0% found this document useful (0 votes)
93 views

Veeam Backup and Replication Operations Guide - Volume 3

Veeam Backup and Replication Operations Guide - Volume 3

Uploaded by

karam horane
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
93 views

Veeam Backup and Replication Operations Guide - Volume 3

Veeam Backup and Replication Operations Guide - Volume 3

Uploaded by

karam horane
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 531

Veeam Backup and

Replication Operational
Guide
Volume 3
Based on Version 12
Focused on Microsoft Hyper-V

By:
Dave Kawula Cristal Kawula
Cary Sun Emile Cabot
PUBLISHED BY

MVPDays Publishing
h p://www.mvpdays.com

Copyright © 2023 by MVPDays Publishing

All rights reserved. No part of this book may be reproduced or transmi ed in any form or by any
means without the publisher’s prior wri en permission.

ISBN: TBD

Warning and Disclaimer


Every effort has been made to make this manual as complete and accurate as possible, but no
warranty or fitness is implied. The informa on provided is on an “as is” basis. The authors and
the publisher shall have neither liability nor responsibility to any person or en ty concerning any
loss or damages arising from the informa on contained in this book.

Feedback Information
We’d like to hear from you! If you have any comments about how we could improve the quality
of this book, please don’t hesitate to contact us by visi ng www.checkyourlogs.net or emailing
feedback@mvpdays.com.

iii
Foreward

Foreward
Here is another book by Dave, Cristal, Cary and Emile; what a significant milestone!

Ask yourself one ques on: Why? There are so many technologies, but why do we use what we
use? Why do we do what we do? The answer is how. It’s how we use something. I like to explain
some mes compliance in this way. No product or technology is inherently compliant. It’s how it is
implemented and how it is audited. The same goes for technology implementa ons; it’s about
how we use them. The how is the why.

Opera ons are s ll cool. There are so many razzle-dazzle job tles and buzzwords in the market
today, but in the end, Opera ons are Opera ons. DevOps, Pla ormOps, SRE (Sire Reliability
Engineer), Pla orm Engineering… I do not need to go on, but no technology will take care of itself
across all disciplines. How it is used, implemented, monitored, etc., ma ers today. Technology
s ll needs humans and their knowledge.

Expert advice is the difference. We all learn from each other. When taking on the next new
challenge, where does one go first? We look for resources to consume. Blogs, books like this, and
social profiles; the established experts are the trusted advisors in the technology space. Call it
community, social sharing, or what you want; we all find ourselves going to the go-to experts of a
par cular space.

iii
Foreward

Above and Beyond. What Dave, Cristal, Cary and Emile put forth in this book is outstanding in
their prac cing advice for technology. They could easily focus on their professional
responsibili es and keep them narrow. But wri ng a book is hard work! Edi ng a book is hard
work! I’ve not discussed this with them, but I’m sure they aren’t doing it for the money of wri ng
a book. They write this book because they go above and beyond, share, and care.

I’m sure you will enjoy this book, and a big congratula ons on this book, Dave, Cristal, Cary and
Emile.

Best Regards,

Rick W. Vanover Microso MVP, VMware vExpert, Cisco Champion


Senior Director, Product Strategy - Veeam So ware
Twi er: @RickVanover

iv
About the Authors

About the Authors


Dave Kawula – Microsoft MVP
Dave is a Microso Most Valuable Professional (MVP) with over 20 years of experience in the IT
industry. His background includes data communica ons networks within mul -server
environments, and he has led architecture teams for virtualiza on, System Centers, Exchange,
Ac ve Directory, and Internet gateways. Very ac ve within the Microso technical and consul ng
teams, Dave has provided deep-dive technical knowledge and subject ma er exper se on various
System centers and opera ng system topics.

Dave is well-known as an evangelist for Microso , 1E, and Veeam technologies. Loca ng Dave is
easy as he speaks at conferences and sessions each year, including TechEd, Ignite, MVP Days
Community Roadshow, and VeeamOn.

Recently Dave has been honoured to take on the role of Conference Co-Chair of TechMentor and
Cyber Security & Ransomware Live with fellow MVP Sami Laiho. The lineup of speakers and
a endees a ending this conference over the past 20 years is fantas c. Come down to Redmond
or Orlando in 2018 and meet him in person. Check out his speaking site at
h ps://sessionize.com/dave-kawula/

He recently ed for 1st place out of 1800 speakers at the Microso Ignite Conference in Orlando.

As the founder and Managing Principal Consultant at TriCon Elite Consul ng, Dave is a leading
technology expert for local customers and large interna onal enterprises, providing op mal
guidance and methodologies to achieve and maintain an efficient infrastructure.

BLOG: www.checkyourlogs.net

Twi er: @DaveKawula

v
About the Authors

Cristal Kawula – Microsoft MVP


Cristal Kawula co-founded MVPDays Community Roadshow and #MVPHour live Twi er Chat. She
was also a Technical Advisory board member and the President of TriCon Elite Consul ng. Cristal
is the only 2nd Woman worldwide to receive the pres gious Veeam Vanguard award.

Cristal speaks at Microso Ignite, MVPDays, and other local user groups. In addi on, she has
been instrumental in founding MVPDays Publishing and has helped author over 25 + books.

At conferences like Microso Ignite, she has led community meetups on Women in IT, Paren ng
in IT, Diversity in Tech, and becoming a Community Rockstar.

BLOG: h p://www.checkyourlogs.net

Twi er: @supercristal1

vi
About the Authors

Cary Sun – Microsoft MVP

Cary Sun is a CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) and MCSE, MCIPT, Citrix
CCA with over twenty years in the planning, design, and implementa on of network technologies
and Management and system integra on. Background includes hands-on experience with mul -
pla orm, all LAN/WAN topologies, network administra on, E-mail and Internet systems, security
products, PCs and Servers environment. Exper se is analyzing users’ needs and coordina ng
system designs from concept through implementa on. Excep onal analysis, organiza on,
communica on, and interpersonal skills. Demonstrated ability to work independently or as an
integral part of a team to achieve objec ves and goals. Special es: CCIE /CCNA / MCSE / MCITP /
MCTS / MCSA / Solu on Expert / CCA

Cary is a very ac ve blogger at checkyourlogs.net and is permanently available online for


ques ons from the community. His passion for technology is contagious, improving everyone
around him at what they do.

Blog: h ps://www.checkyourlogs.net

Twi er:@SifuSun

vii
About the Authors

Emile Cabot – Microsoft MVP


Emile started in the industry during the mid-90s working at an ISP and designing celebrity
websites. He has a solid opera onal background specializing in Systems Management and
collabora on solu ons. In addi on, he has spent many years performing infrastructure analyses
and solu on implementa ons for organiza ons ranging from 20 to over 200,000 employees.
Coupling his wealth of experience with a small partner network, Emile works very closely with
TriCon Elite, 1E, and Veeam to deliver low-cost solu ons with minimal infrastructure
requirements.

He ac vely volunteers as a member of the Canadian Ski Patrol, providing over 250 hours each
year for first aid services and public educa on at Castle Mountain Resort and in the community.

BLOG: h p://www.checkyourlogs.net

Twi er: @ecabot

viii
Contents

Contents

Foreward ....................................................................................................................... iii

About the Authors ......................................................................................................... v


Dave Kawula – Microsoft MVP .....................................................................................v
Cristal Kawula – Microsoft MVP .................................................................................. vi
Cary Sun – Microsoft MVP ......................................................................................... vii
Emile Cabot – Microsoft MVP ................................................................................... viii

Contents........................................................................................................................ ix

Introduction ................................................................................................................. 14
Sample Files ............................................................................................................. 14
Additional Resources ................................................................................................ 14

Chapter 1...................................................................................................................... 15

Prerequisites................................................................................................................ 15
System Requirements............................................................................................... 15
Veeam Back and Replication Manager Server ..................................................... 15
Veeam Backup and Replication Console Server .................................................. 16
Veeam Backup and Replication Off-Host Backup Proxy Server............................ 16
Veeam Backup and Replication Proxy Server for NAS Backup ............................ 17
Veeam Backup Repository Server ........................................................................ 17
Veeam Tape Server .............................................................................................. 17

ix
Contents

Veeam WAN Accelerator ...................................................................................... 18


Veeam Backup & Replication Gateway Server ..................................................... 18
Supported Applications......................................................................................... 19
Firewall Open Ports Requirements ........................................................................... 19
Windows Servers ................................................................................................. 20
Linux Servers ....................................................................................................... 20
Veeam Backup Manager Server ........................................................................... 21
Veeam Backup & Replication Console ................................................................. 23
Veeam Backup Proxy server ................................................................................ 23
Windows and Linux-based Backup Repository ..................................................... 24
NFS Share Backup Repository ............................................................................. 25
Windows SMB Backup Repository ....................................................................... 25
Azure Object Storage Repository ......................................................................... 26
External Repository .............................................................................................. 26
Azure Archive Object Storage Repository............................................................. 27
Veeam Gateway Server ....................................................................................... 28
Veeam Tape Server .............................................................................................. 29
Veeam WAN Accelerator Server ........................................................................... 29
Veeam Guest Interaction Proxy with Non-Persistent Runtime Components ......... 30
Veeam Guest Interaction Proxy with Persistent Agent Components ..................... 31
Log Shipping Server Connections ........................................................................ 31
SQL Guest OS Connections ................................................................................. 32
Oracle Guest OS Connections ............................................................................. 33
Veeam Mount Server............................................................................................ 34
Veeam Helper Appliance ...................................................................................... 35
x
Contents

Veeam Helper Host .............................................................................................. 35


VM Guest OS ....................................................................................................... 36
Veeam U-AIR ....................................................................................................... 37
Application Item of Active Directory Domain Controller Restore ........................... 37
Application Item of Exchange Server Restore ...................................................... 38
Application Item of SQL Server Restore ............................................................... 38
Azure Proxy Server .............................................................................................. 39
Azure Helper Appliance ........................................................................................ 39
Azure Stack .......................................................................................................... 39
SMTP Server........................................................................................................ 40

Chapter 2...................................................................................................................... 41

Deployment .................................................................................................................. 41
Install Veeam Backup and Replication v12 with PostgreSQL ............................... 43
Install Veeam Backup and Replication v12 with Microsoft SQL (or SQL Express) 53
Upgrade the Existing Veeam Backup and Replication to v12 ............................... 63
Migrate the Existing Veeam Backup and Replication to the new server with
PostgreSQL ......................................................................................................... 83
Migrate the Existing Veeam Backup and Replication to the new server with
Microsoft SQL ...................................................................................................... 96
Install Veeam Backup and Replication Console 12 ............................................. 109
Upgrade to Veeam Backup and Replication Console 12 ..................................... 116

Chapter 3.................................................................................................................... 122

Configuration ............................................................................................................. 122


Virtualization Servers and Hosts ............................................................................. 123
Add Microsoft Hyper-V Standalone Servers ....................................................... 124
xi
Contents

Add Microsoft Hyper-V Clusters ......................................................................... 132


Add Microsoft SMB3 Servers ............................................................................. 140
Add Microsoft Windows Servers ......................................................................... 149
Add Linux Server for a hardened repository ....................................................... 157
Add Off-Host Backup proxy servers ................................................................... 166
Add WAN Acceleration ....................................................................................... 177
Physical Machines .................................................................................................. 183
Add Veeam Agent to On-Premises Microsoft Windows Physical machines ........ 184
Add Veeam Agent to On-Premises Linux Physical machines ............................. 198
Backup Repository ................................................................................................... 211
Add the Microsoft Windows server’s local directory as a Backup Repository...... 212
Add the Linux server’s local directory as a Backup Repository ........................... 221
Add the Linux server’s local directory as a Hardened Backup Repository .......... 233
Add Network Attached Storage (SMB or CIFS Shares) as Backup Repository ... 245
Add the Microsoft Windows server’s Rotated Drives as a Backup Repository .... 253
General and User Roles Settings ............................................................................ 263
Configure Multi-Factor Authentication for Users ................................................. 265
Configure Group Managed Service Accounts (gMSA) ........................................ 276
Configure Notification with Free SendGrid Account of Azure .............................. 287
Configure Notification with Microsoft Office 365 NON-MFA Account ................... 317
Configure Notification with Microsoft Office 365 MFA Account ............................ 331
Enable Configuration Backup ............................................................................. 355
Configure Best Practices Analyzer ..................................................................... 362

Chapter 4.................................................................................................................... 367

xii
Contents

Backup ....................................................................................................................... 367


Create a Backup job to backup the specified VMs.............................................. 368
Create an Immutable Backup job to backup the specified VMs .......................... 406
Create a Backup job to backup the specified Physical Machines (Managed by
Backup Server Mode)......................................................................................... 442
Create a Backup job to backup the specified Physical Machines (Managed by
Agent Mode) ...................................................................................................... 474
Create a Backup job to backup all VMS of the Hyper-V Host ............................. 506

xiii
Introduc on Prerequisites

Introduction
This book aims to showcase the fantas c exper se of our guest speakers of MVPDays Online.
They have so much passion, exper se, and expert knowledge that it only seemed fi ng to write
it down in a book.

