Community

BackgroundRecovery tokens are available for agent and plugin backups. They allow for easy and secure access to backups within repositories from a remote system, without the need to allow access to the full repository via credentials. To keep things easy, Veeam decided to have a fixed timeout for these tokens of 24h once created. This is usually sufficient for most recovery cases. So, the token is delivered to the workload owner and he can recover his - and only his - workload within these 24h.Creating Recovery Token - Veeam Agent Management GuideCreating Recovery Token - Veeam Plug-ins for Enterprise Applications ChallengeWe recently faced the challenge to recover a large SAP-HANA system of more than 10TB database size. From the repository used (a Dell DataDomain in our case) the recovery took more then 24h. Therefore, the recovery will fail, as the token times out during the recovery. SolutionThere is no way to have VBR create longer valid tokens from the GUI. But there are PowerShell

Greetings community, it was so good seeing you last week. We've discussed during the sessions, and after about the strict DISA STIG password complexity, and password rotation, there is a forum on the public VBR when using hundreds of appliances. Since then I couldn’t sleep properly as I imaged myself changing dozens of appliances with the 2 default accounts. So I’ve built an script of course.TLDR Automate rotation of local OS accounts on VSA, Hardened Repos, and VIA nodes through Host Management API only. Handles OTP, does self change for veeamadmin, proper self flow for Security Officer, writes CSV for your vault. GitHub Code on GitHub: https://github.com/jorgedlcruz/veeam-appliance-password-rotate Important NOT OFFICIALLY SUPPORTED. Use at your own risk. Protect your env files. Move CSV to your password manager then delete local copy. Test in a lab first. What you get API only. No SSH into nodes. OTP prompt or TOTP secret. Self rotation for veeamadmin (uid 2000) using /v2/users

Hi,I have a few backups running to a Repository on an NAS, shared by nfs3://[IP ADDX]/Backups/etc…It works fine for my esxi backups. I’m trying too backup a hyper-V VM and and getting the below message. It does succeed in creating as folder in the repository for the packup to go, and the permissions are are same as the others, so I’m not sure what credentials its trying to use since it’s writing to the same place that works for other backup jobs:“… Processing … Error: Failed to reset previous connection exception: Permission deniedFailed to open storage for read/write access. Storage: [target path] ....Agent failed to process method {Stg.OpenReadWrite}.  “I’m not sure if this means it can’t read the source or can’t write the target. If the former, what do I have to do because use a local admin to access the source? If the letter, why can this job not write to the repository when other jobs can?Thanks, 

Hey everyone, I started a blog series for my obsession topic “Object Storage” and created 4 blog posts on “everything you need to know to size and architect for Object Storage”. My last and final one was around Benchmarking, which you can find here. Part 4/4 https://www.virtualhome.blog/2025/11/04/veeam-object-storage-benchmarking-part-4/This last part of the series concentrates on how to benchmark object storage systems and how to benchmark “Veeam I/O patterns” + “Object Lock Retention” settings. Feel free to have a look and give feedback :) This blog post was originally created to collect all my experience in a series with Object Storage.Here is a little sneak peak: https://www.virtualhome.blog/wp-content/uploads/2025/11/Benchmark-Testing.mp4?_=1The other parts of the blog you can find here: Sizing and Architecting for Object Storage with Veeam – Part 1 Sizing and Architecting for Object Storage with Veeam – Part 2 Sizing and Architecting for Object Storage with Veeam – Part 3 Sizing

We use paid Veeam B&R v12.x (VUL/Essentials) to back up NetApp ONTAP SMB/NFS to a local repo and are evaluating off-site immutable copies via SOBR + S3/Wasabi/Azure (Object Lock) vs Cloud Connect (VCSP). What’s your real-world take on job layout (per-share vs per-volume), snapshots, NAS proxies, performance and €/TB/month, plus restore/ACL fidelity, cross-protocol restores, and immutability/lifecycle gotchas? Any proven tuning or pitfalls to avoid?

The walkthrough of the official #VMCA 2022 practice exam question 02 is ready. 

