It is worth noting that Object First Out-of-the-Box Immutability (OOTBI) provides true data immutability and is very simple to deploy, as we will see shortly and addresses the issue of slow recovery times that can make ransomware attacks damaging to operations and reputation.
I will recommend deploying an OOTBI appliance due to the pervasive nature of cyber-attacks on data protection infrastructure (backup). With OOTBI, you will achieve efficient data recovery, a user-friendly and cost-effective solution that can effectively stop ransomware attacks. As you all know, this storage solution was purposely built for Veeam.
Before using this guide, read the following articles below
Please follow the steps below to integrate Object First OOTBI with VBR. You may want to take a look at the original blog post for more information.
Create an S3 Key
In the previous guide, we have discussed the various ways to access Object first OOTBI web interface. Upon login, we will have to create an s3 key. To do this, click on S3 Keys
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/6133d984-c703-4374-a9c1-72cf13d18c25.png)
Click on Create Key
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/c9703d7d-3503-49d9-93e1-0449c79cd3eb.png)
As you can see, our key has been created. Please endeavour to save the Secret Access Key as you may not be able to view this in the future upon closing the window.
Note: If for any reason you are unable to view this secret access key, you can create a new access key and utilise it for your backup need.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/792ef4fa-5885-456c-9567-50ff379c373a.png)
Create S3 Bucket
To do this, click on S3 Buckets as shown below. Click On “Create a Bucket.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/54f074b8-7bf9-4695-8078-7f3caf09e117.png)
Enter the bucket name based on your naming conversion. What is OOTBI without immutability? Therefore, ensure you Enable versioning and this is a requirement for immutability.
Note: When this feature is enabled, you must check the box to make backup immutable for a period of time in Veeam Backup and Replication. Else, an error will be prompted. We will see this very shortly.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/2f5945f5-4ee0-401b-bec1-92f0d9aff96d.png)
Our S3 bucket has been created. You can now close using any of the functionality below.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/c07745df-9f5b-4266-9683-eb6008b4457e.png)
Add OOTBI as an Object Storage on VBR
To do this, let us access the Veeam Backup and Replication console by clicking on the shortcut and connecting to it.
Next, navigate to Backup Infrastructure view and click on “Add Repository”. In VBR, there are different ways to achieve this as shown below.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/6b10012c-51a2-4737-bbd2-4454cae8eb2e.png)
Select “Object Storage”
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/b6401589-2bcf-4021-9c21-6306fe17551d.png)
Select s3 Compatible
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/a6cd87fc-2d0e-4f66-a081-81d7e7598c08.png)
I will go with the first option “S3 Compatible”
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/a026f39f-5bf2-4561-bba8-1887eccf7e6a.png)
Enter the name for your Object storage repository. You can also enter a description if you wish and click Next to proceed.
Note: I have decided to leave out the concurrent task. Limit the concurrent tasks value to 4. For on-premises storage, increasing the number of concurrent tasks does not improve performance and can cause resource overhead due to more connections involving more resources in data processing. Four connections avoid overhead and ensure optimal performance.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/2b9e21ea-14c5-42f0-9022-4756a9fde61f.png)
avigate to the OOTBI web UI. On the dashboard, you will be able to find the service point we will be using in the next VBR configuration. Enter the Service Point URL and specify your region. Since this is deployed on-premise, leaving this field blank does not work. Next, add the previously created S3 Key by clicking on Add.
Note: For the connection mode, I am okay with the Direct Mode. This ensures that any job managed by the VBR can access he object storage directly.
Please provide the access key ID and secret access key and click on OK.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/6c49abc7-678e-4d73-bce1-a7443fc2f87a.png)
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/e5bd5acb-ca40-47d4-bc5d-58b6d5ac0f6b.png)
On the Certificate Security Alert, I will click on Continue
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/3efb7c20-c81b-4609-a125-b7cd645154e8.png)
Let us click on “Browse” to add our S3 bucket as shown below.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/f472ed28-6f63-44b6-bf10-f312ce562e9e.png)
In the lists of Buckets, please select your bucket and click on OK
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/cef85713-c9ad-4921-9556-847f386ddeb1.png)
Also, let us select the folder. By default, these folders are not created. We will have to create on. To do this, click on”Browse”.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/ea0c55eb-c335-4f8d-9cfb-6c602ce7b845.png)
Click on New Folder
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/6a212cb2-4871-41c3-bd8a-b4bc887b3d1b.png)
Enter the Folder name and click on OK. When this folder is created, the folder name cannot be changed, and the folder can only be removed using an S3 browsing tool.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/2628a845-be4f-4ee5-a6c5-aa5901d66156.png)
Next, we will have to enable the checkbox to make recent backup immutable for 31 days.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/d1dbc0f2-7edf-4b25-9252-6c93a15bf449.png)
Note: If you do not select to make the recent backup immutable. You will get the error below. Why is this so? This is because we had previously configured the the bucket as immutability in the OOTBI web UI above.