This book aims to show how to be opera onally proficient using Veeam Backup and Replica on,
Veeam One and various other Veeam products and tools. We hope you find immense value in
reviewing this guide and encourage you to share your opera onal knowledge and skills with
others in the community.

Sample Files
All sample files for this book can be downloaded from h p://www.checkyourlogs.net and
www.github.com/mvpdays

Additional Resources
In addi on to all the ps and tricks provided in this book, you can find extra resources like ar cles
and video recordings on our blog h p://www.checkyourlogs.net

14
Chapter 1 Prerequisites

Chapter 1

Prerequisites
This chapter will go over the system and port requirements. Before installing the Veeam Backup
and Replica on, all condi ons must be met.

System Requirements
Before installing Veeam Backup and Replica on, please ensure the virtual environment and
servers meet system requirements.

Veeam Back and Replication Manager Server


Please ensure the server meets the following system requirements for the Veeam backup and
replica on manager server.

Components Descrip on

OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 10 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

OS Features .NET Framework 4.7.2 or later, Windows Installer 4.5,


PowerShell 5.1, SQL Server Management Objects, SQL
Server System CLR Types, Report Viewer Redistributable
2015, Universal C Run me, Firefox, Google Chrome,
Microso Edge, RDP client version 7.0 or later.

Op on- Microso System Center Virtual Machine Manager


2019, 1807, 1801, Microso System Center 2016 Virtual
Machine Manager Admin UI, Microso System Center
2012 R2 Virtual Machine Manager Admin UI, Microso

15
Chapter 1 Prerequisites

System Center 2012 SP1 Virtual Machine Manager Admin


UI.

Database Microso SQL Server 2022, 2019, 2017, 2016, 2014, 2012

Veeam Backup and Replication Console Server


Before installing the Veeam backup and replica on console server, please ensure the server
meets the system requirements.

Components Descrip on

OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 10 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

OS Features .NET Framework 4.7.2 or later, Windows Installer 4.5,


PowerShell 5.1, SQL Server Management Objects, SQL
Server System CLR Types, Report Viewer Redistributable
2015, Universal C Run me, Firefox, Google Chrome,
Microso Edge, and RDP client version 7.0 or later.

Veeam Backup and Replication Off-Host Backup Proxy Server


Please ensure the server meets the following system requirements for Veeam backup and
replica on off-host backup proxy server.

Components Descrip on

OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012

16
Chapter 1 Prerequisites

Veeam Backup and Replication Proxy Server for NAS Backup


Please ensure the server meets the system requirements of the Veeam backup and replica on
proxy server.

Components Descrip on

OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 10 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

Veeam Backup Repository Server


Please ensure the server meets the following Veeam backup repository server system
requirements.

Components Descrip on

Windows OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 10 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

Linux distribu ons (64-bit versions) CentOS 7.x, Debian 10.0 to 11.0, RHEL 7.0 to 9.1, Oracle
Linux 7 (UEK3) to 9 (UEK R7), Oracle Linux 7 to 9 (RHCK),
RHEL 7.0 to 9.1, SLES 12 SP4 or later, 15 SP1 or later,
Ubuntu: 18.04 LTS, 20.04 LTS, and 22.04 LTS

Linux distribu ons (advanced XFS Debian 10.x, and 11, RHEL 8.2 to 9.1, SLES 15 SP2, SP3,
integra on (fast clone)) SP4, Ubuntu 18.04 LTS, 20.04 LTS, 22.04 LTS

Veeam Tape Server


Please ensure the server meets the following system requirements for the Veeam Tape Server.

Components Descrip on

17
Chapter 1 Prerequisites

Windows OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 10 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

Linux distribu ons (64-bit versions) CentOS 7.x, Debian 10.0 to 11.0, Oracle Linux 7 (UEK3) to 9
(UEK R7), Oracle Linux 7 to 9 (RHCK), RHEL 7.0 to 9.1, SLES
12 SP4 or later, 15 SP1 or later, Ubuntu 18.04 LTS, 20.04
LTS, 22.04 LTS

Veeam WAN Accelerator


Please ensure the server meets the following Veeam WAN accelerator server system
requirements.

Components Descrip on

Windows OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 0 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

Veeam Backup & Replication Gateway Server


Please ensure the server meets the following system requirements for the Veeam backup and
replica on gateway server.

Components Descrip on

Windows OS Pla orm Windows Server 2022, 2019, 2016, 2012 R2, 2012, 11
(version21H2, 22H2), 10 (from version 1909 to version
22H2), 0 LTS (versions LTSB 1607, LTSC 1809, LTSC 2021)

Linux distribu ons CentOS 7.x, Debian 10.0 to 11.0, Oracle Linux 7 (UEK3) to 9
(UEK R7), Oracle Linux 7 to 9 (RHCK), RHEL 7.0 to 9.1, SLES

18
Chapter 1 Prerequisites

12 SP4 or later, 15 SP1 or later, Ubuntu 18.04 LTS, 20.04


LTS, 22.04 LTS

Supported Applications
Veeam supports the following list of applica on-aware backups.

Components Descrip on

Ac ve Directory Windows Server 2022, 2019, 2016, 2012 R2, 2012, 2008
R2, 2008

Exchange Exchange 2019, 2016, 2013 SP1, 2013

SharePoint SharePoint 2022, 2019, 2016, 2013

SQL Server SQL Server 2022 (only for Windows), 2019 (only for
Windows), 2017 (only for Windows), 2016 SP2, 2014 SP3,
2012 SP4, 2008 R2 SP3, 2008 SP4

Oracle (Windows OS) Oracle Database 11g Release 2, 12c Release 1, 12C Release
2, 18c, 19c, 21c

Oracle (Linux OS) Oracle Database 11g Release 2, 12c Release 1, 12C Release
2, 18c, 19c, 21c

PostgreSQL PostgreSQL 15, 14, 13, 12

Firewall Open Ports Requirements


You should only open the ports required for an applica on to run in a produc on environment.
Locking an environment is required for most Cyber Security audits and best prac ces. The list
below is the Port requirements for Veeam Backup and Replica on. This list will help you securely
build your environment, and these firewall rules for the required ports are automa cally created

19
Chapter 1 Prerequisites

when you install the Veeam Backup & Replica on servers. However, some Linux distribu ons
need to have manual firewall rules created.

Windows Servers
Windows servers require the following inbound and outbound ports opened. The
inbound/outbound ports must be opened for Windows servers as Veeam backup infrastructure
components or enable applica on-aware processing.

Sources Target Network Protocol Port Number

Veeam backup & Windows server TCP 445


replica on manager server
135

Microso Hyper-V server TCP 6160


or Off-host backup proxy

Veeam backup repository TCP 2500 to 3300

Veeam gateway server TCP 6162

Veeam mount server TCP 49152 to 65535

Veeam WAN accelerator


server

Veeam tape server

Linux Servers
Linux servers require the following inbound and outbound ports opened. The inbound/outbound
ports must be opened for Windows servers as Veeam backup infrastructure components or
enable applica on-aware processing.

Sources Target Network Protocol Port Number

20
Chapter 1 Prerequisites

Veeam backup & Linux servers TCP 22


replica on manager server
TCP 6162

TCP 2500 to 3300

Linux Servers Veeam backup & TCP 2500 to 3300


replica on
manager server

Veeam Backup Manager Server


The Veeam Backup and Replica on Servers require the following inbound and outbound ports
opened.

Sources Target Network Protocol Port Number

Veeam backup & SCVMM server TCP 8100


replica on manager
server Hyper-V Host server TCP 445

135

TCP 6160

TCP 6162

TCP 6163

TCP 2500 to 3300

TCP 49152 to 65535

Veeam Backup & TCP 1433


Replica on

21
Chapter 1 Prerequisites

configura on database
server

DNS server UDP 53

Veeam update HTTPS TCP 443


no fica on server
(dev.veeam.com)

Veeam update license TCP 443


server
(vbr.butler.veeam.com,
autolk.veeam.com)

SMB3 server TCP 6160

TCP 6162

Veeam backup & TCP 9501


replica on manager
server TCP 6172

Management client PC TCP 3389

REST client TCP 9419

SCVMM TCP 8732

22
Chapter 1 Prerequisites

Veeam Backup & Replication Console


The Veeam Backup & Replica on Console applica on requires opening the following inbound and
outbound ports.

Sources Target Network Protocol Port Number

Veeam backup & Veeam backup & TCP 9392


replica on console server replica on manager
server TCP 10003

TCP 9396

Veeam backup & Veeam Mount server TCP 2500 to 3300


replica on console server

Veeam Backup Proxy server


The Veeam Backup Proxy server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Windows Hyper-V server/ Windows server TCP 49152 to 65535


Off-host backup proxy
SMB (CIFS) share TCP 445

135

NFS share TCP, UDP 111 2049

Veeam Gateway TCP 49152 to 65535


server
UDP

Windows Hyper-V server TCP 2500 to 3300

23
Chapter 1 Prerequisites

SMB3 server Veeam backup TCP 2500 to 3300


proxy server (onhost
or o ost)

Veeam backup & O ost backup TCP 6163


replica on manager proxy
server
SMB3 server TCP 6163

O ost file proxy TCP 6210

Windows and Linux-based Backup Repository


The Windows and Linux-based Backup Repositories require opening the inbound and outbound
ports.

