Community

Air-gapping your backups sounds simple in theory:“Just isolate them so nothing can touch them.”But in practice?That’s where things get tricky.Because the moment you start locking things down too aggressively, you risk:Breaking backup jobs Slowing down restores Creating operational headaches Or worse—making recovery harder when you actually need itI’ve seen environments go too far:Backups fully isolated… but unusable Processes so manual they never get tested Security so tight it blocks recovery workflowsThat’s not resilience. That’s friction.So let’s talk about how to air-gap Veeam the right way—without breaking operations. First: What “Air-Gap” Actually MeansAir-gap doesn’t have to mean physically unplugged (although it can).In modern environments, it usually means:Logical isolation

Hi since upgrading my PVe to version 9.1 and the VBR to 13, the backup performance have degraded a lot. We have 1 worker per pve host, storage is Ceph. Did someone encounter this issue?

Hi,I am going over DR scenarios and have a query on improving our procedure.We have two sitesPrimary site Hosts all production servers (5x physical & 30ish virtual) Hosts the VSA virtual server Primary & immutable storage repositories Secondary DR Site Off-site storage repository 2x spare physical servers for use in DR scenarioBoth sites connected via VPN. Everything on Hyper-V Now my query - lets say the primary site is destroyed. We want to restore everything to the secondary site.First step I can’t login to Veeam console because it was hosted in the primary site. Therefore current procedure is to setup a new instance of VSA and import a backup of the config. Not a difficult task but it takes time which I’d rather not have to spend during an emergency scenario.Is there a better way? Does it make sense to replicate our VSA virtual machine to the secondary site? Maybe hi

TL,DRIf a VMware VM has Virtualization Based Security (VBS) enabled, SureBackup can fail with “Invalid change tracker error code” during snapshot creation. The underlying cause is that SureBackup, by default, modifies the VMX and disables Virtual Hardware Assisted Virtualization (VHV) by setting vhv.enable to false, but VBS requires VHV. The fix is documented in KB4003: SureBackup for VM With VBS Enabled Fails With “Invalid change tracker error code” and boils down to creating a registry value on the Veeam Backup Server so SureBackup stops flipping vhv.enable. 

Are there anything besides the tape that need to be preserved before removing the old tape library? What are the steps to add the new tape library?https://helpcenter.veeam.com/docs/backup/vsphere/connecting_tape_devices.html?ver=120Following this the drive will automatically appear and how about the media? If the tapes are added to the tape library they will automatically appear in the media.Last step will be to create a Tape job

Currently you can only restrict the Server-Scope for File-Restore not for the whole application. So whenever you want to give an user any role more privledged than “Restore-Operator”, you cannot fully restrict the scope of servers he see in the Jobs or Server Tab...

After upgrading to Veeam 13 on Windows, I am unable to login with UI console. Access throw WEB conole works. 

Hi All,As I checked the release notes for the Veeam Agent for Linux that supported most of Oracle Linux 8 versions but when I tried to install the agent I’ve got this error below :2/18/2024 3:24:09 PM Failed [172.17.2.207] Failed to install veeam-6.1.0.1498-1.el8.x86_64.rpm, veeam-libs-6.1.0.1498-1.x86_64.rpm and veeamsnap-6.1.0.1498-1.noarch.rpm packages: error: open of kernel-uek-devel-5.15.0-3.60.5.1.el8uek.x86_64 failed: No such file or directory Failed to invoke rpc command  0:08:012/18/2024 3:32:10 PM Failed [172.17.2.207] Failed to install Veeam Agent for Linux: error: open of kernel-uek-devel-5.15.0-3.60.5.1.el8uek.x86_64 failed: No such file or directory Failed to invoke rpc command  Can somebody let me know why I’ve got this as what I am looking for is using Oracle RMAN backup via Veeam Backup and Replication using Agent and Oracle Plugin Appreciate your help Thanks

Veeam Community Hackathon banner. Alfred is sitting in the middle of a desk. He is about to press the run button with his paw. Binary code and a slider are shown on the left of Alfred. In the middle, the word Hackathon is shown with arrowed lines pointing to icons and text describing several aspects of the Hackathon: Development, Brainstorm, Time, Presenting, Goal, Teamwork, and Community.🚀 Join the 4th Annual Veeam Community Hackathon (2026)!We’re excited to announce that the Veeam Community Hackathon 2026 kicks off on October 7, 2026 at 15:00 CEST / 9:00 AM EST — and registrations are now open! 👉 Sign up here: https://my.veeamhackathon.

Is Surebackups Virtual Lab on the to do list to work with Proxmox?