Next, I will select the mount server, and the instant recovery write cache folder. I will just click on next to proceed here.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/7d1ee227-0ee0-4375-b09b-eca6ae1f3b5c.png)
The following components already exists. Click on Apply to proceed with the creation of a new object storage repository.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/54416f52-bb3f-49f4-9ac0-e5be8b5ca432.png)
The settings have been applied. Click on Next to continue.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/4551335e-96cf-4267-b50b-1335b990c67b.png)
Click Finish on the Summary window as shown below.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/95fc3f58-39ec-473a-91dd-39007391e1cb.png)
As you can see below, we have successfully created our OOTBI Object Storage Repository, and this is all that is needed to integrate ObjectFirst OOTBI Appliance with VBR.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/8a9d20b8-3137-4434-a081-6c59a9a83abb.png)
Now that we are done adding OOTBI as our backup repository, We have to create our backup.
To do this, click on the “Home” view and then select Backup Job. You will also need to select the job type. In my case, it is a Virtual Machine as shown below.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/0be6f922-aa88-4e69-999a-05b08734e511.png)
Enter the Backup Name and description.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/56cbf359-1557-4812-8ff2-8f8c5f6f3a5a.png)
Click on Add to select from the list of VMs and click on Next. Ensure you select the desired VM
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/3c514115-bc34-48ca-98d8-1e3ed404d2ea.png)
Click on Next to proceed
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/a3696c61-e7b7-49ea-bf4c-2dadbf363d3e.png)
In this field, you must ensure that the right Object Storage Repository is selected. You should configure a secondary location for this backup as a best practice. Configuring a secondary backup location is important to ensure redundancy and reliability in case the primary backup location fails or becomes inaccessible.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/e184b7f9-9916-4846-acf2-d3ba6ef9d169.png)
Select “Enable application-aware processing” as shown below as this is a Domain Controller (DC). This will require you to enter the Guest OS credentials. Click on Next to proceed.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/76b46190-4720-493b-af84-6576acf33d47.png)
I do not care about automatic job schedule because this is different for everyone. Click on Apply.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/1420895d-3e9a-4898-be3e-a1e16e09056e.png)
To run the job, click on “Run the job when I click Finish”.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/34427c05-bc4e-46b7-b31a-659e5aa1fc53.png)
As you can see below, our backup has succeeded
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/56fe7bbe-fbdc-4668-ae3e-11687cda5dea.png)
Now that our backup is successful. I will also want to show you how fast to perform a VM restore. From the inventory pane, I will select Object Storage and locate the Job as shown below
BTW, I really appreciate how Veeam allows you to execute processes in multiple ways similar to Windows. You can initiate a restore by clicking on the Home view, using the navigation pane, or accessing the ribbon for your backup restoration
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/2719c26e-d4bf-4004-b170-d60950b8443b.png)
Add the VM restore
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/460a821a-d4c5-494c-b940-934c4c3a6532.png)
I will be restoring to the original location
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/973f1786-c965-456d-bc3f-0c3b24529e0b.png)
At this time, I am not interested in any of the secure restore scan. I will show you this in the next guide. Click next to proceed.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/968309ef-f0cd-46fa-aafd-93dc4e0a4e9d.png)
As you can see below, the original VM has been marked for deletion.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/3552a389-88f8-4924-bebd-ef53d2e37ca4.png)
I want the VM to be powered on after restoring it. Therefore, I will click on the checkbox and then click on Finish.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/30a0fa41-0774-4762-a790-576ed0c83ee5.png)
Our VM has been successfully restored as you can see from the log.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/db930bc8-0ac4-4904-afc2-1fffc3751f26.png)
Now you can navigate to the OOTBI dashboard to view essential data, including available storage capacity, storage capacity trends, system alerts, network throughput, S3 operations, and overall system I/O.
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/016c3fff-9978-458f-ba16-ea70c82e1623.png)
The S3 Buckets view displays cluster capacity utilization and data distribution by nodes. This menu also allows for S3 bucket management, including the creation and deletion of buckets as demonstrated earlier
![](https://uploads-eu-west-1.insided.com/veeam-en/attachment/2425fb1c-1b95-4a9e-81ed-d102c1c7354c.png)