Sources Target Network Protocol Port Number

Veeam backup proxy Veeam backup TCP 2500 to 3300


server repository

Veeam source backup Veeam target TCP 2500 to 3300


repository backup repository

Veeam source backup Azure Object TCP 2500 to 3300


repository storage repository
gateway server

Veeam Backup repository/ Cache repository in TCP 2500 to 3300


secondary backup NAS backup
repository

Windows server running Veeam backup TCP 2500 to 3300


vPower NFS Service repository gateway
server as a backup
repository

24
Chapter 1 Prerequisites

NFS Share Backup Repository


The NFS Share Backup Repository requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam gateway server / NFS share is as a TCP 2049


Veeam backup proxy backup repository
UDP

TCP 111

UDP

NFS share as a TCP mountd_port


backup repository
UDP
(version 3)
TCP statd_port

UDP

TCP lockd_port

UDP lockd_port

Windows SMB Backup Repository


The SMB Backup Repository requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam gateway server / Windows SMB TCP 445


Veeam backup proxy (CIFS) backup
135
repository

25
Chapter 1 Prerequisites

Azure Object Storage Repository


The Azure Object Storage repository requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam gateway Azure Object TCP 443


server Storage

HTTPS xxx.blob.core.windows.net for


the region of Global

xxx.blob.core.chinacloudapi.cn
for the region of China

xxx.blob.core.cloudapi.de for
the region of Germany

xxx.blob.core.usgovcloudapi.net
for the region of Government

TCP 80

HTTP ocsp.digicert.com

ocsp.msocsp.com

*.d-trust.net

External Repository
The External Repository requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

TCP 443

26
Chapter 1 Prerequisites

Veeam gateway Azure Object


server Storage
HTTPS xxx.blob.core.windows.net for
the region of Global

xxx.blob.core.chinacloudapi.cn
for the region of China

xxx.blob.core.cloudapi.de for
the region of Germany

xxx.blob.core.usgovcloudapi.net
for the region of Government

TCP 80

HTTP ocsp.digicert.com

ocsp.msocsp.com

*.d-trust.net

Azure Archive Object Storage Repository


The Azure Archive Object Storage Repository requires opening the inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam gateway Azure proxy TCP 443


server appliance

SSH 22

27
Chapter 1 Prerequisites

HTTPS Public/private IPv4 addresses of


Azure appliance

Azure proxy Azure object TCP 443


appliance storage
HTTPS xxx.blob.core.windows.net for
the region of Global

xxx.blob.core.chinacloudapi.cn
for the region of China

xxx.blob.core.cloudapi.de for
the region of Germany

xxx.blob.core.usgovcloudapi.net
for the region of Government

TCP 80

HTTP ocsp.digicert.com

ocsp.msocsp.com

*.d-trust.net

Veeam Gateway Server


The Veeam Gateway Server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam gateway Windows SMB (CIFS) TCP 445


server backup repository
135

28

Technet24
Chapter 1 Prerequisites

NFS shares the backup TCP, UDP 111, 2409


repository

Veeam Tape Server


The Veeam Tape Server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and Veeam tape server TCP 6166


replica on manager
server

TCP 2500 to 3300

Veeam tape server Veeam backup and TCP 2500 to 3300


replica on manager
server

Veeam WAN Accelerator Server


The Veeam WAN Accelerator Server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and Veeam WAN TCP 6160


replica on manager accelerator server
server

TCP 6162

29
Chapter 1 Prerequisites

TCP 6164

Veeam WAN Veeam backup and TCP 2500 to 3300


accelerator server replica on manager
server

Veeam WAN TCP 6164


accelerator server
TCP 6165

Veeam Guest Interaction Proxy with Non-Persistent Runtime


Components
The Veeam Guest Interac on Proxy with non-persistent Run me Components requires opening
the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and VM guest Linux OS TCP 22


replica on manager
server

Veeam Guest TCP 6190


interac on proxy
TCP 6290

TCP 445

Veeam Guest VM guest Windows TCP 445


interac on proxy OS
135

TCP 49152 to 65535

30

Technet24
Chapter 1 Prerequisites

TCP 6167

VM guest Linux OS TCP 22

VM guest OS Veeam Guest TCP 2500 to 3300


interac on proxy

Veeam Guest Interaction Proxy with Persistent Agent


Components
The Veeam Guest Interac on Proxy with Persistent Agent Components requires opening the
following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam Guest VM guest OS TCP 6160


interac on proxy
11731

TCP 6167

TCP 6173

2500

Log Shipping Server Connections


The Log Shipping Server connec ons require opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Log shipping server TCP 445

31
Chapter 1 Prerequisites

135
Veeam backup and
replica on manager
server TCP 6160

TCP 6162

TCP 49152 to 65535

Log shipping server Veeam backup TCP 2500 to 3300


repository

SQL Guest OS Connections


The SQL Server connec ons require opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam Guest SQL VM guest OS TCP 445


interac on proxy
135

TCP 2500 to 3300

TCP 6160

11731

TCP 49152 to 65535

TCP 6167

32

Technet24
Chapter 1 Prerequisites

SQL VM guest OS Veeam Guest TCP 2500 to 3300


interac on proxy

Veeam backup TCP 2500 to 3300


repository

Log shipping server TCP 2500 to 3300

Oracle Guest OS Connections


The Oracle Server connec ons require opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam Guest Oracle VM guest OS TCP 445


interac on proxy (Microso Windows)
135

TCP 2500 to 3300

TCP 6160

11731

TCP 49152 to 65535

TCP 6167

Oracle VM guest OS TCP 22


(Linux)

TCP 2500 to 3300

33
Chapter 1 Prerequisites

Oracle VM guest Veeam Guest TCP 2500 to 3300


OS interac on proxy

Veeam backup TCP 2500 to 3300


repository

Log shipping server TCP 2500 to 3300

Veeam Mount Server


The Veeam Mount Server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam Mount Veeam backup and TCP 9401


server replica on manager
server

Veeam Backup TCP 2500 to 3300


repository

Veeam backup and Veeam Mount server TCP 445


replica on manager
server TCP 2500 to 3300

TCP 6160

TCP 6162

TCP 6170

34

Technet24
Chapter 1 Prerequisites

TCP 49152 to 65535

Veeam Helper Appliance


The Veeam Helper Appliance requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam helper Veeam Backup TCP 2500 to 3300


appliance repository

Veeam backup and Veeam helper TCP 22


replica on manager appliance
server TCP 2500 to 3300

Veeam mount Veeam helper TCP 22


server appliance
TCP 2500 to 3300

Veeam Helper Host


The Veeam Helper Host requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam helper host Veeam Backup TCP 2500 to 3300


repository

Veeam helper host TCP 22

35
Chapter 1 Prerequisites

Veeam backup and TCP 2500 to 3300


replica on manager
server TCP 6162

Veeam mount server Veeam helper host TCP 22

TCP 2500 to 3300

VM Guest OS
The VM Guest OS requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

VM guest OS Veeam helper TCP 21


appliance

Veeam helper VM guest Linux or TCP 20


appliance Unix OS
TCP 2500 to 3300

Veeam helper host VM guest Linux or TCP 2500 to 3300


Unix OS

Veeam backup and VM guest Linux or TCP 22


replica on manager Unix OS
server

Veeam mount server VM guest Windows TCP 445


OS
135

36

Technet24
Chapter 1 Prerequisites

TCP 6160

11731

TCP 6173

2500

TCP 49152 to 65535

Veeam backup and VM guest OS TCP 2500 to 3300


replica on manager
server

Veeam U-AIR
The Veeam U-AIR requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam U-AIR Veeam Backup TCP 9394


Enterprise manager
server

Application Item of Active Directory Domain Controller Restore


The Applica on Item of Ac ve Directory Domain Controller Restore requires opening the
following inbound and outbound ports.

Sources Target Network Protocol Port Number

TCP 135

37
Chapter 1 Prerequisites

Veeam backup and Ac ve directory VM TCP 389


replica on manager guest OS
UDP
server

TCP 636

3268

3269

TCP 49152 to 65535


(for Microso
Windows server
2008 and later)

Application Item of Exchange Server Restore


The Exchange Server Restore Applica on Item requires opening the inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and Exchange 2003/2007 TCP 80


replica on manager CAS Server
443
server

Exchange TCP 443


2010/2013/2016/2019
CAS Server

Application Item of SQL Server Restore


The SQL Server Restore Applica on Item requires opening the inbound and outbound ports.

38

Technet24
Chapter 1 Prerequisites

Sources Target Network Protocol Port Number

Veeam backup and SQL VM guest OS TCP 1433


replica on manager
1434 and other
server

Azure Proxy Server


The Azure Proxy Server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and Azure Proxy server TCP 443


replica on manager
server / Backup
Repository server

Azure Helper Appliance


The Azure Helper Appliance requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and Azure helper appliance TCP 22


replica on manager
server

Azure Stack
Azure Stack requires opening the following inbound and outbound ports.

39
Chapter 1 Prerequisites

Sources Target Network Protocol Port Number

Veeam backup and Azure stack TCP 443


replica on manager
30024
server

SMTP Server
The SMTP Server requires opening the following inbound and outbound ports.

Sources Target Network Protocol Port Number

Veeam backup and SMTP server TCP 25


replica on manager
server

40

Technet24
Chapter 2 Deployment

Chapter 2

Deployment
This chapter will walk you through installing and upgrading the Veeam Backup and Replica on
components. You must ensure that the devices meet the system requirements before installing or
upgrading Veeam Backup and Replica on components on the machine.
Veeam Backup and Replica on v12 includes several new features and improvements, including:
 Direct-to-Object

 Direct-to-Cloud

 Immutable backups

 Hardened repository improvements

 Microso Azure Blob Storage immutability support

 HPE Storage immutability support

 Mul -factor authen ca on

 Kerberos-only authen ca on

 IPv6 support

 gMSA accounts for Windows

 Single-use creden als for Linux

 Automa c console lockouts

 Best prac ces analyzer

 Network-less discovery and deployment

 Dynamic protec on scope

 in-cloud data flow


41
Chapter 2 Deployment

 Full portability

 PostgreSQL support for a configura on database

 VeeaMover

 Move backups between jobs

 Copy backups between repositories

 Mul ple gateway server support

 Direct to archive

 Object storage as performance extent

These are only a few new features and improvements in Veeam Backup and Replica on v12.
Overall, the new release focuses on providing faster and more efficient backup and recovery,
enhanced security, and greater flexibility and ease of management.

42

Technet24
Chapter 2 Deployment

Install Veeam Backup and Replication v12 with PostgreSQL


When you install Veeam Backup & Replica on, the Veeam Backup & Replica on console is
automa cally installed on the backup server.
You can choose PostgreSQL as a Veeam Backup & Replica on database. It has no size limit or
computes restric ons and has improved performance over SQL Express.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and Replica on
manager server.
2. Download the Veeam
Backup and Replica on
v12 ISO image file from
the Veeam website sign-in
required).

43
Chapter 2 Deployment

3. Mount the Veeam Backup


and Replica on v12 iso
image file.
4. Run Setup.exe.

5. On the User Access


Control page, click Yes.

44

Technet24
Chapter 2 Deployment

6. On the Veeam Backup &


Replica on 12 page, click
Install.

7. Select Install Veeam


Backup & Replica on on
the Veeam Backup &
Replica on page.

45
Chapter 2 Deployment

8. Click I Accept on the


License Agreement page.

9. Click Browse on the


License page.

46

Technet24
Chapter 2 Deployment

10. Select a license file for


Veeam Backup &
Replica on and click
Open.

11. On the License page,


select Update license
automa cally (enable
usage repor ng). It will
automa cally download
and install a new license
when you renew or
expand your contract.
12. Click Next.

47
Chapter 2 Deployment

13. The setup wizard checks if


the required so ware is
installed on the machine
during the System
Configura on Check step.
If required components
are missing, the setup will
a empt to install them
independently. Reboo ng
is required a er the
components have been
successfully installed.
Click Reboot to restart the
machine.

14. Click Customize Se ngs


on the Ready to Install
page.

48

Technet24
Chapter 2 Deployment

15. On the Service Account


page, select LOCAL
SYSTEM account and click
Next.

16. On the Database page,


select PostgreSQL from
the database engine drop-
down list.
17. Select the Install a new
instance op on to install a
new PostgreSQL instance.
PostgreSQL 15.1 will be
installed on the Veeam
Backup & Replica on
server, and a database
named VeeamBackup will
be created.

49
Chapter 2 Deployment

18. Select the Use the exis ng


instance op on to use an
already installed
PostgreSQL instance.
Then, in the HOSTNAME:
PORT format, enter the
instance name.
19. Enter a name for the
Veeam Backup &
Replica on configura on
database in the Database
name field.
20. Select Windows
authen ca on creden als
of the backup service
account to connect to
PostgreSQL Server.
21. Click Next.

