> Because of the above, how I show you how to configure custom roles now may be a little different in the GA versionWith those out of the way, let’s now configure a couple custom roles.Introduction Before showing you how to configure custom roles, let me go over a few talking points about roles in the new VDP v13. In this new version there is a newly added Security Officer role. This is not a role configurable in the Web UI or Remote Console (RC).