The walkthrough of the official #VMCA 2022 practice exam question 28 is ready.Did you have to check the scenario document? Which section did you locate the information inside? 

The walkthrough of the official #VMCA 2022 practice exam question 07 is ready. 

The walkthrough of the official #VMCA 2022 practice exam question 01 is ready. 

Everything shown here is included in all OpenShift subscriptions.As enterprises shift from VMware to OpenShift Virtualization, one of the most common questions is: how do networking concepts map across? This post walks through key visual mappings to help make that connection.Figure 1: Virtual Machine Networking in OpenShiftThis diagram shows how VMs in OpenShift can connect to: OpenShift SDN (for pods and services), or External networks via Multus and nmstate. Supported interface types include: Linux Bridge VLAN Bond Ethernet This architecture is fully supported and replicates VMware flexibility at the node level. Figure 2: Core VMware to OpenShift Mapping Here we map: VM Network ➝ NetworkAttachmentDefinition (NAD) Virtual Machine ➝ OpenShift VirtualMachine resource Physical NIC ➝ Configured via NodeNetworkConfigurationPolicy (NNCP) Think of NAD as the way you attach your VM to a Port Group. Figure 3 & 4: OVS-Bridges and NADs OVS bridges are equivalent to Distributed Sw

Hi Hello everyone,I am here to share with you my experience configuring VBR for the Azure Local environment, a step-by-step guide to configuration.Link:KB4047: Veeam Support for Azure Stack HCIRenaming Azure Stack HCI to Azure Local - Azure Local | Microsoft LearnAzure Local solution overview - Azure Local | Microsoft LearnPrerequisites:Veeam Backup & Replication v11a or later (v12 or later recommended). Azure Stack HCI\ Azure Local registered in Azure. PowerShell and Azure modules installed. Administrative access to Veeam Server and the HCI environment. Azure Arc enabled (optional but recommended).Ensure PowerShellGet is updated (recommended)Install-Module -Name PowerShellGet -Force -AllowClobberSet-ExecutionPolicy RemoteSigned -Scope CurrentUserInstall the Az moduleInstall-Module -Name Az -Scope AllUsers -Repository PSGallery -ForceUpdate-Module -Name Az -ForceDuring the process of adding the Azure Local cluster dedicated to the HyperV environment, you will receive the following

Greetings friends! I have seen this question popping up since VSA was released. How do we monitor VSA, or any other hardened appliance? There is a clear announcement about support for things like this, bear this in mind before you continue. Grafana Dashboard for Veeam Software Appliance (Unofficial + unsupported)When you finish this article, if you follow all the steps, you should have something similar to this. It might be different according to your environment, number of days you select, etc.Dashboard – SummaryUptime and Latest Data Collection – Two main widgets that will show us if everything is alright. Appliance Information Table – Another great set of information, including Hostname, version, RAM, etc. SWAP is dynamic, if you have anything more than 0% colors will change. CPU Usage – Always good to keep a good track of the CPU usage, the query is granular and shows the effort and pressure per Core RAM Usage – Bit simple, just showing the % of RAM used. Query can be modified to s

Hello everyone,I am new to this community and have already tried my luck in a closed thread about the Veeam VM Migrator Utility.However, I currently have a question about this utility.Are there any experience reports on migrating individual vSphere VMs using the Migrator Utility?Is individual migration with this tool even intended? Thank you in advance for your feedback!

i have vbr 12.3 installed on VM from where i had to add storeonce vsa ,however when i add username and password,it shows error saying unable to login to ip:port 16022...what could be the reason

Since yesterday all our existing configured backup jobs to Azure Blob storage are failing and attempts to create new object storage repository are failing on Validating Credentials.  Error: Unable to access object storage (reason: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. (xstorageaccountnamex.blob.core.windows.net:443))Any ideas?  I’ve tried rotating the access key in Azure and updating that in the Cloud account in Veeam m365 backup.  This has started to occur a week after upgrading to v8 which was ok initially.