Note:

If you use an already installed


PostgreSQL instance or make
any changes to the machine
hardware, you must perform
addi onal PostgreSQL
instance configura on. To
accomplish this:

1. In the automa c mode,


run the Set-
VBRPSQLDatabaseServe
rLimits cmdlet.

50

Technet24
Chapter 2 Deployment

2. Start the PostgreSQL


service again.

22. On the Data loca ons


page, click Browse and
select the path in the
Installa on path field.
23. Browse and select the
path in the Guest file
system catalog: field.
24. Click Browse and select
the path in the Instant
recovery write cache field.
25. Click Next.

26. On the Port Configura on


page, specify the port
configura on to be used
by Veeam Backup and
Replica on and click Next.

51
Chapter 2 Deployment

27. Click Install on the Ready


to Install page.

28. Click Finish on the Veeam


Backup & Replica on 12
Successfully installed
page.

52

Technet24
Chapter 2 Deployment

Install Veeam Backup and Replication v12 with Microsoft SQL (or
SQL Express)
When you install Veeam Backup & Replica on, the Veeam Backup & Replica on console is
automa cally installed on the backup server.
You can choose Microso SQL as a Veeam Backup & Replica on database. However, you installed
a Microso SQL Server (or Express), either locally on the backup manager server or remotely. If
Microso SQL Server is not already installed. In that case, the Veeam Backup & Replica on won’t
install the Microso SQL Server Express Edi on on the backup server automa cally. You must
install it before installing Veeam Backup and Replica on v12 RTM version.
Microso SQL Server Express has a configura on data storage limit of 10 GB. The Express Edi on
is sufficient for the evalua on and small environments (500 VMs).

Instruc ons Screenshot (if applicable)

1. Ensure the Microso SQL


Server or Microso SQL
Server Express is installed
locally or remotely.
2. Log in to the Veeam
Backup and Replica on
manager server.
3. Download the Veeam
Backup and Replica on
v12 ISO image file from
the Veeam website sign-in
required).

53
Chapter 2 Deployment

4. Mount the Veeam Backup


and Replica on v12 iso
image file.
5. Run Setup.exe.

6. On the User Access


Control page, click Yes.

54

Technet24
Chapter 2 Deployment

7. On the Veeam Backup &


Replica on 12 page, click
Install.

8. Select Install Veeam


Backup & Replica on on
the Veeam Backup &
Replica on page.

55
Chapter 2 Deployment

9. Click I Accept on the


License Agreement page.

10. Click Browse on the


License page.

56

Technet24
Chapter 2 Deployment

11. Select a license file for


Veeam Backup &
Replica on and click
Open.

12. On the License page,


select Update license
automa cally (enable
usage repor ng). It will
automa cally download
and install a new license
when you renew or
expand your contract.
13. Click Next.

57
Chapter 2 Deployment

14. The setup wizard checks if


the required so ware is
installed on the machine
during the System
Configura on Check step.
If required components
are missing, the setup will
a empt to install them
independently. Reboo ng
is required a er the
components have been
successfully installed.
Click Reboot to restart the
machine.

15. Click Customize Se ngs


on the Ready to Install
page.

58

Technet24
Chapter 2 Deployment

16. On the Service Account


page, select LOCAL
SYSTEM account and click
Next.

17. On the Database page,


select the Microso SQL
Server from the database
engine drop-down list.

59
Chapter 2 Deployment

18. Click Browse to select the


SQL server and instance
on the SQL Server
instance session.
19. Select Windows
authen ca on creden als
of the backup service
account to connect to SQL
Server.
20. Click Next.

21. The error message will


pop up if the Microso
SQL Server or Microso
SQL Server Express does
not install locally or
remotely.

60

Technet24
Chapter 2 Deployment

22. On the Data loca ons


page, click Browse and
select the path in the
Installa on path field.
23. Browse and select the
path in the Guest file
system catalog: field.
24. Click Browse and select
the path in the Instant
recovery write cache field.
25. Click Next.

26. On the Port Configura on


page, specify the port
configura on to be used
by Veeam Backup and
Replica on and click Next.

61
Chapter 2 Deployment

27. Click Install on the Ready


to Install page.

28. Click Finish on the Veeam


Backup & Replica on 12
Successfully installed
page.

62

Technet24
Chapter 2 Deployment

Upgrade the Existing Veeam Backup and Replication to v12


Veeam Backup and Replica on v12 launched on Feb 14, 2023. If you are s ll using an older
version, it is me to upgrade it to v12. To upgrade Veeam Backup & Replica on to version 12, you
must have version 10a (build 10.0.1.4854) or later installed on the supported opera ng system.

Instruc ons Screenshot (if applicable)

1. Log in to the exis ng


Veeam Backup and
replica on manager
server.
2. Open the Veeam Backup
& Replica on Console.
3. Drop down the main
menu, select Help, and
click About to check
Veeam Backup &
Replica on version.

63
Chapter 2 Deployment

4. Make sure the exis ng


Veeam Backup and
Replica on version meets
the requirements.

64

Technet24
Chapter 2 Deployment

5. Drop down the main


menu and select
Configura on Backup.

65
Chapter 2 Deployment

6. On the Configura on
Backup Se ngs page,
select Backup now to back
up the current
configura on.
7. Click OK to close the
Configura on Backup
Se ngs a er the backup
is completed.

8. On the Home page, select


Jobs.
9. Right-click jobs and select
Disable to disable all jobs.

66

Technet24
Chapter 2 Deployment

10. Make sure all jobs are


disabled and close Veeam
Backup & Replica on
Console.

11. Download the Veeam


Backup and Replica on
v12 iso image file from
the Veeam website. (Sign-
in required).

12. Mount the Veeam Backup


& Replica on v12 ISO
image file.
13. Run Setup.exe.

67
Chapter 2 Deployment

14. On the User Account


Control page, click Yes.

15. On the Veeam Backup &


Replica on 12 page, click
Upgrade.

68

Technet24
Chapter 2 Deployment

16. On the Veeam Backup &


Replica on page, select
Upgrade Veeam Backup &
Replica on.

17. On the License


Agreement page, click I
Accept.

69
Chapter 2 Deployment

18. On the Upgrade page,


click Next.

19. On the License page, click


Browse.

70

Technet24
Chapter 2 Deployment

20. Select the Veeam Backup


and Replica on license
file, and click Open.

21. Select Update license


automa cally (enable
usage repor ng) on the
License page and click
Next.

71
Chapter 2 Deployment

22. Select LOCAL SYSTEM


account or specify
another user account on
the Service Account page
and click Next.

Note:

If you would like to use the


specified user account, the
user account must be a
member of the Administrators
group on the Veeam Backup &
Replica on machine. Also, it
must have db_owner rights
for the configura on
database.

23. On the Database page,


click Next.

72

Technet24
Chapter 2 Deployment

24. Click Yes on the ques on


pop-up message. Veeam
will automa cally upgrade
the database to the
version you are installing.

25. If the Configura on Check


page returns errors,
resolve them before
upgrading. If the check
produces warning or
informa on messages,
you can proceed with the
upgrade and deal with
them later.
26. Click Next.

73
Chapter 2 Deployment

27. On the Ready to Upgrade


page, click Upgrade.

28. On the Veeam Backup &


Replica on 12
successfully upgraded
page, click Finish.

74

Technet24
Chapter 2 Deployment

29. Open Veeam Backup &


Replica on management
console and click Connect.

30. Select the all servers


checkbox on the
Components Update page
and click Apply.

75
Chapter 2 Deployment

31. Click Show servers on the


provide signal-use
creden als ques on page.

32. Review the Server lis ng


and click Yes.

76

Technet24
Chapter 2 Deployment

33. On the Host Creden als


page, select the host, click
Set User and select Singal-
use creden als for the
hardened repository.

34. Enter your creden al


informa on and click OK.

77
Chapter 2 Deployment

35. Click Test Now on the


Host Creden als page.

36. Ensure the creden al has


been tested successfully
and click OK.

78

Technet24
Chapter 2 Deployment

37. Click OK on the Host


Creden als page.

79
Chapter 2 Deployment

38. Ensure the components


update successfully for
selected servers and click
Finish.

39. Drop down the main


menu, select Help, and
click About to check
Veeam Backup &
Replica on version.

80

Technet24
Chapter 2 Deployment

40. Ensure the exis ng Veeam


Backup and Replica on
version is upgraded.

41. On the Home page, select


Jobs.
42. Right-click jobs and
unselect Disable to enable
all jobs.

81
Chapter 2 Deployment

43. Ensure all jobs are


enabled.

82

Technet24
Chapter 2 Deployment

Migrate the Existing Veeam Backup and Replication to the new


server with PostgreSQL
PostgreSQL is free and has no size limit or compute restric ons has improved performance over
SQL Express.

Instruc ons Screenshot (if applicable)

1. Log in to the exis ng


Veeam Backup and
replica on manager
server.
2. Open the Veeam Backup
& Replica on Console.
3. Select and right-click all
jobs.
4. Select Disable.

83
Chapter 2 Deployment

5. Drop down the main


menu and select
Configura on Backup.

6. Click Backup now on the


Configura on Backup
Se ngs page.

84

Technet24
Chapter 2 Deployment

7. Copy the configura on


file from the backup
repository to the new
Backup and Replica on
manager server.

8. Log in to the new Veeam


Backup and Replica on
manager server.
9. Open the Veeam Backup
& Replica on Console,
and click Connect.

85
Chapter 2 Deployment

10. Drop down the main


menu and select
Configura on Backup.

11. Click Restore on the


Configura on Backup
Se ngs page.

86

Technet24
Chapter 2 Deployment

12. Click Yes on the User


Account Control page.

13. Select Migrate on the


Restore Mode page.

87
Chapter 2 Deployment

14. Select this server in the


Backup repository field on
the Configura on Backup
page.
15. Click Browse in the
Backup file field.

16. Select the backup


configura on file and click
Open.

88

Technet24
Chapter 2 Deployment

17. Click Analyze on the


Configura on Backup
page.

18. Click Next on the Backup


Contents page.

89
Chapter 2 Deployment

19. On the Password page,


enter the password of the
configura on file in the
Password field.
20. Enter the descrip on in
the Hint field.
21. Click Validate.

22. Select PostgreSQL from


the Database drop-down
list on the Target
Database page.
23. Enter the instance name
and Database name in the
Connec on session.
24. Select Windows
authen ca on using the
service account
creden als in the
Authen ca on session.

90

Technet24
Chapter 2 Deployment

25. Click Yes on the warning


message.

26. Select the Backup and


replica catalog checkbox
on the Restore Op ons
page.
27. Select the Session history
checkbox.
28. Select Enable required
PowerShell execu on
policy for SCVMM
checkbox.
29. Select Backup exis ng
database before
configura on restore
(recommended).
30. Click Restore.

31. Click Yes on the close


console and stop all
running jobs warning
messages.

91
Chapter 2 Deployment

32. On the Restore page,


ensure the Configura on
restore is completed
successfully and click
Next.

33. On the Creden als page,


ensure all creden als are
up-to-date and click Next.

92

Technet24
Chapter 2 Deployment

34. Ensure all creden als are


up-to-date on the Cloud
Creden als page and click
Start.

35. Click Finish on the


Summary page.

93
Chapter 2 Deployment

36. Open Veeam Backup &


Replica on console and
click Connect.

37. Select and right-click all


jobs, and unselect Disable
to enable all jobs.

94

Technet24
Chapter 2 Deployment

38. Ensure all jobs are re-


enabled.

95
Chapter 2 Deployment

Migrate the Existing Veeam Backup and Replication to the new


server with Microsoft SQL
Microso SQL Server (or Express), either locally on the backup manager server or remotely.
Microso SQL Server Express has a configura on data storage limit of 10 GB. The Express Edi on
is sufficient for the evalua on and small environments (500 VMs).

