Skip to main content
Question

Upgrade from Veeam 12 to Veeam 13

  • August 27, 2026
  • 1 comment
  • 9 views
C

Hi everyone. I have a question: I want to upgrade from Veeam 12.3.2.4854 to Veeam 13.0.3.63. However, I have an immutable repository running on RHEL 10.2; as you know, the SSH port is disabled. Since the new version needs to be applied to the components on the immutable repository, is it necessary to enable port 22, or can the upgrade proceed even with that port disabled? I hope that makes sense.

1 comment

johangrooveyvmx
  • johangrooveyvmx
  • Not a newbie anymore
  • August 27, 2026

Hi:

Yes, you must temporarily enable SSH (port 22) to upgrade the components on the Hardened Repository.

Because the Veeam services on a Linux Hardened Repository run under a dedicated, non-root user without persistent sudo permissions or stored credentials, the VBR server cannot self-elevate to update the underlying Veeam Transport and Deployment binaries over data mover ports alone.

Upgrade Workflow for Hardened Linux Repositories

  1. Upgrade the VBR Server First

    • Run the installer to upgrade your main Veeam Backup & Replication server to the target version.

  2. Temporarily Enable SSH on the RHEL Repository

    • Access the server via physical console or out-of-band management (iLO/iDRAC).

    • Start and enable the SSH service:

      Bash

       

      sudo systemctl start sshd

    • Ensure port 22 is temporarily permitted through firewalld:

      Bash

       

      sudo firewall-cmd --add-port=22/tcp

  3. Upgrade the Repository Components in VBR

    • Open the Veeam Backup & Replication Console.

    • When prompted by the Upgrade / Components Update Wizard, provide Single-Use Credentials for the non-root account with sudo privileges to push the updated packages.

    • Alternatively, right-click the server under Backup Infrastructure > Managed Servers, select Upgrade, or walk through the repository properties to trigger the component rescan and binary deployment.

  4. Re-Harden the Linux Repository

    • Once the component update completes successfully, disable SSH immediately:

      Bash

       

      sudo systemctl stop sshd
      sudo systemctl disable sshd
      sudo firewall-cmd --remove-port=22/tcp
      sudo firewall-cmd --runtime-to-permanent
    Terms & ConditionsAccessibility statement