Hi teamI am tasked with implementing new repositories and I have to move backups and backup copy created by AHV. It seems that moving AHV backups is not supported with VEEAM move feature.I wonder what the best options are here and what I need to be aware off?The existing repo are configured to not use per machine-machine backup files.The old repos will be decommissioned once all data has been migratedMuch appreciated 

Question : What is the process to retrieving configuration backup from the Veeam Software Appliance [VSA] default repository and restoring them to a different VSA? for context looking at the bash shell of the VSA. the configuration backup files are stored inside following volume./var/lib/backup/VeeamConfigBackup/<servername>/Example:  

With this post I want to highlight the community again as we held our 1st in-person Veeam User Group event in Cologne yesterday. This was a curious one for us, because it was the first time we rotated and went way north in Germany and leave our sweet South and Southwest spot. However, it turned out we almost had 60 in-person attendees and only 4 no show attendees which is a huge success and the biggest success in our eyes. This means the Veeam community is really working, people love to attend the VUGs and get together. We couldn’t be more proud !A HUGE THANK YOU to our sponsor Scality who made sure we can have such an amazing venue, food, catering, a barista (!) and drinks throughout the day. A simple amazing effort which we highly appreciate ! Furthermore a huge thank you to Veeam, especially to everyone who supports the Veeam Usergroup behind the scenes. We also had a massive representation from the german Veeam100 people which is always a blessing to

Greetings friends! Today I want to share something that has been on my mind for a while, and I finally decided to tackle it head-on. If you're running Veeam Backup for Microsoft 365 with object storage (Wasabi, AWS S3, Azure Blob, or any S3-compatible provider), you've probably asked yourself:"How much space is each user actually consuming in my VB365 backup repository?"And if you're like me, exploring the Object Storage, you've also asked:"Wait... who is that GUID? And why is there data from an organization I deleted months ago still sitting there?"Spoiler alert: I found several GB of orphaned backup data that I could safely delete. But more on that little adventure later. Let's go!The Challenge: Understanding What's Really in Your Object StorageHere's the thing. Veeam Backup for Microsoft 365 stores backup data in object storage using

hi While running a demo for a customer i was trying to add a new Org into my VBO serverWe come across this error message around config Exchange Web Services (EWS), I’ve personal not seen this message before when adding an new ORG. However this the 1st time I’ve tried adding an org into version VBO 8.3, for context i’m using Modern authentication. Error messageproduct version  

Backup job finished with Failed, Job details: Job cannot be started. Timeout 904 sec, Job has failed unexpectedlyEven the scheduled config backup job did not progress , veeam version 12.3.2All the veeam services are running fine. Kindly advise

When running self-hosted applications in a homelab or on-premises environment, HTTPS is often the first thing to fall through the cracks. Self-signed certificates trigger browser warnings, and public certificate authorities like Let's Encrypt require your services to be internet-accessible. The solution? Run your own internal Certificate Authority.However, this is not a difficult problem to solve. Just setup an internal PKI using Step CA running as a rootless Podman container, then extend it to issue certificates for services on your network. In this first part, we'll focus entirely on getting Step CA up and running — initializing the CA, configuring automated certificate issuance, and setting up a systemd timer to handle renewals without any manual intervention.Create a new podman network for step-capodman network create ca-servicespodman network lsCreate a CA volume and Quadlet (quadlets are the preferred m

One of my VM is showing  FIB summary.txt issue in backup copy job. I would like to run Active full backup on only this problem VM . But this backup copy job has 20 VMs which i don’t want to run full backup as it will cause issue in wasabi bucket. Copy job goes to wasabi bucket. I know individual full backup can initiated in Backup job, but it is not showing BCJ . Please advise.Ver 12.1.2

With the High Availability feature in Veeam Software Appliance 13.0.1, Veeam provides a neat way to make the backup server highly available. In this blog post I’ll briefly show how to configure HA, which prerequisites must be met, and what alternatives exist if HA cannot be used. Intro - The Basics The feature itself reduces downtime of the backup server in the Veeam Software Appliance. In general, two nodes are required; they can synchronize even across relatively high latencies. A manual switchover is possible, and a major advantage is automatic updates for both nodes. The goal is to offer fast disaster recovery without the need to keep a dedicated standby backup server, and then finally to restore the configuration backup. 

In the final article of this three-part series, we’ll explore how proactive operations with Veeam can help organizations reduce downtime and enhance data protection.By the time you reach this point, things feel different.You’re no longer chasing failures.You’re no longer guessing recovery times.You’re not constantly reacting to alerts.Instead, your Veeam environment starts to feel… predictable.That’s the goal.But scaling proactive operations isn’t just doing the same things on a bigger environment.It’s about operating with intention, consistency, and confidence—no matter how large things get.This is what that actually looks like in practice. 1. Health Is Measured, Not AssumedAt scale, you don’t rely on “it looks fine.”You rely on metrics and trends.What you know at any given time:Job success and warning rates Backup

Microsoft BitLocker Administration and Monitoring (MBAM) and Advanced Group Policy Management (AGPM), both part of the Microsoft Desktop Optimization Pack (MDOP), have officially reached end of support as of 14 April 2026 (today). From this point forward, Microsoft will no longer provide security updates, bug fixes, or compatibility assurances for these tools, similar to the lifecycle outcome observed with Microsoft Deployment Toolkit (MDT).Organizations that continue to rely on MBAM and AGPM must now assess risk exposure, validate operational dependencies, and define a transition strategy toward supported alternatives to maintain security, compliance, and long-term manageability.To help you transition away from MBAM and AGPM, I have outlined practical and supported alternatives in the following guides

Need to pull a report of protected servers along with job names for which the application aware processing is enabled  We have Veeam one / can use script option , backup version 13  

IntroductionTo enable monitoring of your Veeam Software Appliance (VSA) with VeeamONE, the Veeam Analytics Service needs to be deployed on the VSA.The Veeam Analytics service not only enables communication with Veeam Backup & Replication servers to collect data but also allows to send remediation commands.Since the VSA is secure by design (hardened Linux-based OS, DISA STIG compliance, automated patching…) and that it enforces Zero Trust principles with role-based access control