Instruc ons Screenshot (if applicable)

1. Log in to the exis ng


Veeam Backup and
replica on manager
server.
2. Open the Veeam Backup
& Replica on Console.
3. Select and right-click all
jobs.
4. Select Disable.

96

Technet24
Chapter 2 Deployment

5. Drop down the main


menu and select
Configura on Backup.

6. Click Backup now on the


Configura on Backup
Se ngs page.

97
Chapter 2 Deployment

7. Copy the configura on


file from the backup
repository to the new
Backup and Replica on
manager server.

8. Log in to the new Veeam


Backup and Replica on
manager server.
9. Open the Veeam Backup
& Replica on Console,
and click Connect.

98

Technet24
Chapter 2 Deployment

10. Drop down the main


menu and select
Configura on Backup.

11. Click Restore on the


Configura on Backup
Se ngs page.

99
Chapter 2 Deployment

12. Click Yes on the User


Account Control page.

13. Select Migrate on the


Restore Mode page.

100

Technet24
Chapter 2 Deployment

14. Select this server in the


Backup repository field on
the Configura on Backup
page.
15. Click Browse in the
Backup file field.

16. Select the backup


configura on file and click
Open.

101
Chapter 2 Deployment

17. Click Analyze on the


Configura on Backup
page.

18. Click Next on the Backup


Contents page.

102

Technet24
Chapter 2 Deployment

19. On the Password page,


enter the password of the
configura on file in the
Password field.
20. Enter the descrip on in
the Hint field.
21. Click Validate.

22. Select Microso SQL


Server from the Database
drop-down list on the
Target Database page.
23. Enter the instance name
and Database name in the
Connec on session.
24. Select Windows
authen ca on using the
service account
creden als in the
Authen ca on session.

103
Chapter 2 Deployment

25. Click Yes on the warning


message.

26. Select the Backup and


replica catalog checkbox
on the Restore Op ons
page.
27. Select the Session history
checkbox.
28. Select Enable required
PowerShell execu on
policy for SCVMM
checkbox.
29. Select Backup exis ng
database before
configura on restore
(recommended).
30. Click Restore.

31. Click Yes on the warning


message.

104

Technet24
Chapter 2 Deployment

32. On the Restore page,


ensure the Configura on
restore is completed
successfully and click
Next.

33. On the Creden als page,


ensure all creden als are
up-to-date and click Next.

105
Chapter 2 Deployment

34. Ensure all creden als are


up-to-date on the Cloud
Creden als page and click
Start.

35. Click Finish on the


Summary page.

106

Technet24
Chapter 2 Deployment

36. Open Veeam Backup &


Replica on console and
click Connect.

37. Select and right-click all


jobs, and unselect Disable
to enable all jobs.

107
Chapter 2 Deployment

38. Ensure all jobs are re-


enabled.

108

Technet24
Chapter 2 Deployment

Install Veeam Backup and Replication Console 12


When you install Veeam Backup & Replica on, the Veeam Backup & Replica on console is
automa cally installed on the backup server. If you want to access Veeam Backup & Replica on
remotely, you can install the Veeam Backup & Replica on console on a dedicated machine.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and Replica on
manager console
machine.
2. Download the Veeam
Backup and Replica on
v12 ISO image file from
the Veeam website sign-in
required).

3. Mount Veeam Backup &


Replica on v12 iso image
file.
4. Run Setup.exe.

109
Chapter 2 Deployment

5. On the User Access


Control page, click Yes.

6. On the Veeam Backup &


Replica on 12 page, click
Install.

110

Technet24
Chapter 2 Deployment

7. Select Install Veeam


Backup & Replica on
Console on the Veeam
Backup & Replica on
page

8. Click I Accept on the


License Agreement page.

111
Chapter 2 Deployment

9. The setup wizard checks if


the required so ware is
installed on the machine
during the System
Configura on Check step.
If required components
are missing, the setup will
a empt to install them
independently. Reboo ng
is required a er the
components have been
successfully installed.
Click Reboot to restart the
machine.

10. Click Customize Se ngs


on the Ready to Install
page.

112

Technet24
Chapter 2 Deployment

11. On the Data loca ons


page, click Browse and
select the path in the
Installa on path field.
12. Click Next.

13. Click Install on the Ready


to Install page.

113
Chapter 2 Deployment

14. Click Finish on the Veeam


Backup & Replica on 12
Successfully installed
page.

15. Verify that the Veeam


Backup Service is running
on the Veeam Backup
Server, and then test
connec vity to that
service from the remote
machine using the
following PowerShell
cmdlet.

Test-NetConnec on -
ComputerName
<hostname/ip> -Port 9392

114

Technet24
Chapter 2 Deployment

16. Open the Veeam Backup


& Replica on Console,
click Connect, enter the
Backup & Replica on
manager server name or
IP address, and click
Connect.

17. Ensure you can connect to


the Veeam Backup &
Replica on manager
server without issue.

115
Chapter 2 Deployment

Upgrade to Veeam Backup and Replication Console 12


To gain remote access to Veeam Backup & Replica on v12, you must first upgrade the Veeam
Backup & Replica on console to v12 on a dedicated machine.

Instruc ons Screenshot (if applicable)

1. Log in to the exis ng


Veeam Backup and
replica on manager
console machine.
2. Download the Veeam
Backup and Replica on
v12 iso image file from
the Veeam website. (Sign-
in required).

116

Technet24
Chapter 2 Deployment

3. Mount the Veeam Backup


& Replica on v12 ISO
image file.
4. Run Setup.exe.

5. Click Yes on the User


Account Control page.

117
Chapter 2 Deployment

6. Click Upgrade on the


Veeam Backup &
Replica on 12 page.

7. Select Upgrade Veeam


Backup & Replica on
Console on the Veeam
Backup & Replica on
page.

118

Technet24
Chapter 2 Deployment

8. On the License
Agreement page, click I
Accept.

9. On the Upgrade page,


click Next.

119
Chapter 2 Deployment

10. Click Upgrade on the


Ready to Upgrade page.

11. Click Finish on the Veeam


Backup & Replica on
Console 12 successfully
upgraded page.

120

Technet24
Chapter 2 Deployment

12. Open Veeam and


Replica on Console 12
and click Connect.

13. Ensure connec on to


Veeam Backup and
Replica on manager
server is successful.

121
Chapter 3 Configura on

Chapter 3

Configuration
This chapter will review the ini al configura ons of Veeam Backup and Replica on. These
include:
 Add Virtualiza on Servers and Hosts

 Add Physical Machines

 Add Backup Repositories

 Genera on Se ngs

These steps must be configured before se ng up Backup Jobs, covered in the next chapter.

122

Technet24
Chapter 3 Configura on

Virtualization Servers and Hosts


Veeam Backup & Replica on allows you to build a scalable backup infrastructure for many
environments. Physical and virtual machines can be added to the backup infrastructure and
assigned different roles. In addi on, Veeam Backup and Replica on components can coexist on
the same machine.
The Backup Infrastructure can be expanded with the following types of servers and hosts:
 Microso Hyper-V Standalone Servers

 Microso Hyper-V Cluster Servers

 Microso SMB3 Servers

 Microso Windows Servers

 Linux Server

123
Chapter 3 Configura on

Add Microsoft Hyper-V Standalone Servers


You must add the Microso Hyper-V standalone hosts you plan to use as source and target for
backup, replica on and other ac vi es.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console,
and click Connect.

124

Technet24
Chapter 3 Configura on

3. On the Home page, select


Inventory.
4. On the Inventory page,
select Virtual
Infrastructure and click
Add Server.

5. On the Add Server page,


select Microso Hyper-V.

125
Chapter 3 Configura on

6. Enter the Microso


Hyper-V server's full DNS
name or IP address on the
Name page.
7. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

8. Select Microso Hyper-V


server (standalone) on
the Type page and click
Next.

126

Technet24
Chapter 3 Configura on

9. Select an account from


the Creden als drop-
down list on the
Creden als page or click
Add on the right to add
the creden als.

10. On the Creden als page,


enter a user name in the
Username field. You can
also click Browse to select
an exis ng user account.
11. Enter the password In the
Password field.
12. Give a brief descrip on in
the Descrip on field for
future reference and click
OK.

127
Chapter 3 Configura on

13. On the Creden als page,


click Ports.

128

Technet24
Chapter 3 Configura on

14. If necessary, change the


network ports used by
Veeam Backup &
Replica on components
on the Network Se ngs
page.
15. Configure connec on
se ngs for file copy
opera ons in the Network
Se ngs window's Data
transfer op ons sec on.
Provide a set of ports for
transmission channels
between the source and
target hosts (one port per
task).
16. Select the Run server on
this side checkbox in the
Preferred TCP connec on
role sec on. The outside
client cannot connect to
the server on the NAT
network in the NAT
scenario. As a result,
services that require
external connec on
ini a on may be
disrupted.
17. Click OK.

129
Chapter 3 Configura on

18. Click Next on the


Creden als page.

19. If you add a standalone


Microso Hyper-V host on
the Review page, specify
the number of tasks the
Microso Hyper-V host
must handle concurrently
in the Max concurrent
tasks field.
20. Click Apply.

130

Technet24
Chapter 3 Configura on

21. Click Next on the Apply


page.

22. Click Finish on the


Summary page.

131
Chapter 3 Configura on

Add Microsoft Hyper-V Clusters


You must add the Microso Hyper-V clusters you plan to use as source and target for backup,
replica on and other ac vi es.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console,
and click Connect.

132

Technet24
Chapter 3 Configura on

3. On the Home page, select


Inventory.
4. On the Inventory page,
select Virtual
Infrastructure and click
Add Server.

5. On the Add Server page,


select Microso Hyper-V.

133
Chapter 3 Configura on

6. Enter the Microso


Hyper-V Cluster's full DNS
name or IP address on the
Name page.
7. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

8. On the Type page, select


Microso Hyper-V cluster
and click Next.

134

Technet24
Chapter 3 Configura on

9. Select an account from


the Creden als drop-
down list on the
Creden als page or click
Add on the right to add
the creden als.

10. On the Creden als page,


enter a user name in the
Username field. You can
also click Browse to select
an exis ng user account.
11. Enter the password In the
Password field.
12. Give a brief descrip on in
the Descrip on field for
future reference and click
OK.

135
Chapter 3 Configura on

13. On the Creden als page,


click Ports.

136

Technet24
Chapter 3 Configura on

14. If necessary, change the


network ports used by
Veeam Backup &
Replica on components
on the Network Se ngs
page.
15. Configure connec on
se ngs for file copy
opera ons in the Network
Se ngs window's Data
transfer op ons sec on.
Provide a set of ports for
transmission channels
between the source and
target hosts (one port per
task).
16. Select the Run server on
this side checkbox in the
Preferred TCP connec on
role sec on. The outside
client cannot connect to
the server on the NAT
network in the NAT
scenario. As a result,
services that require
external connec on
ini a on may be
disrupted.
17. Click OK.

137
Chapter 3 Configura on

18. On the Creden als page,


click Next.

19. Select all servers’


checkboxes on the Review
page and click Apply.

20. Click Next on the Apply


page.

138

Technet24
Chapter 3 Configura on

21. Click Finish on the


Summary page.

139
Chapter 3 Configura on

Add Microsoft SMB3 Servers


Veeam Backup & Replica on can perform backup, replica on, and file copy opera ons on
Microso Hyper-V VMs whose discs are located on Microso SMB3 file shares.
If a Microso SMB3 server or cluster is not added to the backup infrastructure, Veeam Backup &
Replica on cannot process such VMs using the changed block tracking mechanism.
If VMs with discs on SMB3 shared folders are registered on Microso Hyper-V Server 2016 or
later, a Microso SMB3 server is not required. However, if the Microso SMB3 server is not
added, you cannot specify the Max snapshots, and latency control se ngs for SMB3 shared
folders.
Note:
You cannot use Microso SMB3 shared folder as storage for VM replicas.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console,
and click Connect.