I have been (legally) ordered to provide “any and all” copies of backups for a client dating back two years. Veeam 8.1.2 Community runs on a Win10 Virtual Machine and runs 3 routines dailyExchange, SharePoint + Teams, OneDriveManual restore will take a year and $9K of external USB hard drives.Wondering if there is a way to give them a copy of the Veeam virtual machine with backups disabled and the only restore options are save locally. I do not want them to accidentally trigger a restore job that overwrites the live data.Disabling the 3 jobs is not appealing because they can be enabled easily.I changed the global admin password associated with the organization but did not affect Veeam operation.  This would allow us to continue to the original Veeam backup server for daily backups.In typing this, it seems that providing them with a searchable and restorable archive is what I am looking for.  Plus it cannot interfere with the ongoing backup of the live data.I am grateful for any suggest

Hello Team,I just finished setting up Veeam backup community edition 12.2 and added Proxmox VE server into Veeam backup.  Now, I tried to configure “worker”, but it was failed.  I used DHCP and set static IP address.  The error I got was “Failed to obtain an IP address: The operation timeout exceeded” and “Worker xxxx(hostname) test failed.  I am not sure if worker name should be registered in DNS record, or it should be any hostname which doesn’t exist in DNS?  I tried to both of them, but I still have no luck.Also, the worker host seemed to be created on Proxmox VE server.  I can see this and I can ping this from Veeam backup host (Windows 11 PC).   I appreciate for you help!!

2025-11-06 Subject: VBR 12.3.2.4165 Installation Failure Version provider was not found in suite context on Windows 11 Pro ARM ParallelsHello,I am attempting a fresh installation of Veeam Backup & Replication Community Edition (ISO: 12.3.2.4165) on a newly created virtual machine, but the Veeam Setup Engine consistently fails with the error: An error has occurred: Version provider was not found in suite context.Environment Details: My host is a MacBook Air running macOS Tahoe 26.1 and I am using Parallels Desktop 26 for Mac. The guest operating system is Windows 11 Pro, Version 25H2. The system type is a 64-bit operating system with an ARM-based processor. The ARM architecture may be a factor in the installer's execution checks.Troubleshooting Steps Completed:I have tried running Setup.exe as administrator, unblocked the ISO file in its Properties, and also extracted the entire ISO contents to a local folder and tried the setup again.I have confirmed that .NET Framework 4.8.1 or la

Hi all,I want to update Veeam Agent for Windows from 6.3.2.1205 to 6.3.2.1302. The in place upgrade doesnt’t work:  Will my backup job settings be safe when I uninstall the current installed agent and reinstall the new version of Veeam Agent for Windows?Kind Regards

Introduction In the first two parts of this series, we explored the why and how of using Group Managed Service Accounts (gMSAs) with Veeam Backup & Replication (VBR). If you missed them, check out:Part 1 – Why Use gMSAs with VBR Part 2 – How to Configure gMSAs with VBRThis third and final installment dives into security implications, introduces Dedicated Managed Service Accounts (dMSAs), explains the threat of Kerberoasting, and previews what's new with gMSA in Windows Server 2025.  1. Security Considerations: gMSAs in the Real World a) Overprivileged AccountsAvoid assigning excessive permissions like Domain Admin to gMSAs.Best Practices:Apply least privilege Use role-specific gMSAs (e.g. Exchange, SQL, File-Servers, but NOT DCs! - see below) Audit regularlyb) Password Retrieval AbuseOnly authorized systems can retrieve gMSA passwords. Compromised systems pose a risk.Mitigation:Harden GIP and other retrieval systems no other services on the GIP restrict network access (e.g. switch

Hi,I’m new to Veeam family and doing initial deployment.What is recommendation for backup jobs - one job for one VM? or group more VMs which could be same schema of backup in one backup job? how much it affects deduplication?Is ReFS deduplication compatible with also enabled job deduplication? Could be both enabled?Is there any report of job deduplication? for me it looks it does not deduplicate anything.Thanks

Great news, we now have a Test drive Veeam Software Appliance v13 - Hands on Lab for you to access. 😀  You can access this lab from the main registration page:https://go.veeam.com/hands-on-lab-experience-html