140

Technet24
Chapter 3 Configura on

3. On the Home page, select


Backup Infrastructure.
4. On the Backup
Infrastructure page, select
Managed Servers.
5. Right-click Managed
Servers and select Add
Server.

6. Select Microso Hyper-V


on the Add Server Page.

141
Chapter 3 Configura on

7. Select SMB3 on the


Microso Hyper-V page.

8. Enter the Microso SMB3


server's full DNS name or
IP address on the Name
page.
9. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

142

Technet24
Chapter 3 Configura on

10. On the Type page, Choose


the type of Microso
SMB3 server you want to
add and click Next.

11. Select an account from


the Creden als drop-
down list on the
Creden als page or click
Add on the right to add
the creden als.

143
Chapter 3 Configura on

12. On the Creden als page,


enter a user name in the
Username field. You can
also click Browse to select
an exis ng user account.
13. Enter the password In the
Password field.
14. Give a brief descrip on in
the Descrip on field for
future reference and click
OK.

15. On the Creden als page,


click Ports.

144

Technet24
Chapter 3 Configura on

16. If necessary, change the


network ports used by
Veeam Backup &
Replica on components
on the Network Se ngs
page.
17. Configure connec on
se ngs for file copy
opera ons in the Network
Se ngs window's Data
transfer op ons sec on.
Provide a set of ports for
transmission channels
between the source and
target hosts (one port per
task).
18. Select the Run server on
this side checkbox in the
Preferred TCP connec on
role sec on. The outside
client cannot connect to
the server on the NAT
network in the NAT
scenario. As a result,
services that require
external connec on
ini a on may be
disrupted.
19. Click OK.

145
Chapter 3 Configura on

20. Click Next on the


Creden als page.

21. If you add a standalone


Microso Hyper-V host on
the Review page, specify
the number of tasks the
Microso Hyper-V host
must handle concurrently
in the Task limit field.
22. Click Apply.

146

Technet24
Chapter 3 Configura on

23. Click Next on the Apply


page.

Click Finish on the Summary


page.

147
Chapter 3 Configura on

24. Ensure the new Microso


SMB3 server is added.

148

Technet24
Chapter 3 Configura on

Add Microsoft Windows Servers


Suppose you plan to use as backup infrastructure components and servers that you plan to use
for various types of restore opera ons. In that case, you must add the Microso Windows servers
to the backup infrastructure.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console,
and click Connect.

149
Chapter 3 Configura on

3. On the Home page, select


Backup Infrastructure.

4. On the Backup
Infrastructure page, select
Managed Servers.

5. Right-click Managed
Servers and select Add
Server.

6. On the Add Server page,


select Microso
Windows.

150

Technet24
Chapter 3 Configura on

7. Enter the Microso


Windows server's full DNS
name or IP address on the
Name page.

8. Give a brief descrip on in


the Descrip on field for
future reference and click
Next.

9. Select an account from


the Creden als drop-
down list on the
Creden als page or click
Add on the right to add
the creden als.

151
Chapter 3 Configura on

10. On the Creden als page,


enter a user name in the
Username field. You also
can click Browse to select
an exis ng user account.

11. Enter the password In the


Password field.

12. Give a brief descrip on in


the Descrip on field for
future reference and click
OK.

13. On the Creden als page,


click Ports.

152

Technet24
Chapter 3 Configura on

14. If necessary, change the


network ports used by
Veeam Backup &
Replica on components
on the Network Se ngs
page.

15. Configure connec on


se ngs for file copy
opera ons in the Network
Se ngs window's Data
transfer op ons sec on.
Provide a set of ports for
transmission channels
between the source and
target hosts (one port per
task).

16. Select the Run server on


this side checkbox in the
Preferred TCP connec on
role sec on. The outside
client cannot connect to
the server on the NAT
network in the NAT
scenario. As a result,
services that require
external connec on
ini a on may be
disrupted.

17. Click OK.

153
Chapter 3 Configura on

18. On the Creden als page,


click Next.

19. On the Review page, click


Apply.

154

Technet24
Chapter 3 Configura on

20. Click Next on the Apply


page.

21. Click Finish on the


Summary page.

155
Chapter 3 Configura on

22. Ensure the new Microso


Windows server is added.

156

Technet24
Chapter 3 Configura on

Add Linux Server for a hardened repository


Suppose you plan to use backup infrastructure components and servers that you plan to use for
various types of restore opera ons. In that case, you must add the Linux servers to the backup
infrastructure.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console,
and click Connect.

157
Chapter 3 Configura on

3. On the Home page, select


Backup Infrastructure.

4. On the Backup
Infrastructure page, select
Managed Servers.

5. Right-click Managed
Servers and select Add
Server.

6. Select Linux on the Add


Server page.

158

Technet24
Chapter 3 Configura on

7. Enter the Linux server's


full DNS name or IP
address on the Name
page.

8. Give a brief descrip on in


the Descrip on field for
future reference and click
Next.

9. Click Add on the SSH


Connec on page and
select Single-use
creden al for the
hardened repository.

Note:

These creden als are not


saved by Veeam Backup &
Replica on. They are only
used to install Veeam Data
Mover on the server. These
creden als reduce the rights
of the Veeam Data Mover.
Single-use or temporary
creden als are recommended
op ons for a hardened
repository.

159
Chapter 3 Configura on

10. On the Creden als page,


Enter a username

11. Enter a user name in the


Username field.

12. Enter a password in the


Password field.

13. Enter 22 in the SSH port


field.

14. Give a brief descrip on in


the Descrip on field for
future reference and click
OK.

15. On the SSH Connec on


page, click Advanced.

160

Technet24
Chapter 3 Configura on

16. Select Yes on the trust


warning message page.

161
Chapter 3 Configura on

17. If necessary, change the


network ports used by
Veeam Backup &
Replica on components
on the Network Se ngs
page.

18. In the Service console


connec on sec on, enter
an SSH meout. The
default meout is set to
20000 ms.

19. Configure connec on


se ngs for file copy
opera ons in the Network
Se ngs window's Data
transfer op ons sec on.
Provide a set of ports for
transmission channels
between the source and
target hosts (one port per
task).

20. Select the Run server on


this side checkbox in the
Preferred TCP connec on
role sec on. The outside
client cannot connect to
the server on the NAT
network in the NAT
scenario. As a result,
services that require
external connec on
ini a on may be
disrupted.

162

Technet24
Chapter 3 Configura on

21. Click OK.

22. Click Next on the SSH


Connec on page.

23. Click Apply on the Review


page.

163
Chapter 3 Configura on

24. Click Next on the Apply


page.

25. Click Finish on the


Summary page.

164

Technet24
Chapter 3 Configura on

26. Ensure the new Linux


server is added.

165
Chapter 3 Configura on

Add Off-Host Backup proxy servers


Off-Host Backup proxy servers will retrieve VM data from the source datastore, process it and
transfer it to the des na on. The off-host backup proxy removes unwanted overhead on the
produc on Hyper-V host.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console,
and click Connect.

166

Technet24
Chapter 3 Configura on

3. On the Home page, select


Backup Infrastructure.

4. On the Backup
Infrastructure page, select
Backup Proxies.

5. Right-click Backup Proxies


and select Add Proxies.

6. Select Hyper-V off-host


backup proxy on the Add
Backup Proxy page.

167
Chapter 3 Configura on

7. Click Add New in the


Choose server field on the
Server page.

8. Enter the Microso


Windows server's full DNS
name or IP address on the
Name page.

9. Give a brief descrip on in


the Descrip on field for
future reference and click
Next.

168

Technet24
Chapter 3 Configura on

10. Select an account from


the Creden als drop-
down list on the
Creden als page or click
Add on the right to add
the creden als.

11. On the Creden als page,


enter a user name in the
Username field. You also
can click Browse to select
an exis ng user account.

12. Enter the password In the


Password field.

13. Give a brief descrip on in


the Descrip on field for
future reference and click
OK.

169
Chapter 3 Configura on

14. On the Creden als page,


click Ports.

170

Technet24
Chapter 3 Configura on

15. If necessary, change the


network ports used by
Veeam Backup &
Replica on components
on the Network Se ngs
page.

16. Configure connec on


se ngs for file copy
opera ons in the Network
Se ngs window's Data
transfer op ons sec on.
Provide a set of ports for
transmission channels
between the source and
target hosts (one port per
task).

17. Select the Run server on


this side checkbox in the
Preferred TCP connec on
role sec on. The outside
client cannot connect to
the server on the NAT
network in the NAT
scenario. As a result,
services that require
external connec on
ini a on may be
disrupted.

18. Click OK.

171
Chapter 3 Configura on

19. Click Next on the


Creden als page.

20. Click Apply on the Review


page.

172

Technet24
Chapter 3 Configura on

21. On the Apply page, click


Next.

22. Click Finish on the


Summary page.

173
Chapter 3 Configura on

23. Give a brief descrip on in


the Proxy descrip on field
for future reference.

24. In the Connected volumes


field, leave the default
se ngs.

25. Enter the number of tasks


the off-host backup proxy
must handle concurrently
in the Max concurrent
tasks field.

26. Click Next.

27. On the Traffic Rules page,


click Next.

28. You can open global


network traffic se ngs
and modify them directly
from the New Hyper-V
Off-Host Proxy wizard. To
do this, click the Manage
network traffic rules link
at the bo om of the
wizard.

174

Technet24
Chapter 3 Configura on

29. Click Apply on the Review


page.

30. Click Next on the Apply


page.

175
Chapter 3 Configura on

31. Click Finish on the


Summary page.

32. Ensure the new Off-Host


Backup proxy server is
added.

176

Technet24
Chapter 3 Configura on

Add WAN Acceleration


Veeam's WAN accelera on technology op mizes data transfer to remote loca ons. It is explicitly
designed for off-site backup copy and replica on jobs. You must deploy a pair of WAN
accelerators in your backup infrastructure to enable WAN accelera on and data deduplica on
technologies.
Note:
The Veeam Universal License includes WAN accelera on. Veeam Backup & Replica on Enterprise
or Enterprise Plus edi ons are required when using a legacy socket-based licence.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

177
Chapter 3 Configura on

3. On the Home page, select


Backup Infrastructure.

4. On the Backup
Infrastructure page, select
WAN Accelerators.

5. Right-click WAN
Accelerators and select
Add WAN Accelerator.

6. Select a Microso
Windows server from the
Choose server drop-down
list on the Server page.

7. Give a brief descrip on in


the Descrip on field for
future reference.

8. Specify the port number


in the Traffic port field.

9. Specify the number of


connec ons in the
Streams field. If the link
has low latency and high
bandwidth, the default
se ng (5 streams) may
sufficiently saturate it
thoroughly. However, the
link s ll needs to be fully
u lized the number of
streams may be
increased. According to

178

Technet24
Chapter 3 Configura on

tests, mul plying the link


speed by 1.5 is a good
best prac ce for
es ma ng the number of
streams required for high
latency.

10. Veeam recommends using


the High bandwidth mode
op on if your network
bandwidth exceeds 100
Mbps. This mode offers
significant bandwidth
savings on WAN links less
than 1 Gbps than the
direct method.

11. Click Next.

12. Specify a path to the


folder in the Folder field
on the Cache page.

13. Specify the size for the


global cache in the Cache
size field.

14. Click Next.

Note:

If both WAN accelerators


(source and target) are set to
High bandwidth, WAN
accelera on does not use the
global cache. However,
remember that you can
deac vate the High

179
Chapter 3 Configura on

bandwidth mode and return


to the Low bandwidth mode
any me.

15. On the Review page, click


Apply.

180

Technet24
Chapter 3 Configura on

16. Click Next on the Apply


page.

17. Click Finish on the


Summary page.

181
Chapter 3 Configura on

18. Verify that the WAN


Accelerator has been
added.

182

Technet24
Chapter 3 Configura on

Physical Machines
Veeam Backup & Replica on is a centralized control center for deploying and managing Veeam
Agent, including Veeam Agent for Microso Windows, Linux, IBM AIX, Oracle Solaris, and Mac.
Physical machines you want to protect with Veeam Agents are organized into protec on groups
in Veeam Backup & Replica on. A protec on group groups together protected computers of the
same type. To simplify the management of such computers, Whether you create a protec on
group for laptops, worksta ons, servers or any other type of computer, Veeam Backup &
Replica on allows you to group them for dedicated and targeted protec on easily. A separate
protec on group can also be used for Veeam Agent computers that you manage differently than
other machines in your infrastructure.
You can use protec on groups to automate the Veeam Agent deployment and management on
computers in the infrastructure. When you configure a protec on group, you can specify
scheduling op ons for protected computer discovery and Veeam Agent deployment. As a result,
you do not need to install, configure, and run Veeam Agent on each computer whose data you
wish to protect. Instead, you can use the Veeam Backup & Replica on console to remotely
perform all Veeam Agent deployment, administra on, data protec on, and disaster recovery
tasks.

183
Chapter 3 Configura on

Add Veeam Agent to On-Premises Microsoft Windows Physical


machines
You can back up and restore the On-Premises physical machines running Windows opera ng
systems. Backup agents are installed on each computer by Veeam Backup & Replica on.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console,
and click Connect.

184

Technet24
Chapter 3 Configura on

3. Select Inventory on the


Home page.

4. On the Inventory page,


select Physical
Infrastructure and click
Create Protec on Group.

5. On the Name page,


specify a protec on group
name.

6. Give a brief descrip on in


the Descrip on field for
future reference and click
Next.

185
Chapter 3 Configura on

7. Select Specify protec on


scope for the created
protec on group on the
Type page and click Next.

 Individual
computers: add
specific
computers to the
protec on group.

 Microso Ac ve
Directory objects:
select this op on
to add one or
several Ac ve
Directory objects
to the protec on
group.

 Computers from
CSV file: add to
the protec on
scope computers
listed in a CSV file.

 Computers with
pre-installed
agents: create a
protec on group
for pre-installed
Veeam Agents.

 Cloud machines:
select this op on
to add Amazon
EC2 instances or

186

Technet24
Chapter 3 Configura on

Microso Azure
virtual machines.

8. Click Add on the


Computers page.

9. Specify a DNS name or IP


address on the Add
Computer page.

10. From the Creden als list,


select a user account with
administra ve
permissions on the
computer and click OK.

11. If you need to set up


creden als beforehand,
click the Manage accounts
link or Add on the right.

187
Chapter 3 Configura on

12. Click Test Now on the


Computers page.

13. On the Guest Creden als


Test page and click Close.

188

Technet24
Chapter 3 Configura on

14. Click Next on the


Computers page.

15. On the Op ons page, in


the Discovery sec on,
define the schedule for
automa c computer
discovery within the
scope of the protec on
group.

16. In the Deployment


sec on, select a Microso
Windows server from the
Distribu on server list to
serve as a distribu on
server.

17. Select the Install Backup


agent checkbox.

18. Select the Install changed


block tracking driver (for

189
Chapter 3 Configura on

Windows machines only)


checkbox.

19. Click Advanced to


customize advanced
protec on group se ngs.

20. On the Advanced Se ngs


page, specify the below
se ngs that will be
deployed on computers
included in the protec on
group and click OK.

 Limi ng
bandwidth
consump on:
specify the
maximum speed
for transferring
backed-up data
from the Veeam
Agent computer
to the target
loca on.

 Restrict metered
connec ons
usage: Veeam
Agent
automa cally
detects metered
connec ons and
does not perform
backup when

190

Technet24
Chapter 3 Configura on

your computer is
on such
connec on.

 Restrict VPN
connec on usage:
Veeam Agent for
Microso
Windows will
automa cally
detect a VPN
connec on and
not perform a
backup when the
Veeam Agent
computer is on
such a
connec on.

 Restrict Wi-Fi
usage to these
networks: restrict
usage of wireless
networks for
Veeam Agent
running on
Microso
Windows
worksta ons.

21. Backup I/O se ngs: You


can instruct Veeam Agent
for Microso Windows to
thro le its ac vi es
during backup.

 Thro le agent
ac vity on the
191
Chapter 3 Configura on

type of computers
to thro le Veeam
Agent backup
ac vi es:
Worksta ons,
Servers, or All
hosts.

22. Security se ngs: You can


allow user accounts that
do not have
administra ve privileges
on a Veeam Agent
computer to perform a
file-level restore on this
computer.

192

Technet24
Chapter 3 Configura on

23. On the Advanced page,


select No fica ons.

193
Chapter 3 Configura on

24. On the No fica on page,


select Send daily agent
status report e-mail to the
following recipients:
checkbox and enter an
email address.

25. Enter several addresses


separated by a semicolon.

26. You can use global


no fica on se ngs or
specify custom
no fica on se ngs and
click OK.

194

Technet24
Chapter 3 Configura on

27. On the Op ons page, click


Next.

28. On the Review page, click


Apply.

195
Chapter 3 Configura on

29. Click Next on the Apply


page.

30. On the Summary page,


select Run discovery
when I click the Finish
checkbox and click Finish.

196

Technet24
Chapter 3 Configura on

31. Ensure the opera on is


complete without error
on the Agents discovery
session page.

32. Verify that the protec on


group has been added.

197
Chapter 3 Configura on

Add Veeam Agent to On-Premises Linux Physical machines


You can back up and restore the On-Premises physical machines running Linux opera ng systems.
Backup agents are installed on each computer by Veeam Backup & Replica on.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console,
and click Connect.

3. Select Inventory on the


Home page.
4. On the Inventory page,
select Physical
Infrastructure and click
Create Protec on Group.

198

Technet24
Chapter 3 Configura on

5. On the Name page,


specify a protec on group
name.
6. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.
7. Select Specify protec on
scope for the created
protec on group on the
Type page and click Next.
 Individual
computers: add
specific
computers to the
protec on group.
 Microso Ac ve
Directory objects:
select this op on
to add one or
several Ac ve
Directory objects
to the protec on
group.
 Computers from
CSV file: add to
the protec on
scope computers
listed in a CSV file.
 Computers with
pre-installed
agents: create a
protec on group
for pre-installed
Veeam Agents.
 Cloud machines:
select this op on
to add Amazon

199
Chapter 3 Configura on

EC2 instances or
Microso Azure
virtual machines.
8. Click Add on the
Computers page.

9. Specify a DNS name or IP


address on the Add
Computer page.
10. From the Creden als list,
select a user account with
administra ve
permissions on the
computer and click OK.
11. If you need to set up
creden als beforehand,
click the Manage accounts
link or Add on the right.
12. Click Add in the
Creden als field, select
Stored and click Linux
account.

200

Technet24
Chapter 3 Configura on

13. On the Creden als page,


Enter a user name in the
Username field.
14. Enter a password in the
Password field.
15. Enter 22 in the SSH port
field.
16. Select the Elvate account
privileges automa cally
checkbox for a non-root
user with root account
privileges.
17. Select Add account to the
sudoers file checkbox.
18. Enter the password in the
Root password field.
19. Give a brief descrip on in
the Descrip on field for
future reference and click
OK.

20. Click OK on the add


Computer page.

201
Chapter 3 Configura on

21. Click Test Now on the


Computers page.

22. On the Guest Creden als


Test page and click Close.

202

Technet24
Chapter 3 Configura on

23. Click Next on the


Computers page.

24. On the Op ons page, in


the Discovery sec on,
define the schedule for
automa c computer
discovery within the
scope of the protec on
group.
25. In the Deployment
sec on, select a Microso
Windows server from the
Distribu on server list to
serve as a distribu on
server.
26. Select the Install Backup
agent checkbox.
27. Click Advanced to
customize advanced
protec on group se ngs.

203
Chapter 3 Configura on

28. On the Advanced Se ngs


page, specify the below
se ngs that will be
deployed on computers
included in the protec on
group and click OK.

 Limi ng
bandwidth
consump on:
specify the
maximum speed
for transferring
backed-up data
from the Veeam
Agent computer
to the target
loca on.

 Restrict metered
connec ons
usage: Veeam
Agent
automa cally
detects metered
connec ons and
does not perform
backup when
your computer is
on such
connec on.

 Restrict VPN
connec on usage:
Veeam Agent for
Microso
Windows will

204

Technet24
Chapter 3 Configura on

automa cally
detect a VPN
connec on and
not perform a
backup when the
Veeam Agent
computer is on
such a
connec on.

 Restrict Wi-Fi
usage to these
networks: restrict
usage of wireless
networks for
Veeam Agent
running on
Microso
Windows
worksta ons.

29. Backup I/O se ngs: You


can instruct Veeam Agent
for Microso Windows to
thro le its ac vi es
during backup.

 Thro le agent
ac vity on the
type of computers
to thro le Veeam
Agent backup
ac vi es:
Worksta ons,
Servers, or All
hosts.

205
Chapter 3 Configura on

30. Security se ngs: You can


allow user accounts that
do not have
administra ve privileges
on a Veeam Agent
computer to perform a
file-level restore on this
computer.

31. On the Advanced page,


select No fica ons.

206

Technet24
Chapter 3 Configura on

32. On the No fica on page,


select Send daily agent
status report e-mail to the
following recipients:
checkbox and enter an
email address.

33. Enter several addresses


separated by a semicolon.

34. You can use global


no fica on se ngs or
specify custom
no fica on se ngs and
click OK.

207
Chapter 3 Configura on

35. On the Op ons page, click


Next.

36. Click Apply on the Review


page.

208

Technet24
Chapter 3 Configura on

37. Click Next on the Apply


page.

38. On the Summary page,


select the Run discovery
when I click the Finish
checkbox and click Finish.

209
Chapter 3 Configura on

39. Verify the Machine rescan


result and click Close.

40. Verify that the protec on


group has been added.

210

Technet24
Chapter 3 Configura on

Backup Repository
Veeam stores backup files and metadata for replicated virtual machines in a backup repository.
You can use the following storage types to set up a backup repository:
 Microso Windows server with local or network storage.

 Linux server with local or network storage.

 Linux server with a hardened repository.

 SMB (CIF) share network a ached storage.

 NFS Share network a ached storage.

 Deduplica ngs storage appliances.

 Object storage.

Do not configure mul ple backup repositories poin ng to the exact loca on or using the same
path.

211
Chapter 3 Configura on

Add the Microsoft Windows server’s local directory as a Backup


Repository
You can add the following types of storage to the Microso Windows server as a backup
repository:
 A local disk.

 A directly a ached disk-based storage (such as a USB hard drive).

 SCSI/FC SAN LUN in case the server is connected to the SAN fabric.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console and
click Connect.

212

Technet24
Chapter 3 Configura on

3. Select Backup
Infrastructure on the
Home page.
4. Select Backup
Repositories on the
Backup Infrastructure
page.
5. Right-click Backup
Repositories and select
Add backup repository.

6. Select Direct a ached


storage on the Add
Backup Repository page.

213
Chapter 3 Configura on

7. Select Microso Windows


on the Direct A ached
Storage page.

8. On the Name page,


specify a Backup
Repository name.
9. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

214

Technet24
Chapter 3 Configura on

10. On the Server page, select


the Microso Windows
server from the
Repository server drop-
down list and click
Populate.

11. Select the disk and click


Next.

215
Chapter 3 Configura on

12. On the Repository page,


click Populate to review
the disk capacity and free
space.

13. Use the Load control


se ngs to manage the
load on the backup
repository and avoid
storage I/O.
14. Click Advanced.

216

Technet24
Chapter 3 Configura on

15. On the Storage


Compa bility Se ngs,
select Align backup file
data blocks
(recommended) checkbox
16. Select Use per-machine
backup files and click OK.

Note:

Select Decompress backup file


data blocks before storing if
you use a deduplica ng
storage feature or appliance.

17. Click Next on the


Repository page.

217
Chapter 3 Configura on

18. Select a mount server


from the Mount server
drop-down list on the
Mount Server page.
19. Select a folder in the
Instant recovery write
cache folder field for
wri ng cache during
mount opera ons.
20. Unselect Enable vPower
NFS service on the mount
server because the
vPower NFS service is not
used for instant recovery
to a Microso Hyper-V
VM.
21. Click Next.

22. On the Review page, click


Apply.
23. Select the Search the
repository for exis ng
backups and import them
automa cally checkbox if
the backup repository
contains backups
previously created with
Veeam Backup &
Replica on.
24. Select the Import guest
file system index data to
the catalog checkbox if
the backup repository
contains guest file system

218

Technet24
Chapter 3 Configura on

index files previously


created by Veeam Backup
& Replica on.

25. Click Next on the Apply


page.

26. Click Finish on the


Summary page.

219
Chapter 3 Configura on

27. Verify that the new


Backup Repository has
been added.

220

Technet24
Chapter 3 Configura on

Add the Linux server’s local directory as a Backup Repository


You can add the following types of storage to the Linux server as a backup repository:
 A local disk.

 A directly a ached disk-based storage (such as a USB hard drive).

 NFS share.

 SCSI/FC SAN LUN in case the server is connected to the SAN fabric.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console,
and click Connect.

221
Chapter 3 Configura on

3. On the Home page, select


Backup Infrastructure.
4. On the Backup
Infrastructure page, select
Backup Repositories.
5. Right-click Backup
Repositories and select
Add backup repository.

6. Select Direct a ached


storage on the Add
Backup Repository page.

222

Technet24
Chapter 3 Configura on

7. Select Linux on the Direct


A ached Storage page.

8. On the Name page,


specify a Backup
Repository name.
9. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

223
Chapter 3 Configura on

10. On the Server page, select


the Linux server from the
Repository server drop-
down list and click
Populate.

11. Select the disk and click


Next.

224

Technet24
Chapter 3 Configura on

12. On the Repository page,


click Browser for Path to
folder.

225
Chapter 3 Configura on

13. On the Select Folder page,


expand the server.
14. Select the
NonHardenedBackups
folder and click OK.

226

Technet24
Chapter 3 Configura on

15. On the Repository page,


click Populate.

16. On the Repository page,


select Use fast closing on
XFS volumes.
17. Use the Load control
se ngs to manage the
load on the backup
repository and avoid
storage I/O meouts.
18. Click Advanced.

227
Chapter 3 Configura on

19. On the Storage


Compa bility Se ngs,
select Align backup file
data blocks
(recommended) checkbox
20. Select Use per-machine
backup files and click OK.

Note:

Select Decompress
backup file data blocks
before storing if you use a
deduplica ng storage
feature or appliance.

21. On the Repository page,


click Next.

228

Technet24
Chapter 3 Configura on

22. Select a mount server


from the Mount server
drop-down list on the
Mount Server page.
23. Select a folder in the
Instant recovery write
cache folder field for
wri ng cache during
mount opera ons.
24. Select Enable vPower NFS
service on the mount
server (recommend) and
click Ports.

25. Review the ports se ngs


on the vPower NFS Port
Se ngs and click OK.

229
Chapter 3 Configura on

26. Click Next on the Mount


Server page.

27. Click Apply on the Review


page.
28. Select the Search the
repository for exis ng
backups and import them
automa cally checkbox if
the backup repository
contains backups
previously created with
Veeam Backup &
Replica on.
29. Select the Import guest
file system index data to
the catalog checkbox if
the backup repository
contains guest file system
index files previously
created by Veeam Backup
& Replica on.

230

Technet24
Chapter 3 Configura on

30. Click Next on the Apply


page.

31. Click Finish on the


Summary page.

231
Chapter 3 Configura on

32. Verify that the Linux


Backup Repository has
been added.

232

Technet24
Chapter 3 Configura on

Add the Linux server’s local directory as a Hardened Backup


Repository
You can add a hardened repository based on a Linux server to your backup infrastructure to
protect your backup files from loss due to malware ac vity or unplanned ac ons. The hardened
repository supports the following features:

 Immutability: You specify the period when you add a hardened repository, and backup
files must be immutable.

 Single-use creden als: Creden als will only be used once to add the Linux server to the
backup infrastructure. The backup infrastructure does not store these creden als.
Therefore, the a acker cannot access the hardened repository even if the Veeam Backup
& Replica on server is compromised.

Instruc ons Screenshot (if applicable)

233
Chapter 3 Configura on

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console,
and click Connect.

3. On the Home page, select


Backup Infrastructure.
4. On the Backup
Infrastructure page, select
Backup Repositories.
5. Right-click Backup
Repositories and select
Add backup repository.

234

Technet24
Chapter 3 Configura on

6. Select Direct a ached


storage on the Add
Backup Repository page.

7. Select Linux (Hardened


Repository) on the Direct
A ached Storage page.

235
Chapter 3 Configura on

8. On the Name page,


specify a Backup
Repository name.
9. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

10. On the Server page, select


the Linux server from the
Repository server drop-
down list and click
Populate.

236

Technet24
Chapter 3 Configura on

11. Select the disk and click


Next.

12. On the Repository page,


click Browser for Path to
folder.

237
Chapter 3 Configura on

13. On the Select Folder page,


expand the server.
14. Select the backup folder
and click OK.

238

Technet24
Chapter 3 Configura on

15. On the Repository page,


click Populate.

16. On the Repository page,


select Use fast closing on
XFS volumes.
17. Select Make recent
backup immutable for 7
days. A er that, it
depends on your
requirement.
18. Use the Load control
se ngs to manage the
load on the backup
repository and avoid
storage I/O meouts.
19. Click Advanced.

239
Chapter 3 Configura on

20. On the Storage


Compa bility Se ngs,
select Align backup file
data blocks
(recommended) checkbox
21. Select Use per-machine
backup files and click OK.

Note:

Select Decompress
backup file data blocks
before storing if you use a
deduplica ng storage
feature or appliance.

22. On the Repository page,


click Next.

240

Technet24
Chapter 3 Configura on

23. Select a mount server


from the Mount server
drop-down list on the
Mount Server page.
24. Select a folder in the
Instant recovery write
cache folder field for
wri ng cache during
mount opera ons.
25. Select Enable vPower NFS
service on the mount
server (recommend) and
click Ports.

26. Review the ports se ngs


on the vPower NFS Port
Se ngs page and click
OK.

241
Chapter 3 Configura on

27. Click Next on the Mount


Server page.

28. On the Review page, click


Apply.
29. Select the Search the
repository for exis ng
backups and import them
automa cally checkbox if
the backup repository
contains backups
previously created with
Veeam Backup &
Replica on.
30. Select the Import guest
file system index data to
the catalog checkbox if
the backup repository
contains guest file system
index files previously
created by Veeam Backup
& Replica on.

242

Technet24
Chapter 3 Configura on

31. Click Next on the Apply


page.

32. Click Finish on the


Summary page.

243
Chapter 3 Configura on

33. Verify that the Hardened


Backup Repository has
been added.

244

Technet24
Chapter 3 Configura on

Add Network Attached Storage (SMB or CIFS Shares) as Backup


Repository
You can use network-a ached storage (SMB or CIFS Shares) as backup repositories with Veeam
Backup and Replica on. A network-a ached storage (NAS) device can be a shared folder on your
computer or any other physical device accessed via the Server Message Block (SMB) protocol.
Note:
 You must deploy a gateway server because an SMB share cannot host Veeam Data
Movers. However, Veeam Backup & Replica on will automa cally deploy a Veeam Data
Mover on this gateway server.

 It is recommended that you deploy an addi onal gateway server in the remote site,
closer to the SMB repository, if you plan to move VM data to an off-site SMB repository
over a WAN link,

Instruc ons Screenshot (if applicable)

245
Chapter 3 Configura on

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console and
click Connect.

3. Select Backup
Infrastructure on the
Home page.
4. Select Backup
Repositories on the
Backup Infrastructure
page.
5. Right-click Backup
Repositories and select
Add backup repository.

246

Technet24
Chapter 3 Configura on

6. On the Add Backup


Repository page, select
Network a ached
storage.

7. Select SMB share on the


Network A ached
Storage.

247
Chapter 3 Configura on

8. On the Name page,


specify a Backup
Repository name.
9. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

10. On the Share page, enter


the share folder name in
the Share folder field.
11. Select This share requires
access creden als
checkbox and select a
creden al from the drop-
down list.
12. Select Automa c
selec on or click Choose
to select the Gateway
server.
13. Click Next.

248

Technet24
Chapter 3 Configura on

14. Use the Load control


se ngs to manage the
load on the backup
repository and avoid
storage I/O meouts.
15. Click Advanced.

16. On the Storage


Compa bility Se ngs,
select Align backup file
data blocks
(recommended) checkbox
17. Select Use per-machine
backup files and click OK.

Note:

Select Decompress backup file


data blocks before storing if
you use a deduplica ng
storage feature or appliance.

249
Chapter 3 Configura on

18. Click Next on the


Repository page.

19. Select a mount server


from the Mount server
drop-down list on the
Mount Server page.
20. Select a folder in the
Instant recovery write
cache folder field for
wri ng cache during
mount opera ons.
21. Unselect Enable vPower
NFS service on the mount
server because the
vPower NFS service is not
used for instant recovery
to a Microso Hyper-V
VM.
22. Click Next.

250

Technet24
Chapter 3 Configura on

23. Click Apply on the Review


page.
24. Select the Search the
repository for exis ng
backups and import them
automa cally checkbox if
the backup repository
contains backups
previously created with
Veeam Backup &
Replica on.
25. Select the Import guest
file system index data to
the catalog checkbox if
the backup repository
contains guest file system
index files previously
created by Veeam Backup
& Replica on.

26. Click Next on the Apply


page.

251
Chapter 3 Configura on

27. Click Finish on the


Summary page.

28. Verify that the Backup


Repository has been
added.

252

Technet24
Chapter 3 Configura on

Add the Microsoft Windows server’s Rotated Drives as a Backup


Repository
This scenario is helpful if you want to store backups on mul ple external hard drives that you
intend to move between loca ons. The drives that are rotated can be detachable USB or eSATA
hard drives.
There are some limita ons as below:
 Only one repository with rotated drives can be created on a single managed server.

 You cannot store archive full backups (GFS backups) created with backup jobs or backup
copy jobs in backup repositories with a rotated drive.

 You cannot store per-machine backup files in backup repositories with rotated drives.

 You cannot rescan backup repositories with rotated drives.

 Scale-out backup repositories do not support rotated drives.

 Repositories with rotated drives are not supported as primary backup repositories,
archive repositories, and secondary target repositories for NAS backup.

Instruc ons Screenshot (if applicable)

253
Chapter 3 Configura on

1. Log in to the Veeam


Backup and replica on
manager server.
2. Open the Veeam Backup
& Replica on Console and
click Connect.

3. Select Backup
Infrastructure on the
Home page.
4. Select Backup
Repositories on the
Backup Infrastructure
page.
5. Right-click Backup
Repositories and select
Add backup repository.

254

Technet24
Chapter 3 Configura on

6. Select Direct a ached


storage on the Add
Backup Repository page.

7. Select Microso Windows


on the Direct A ached
Storage page.

255
Chapter 3 Configura on

8. On the Name page,


specify a Backup
Repository name.
9. Give a brief descrip on in
the Descrip on field for
future reference and click
Next.

10. On the Server page, select


the Microso Windows
server from the
Repository server drop-
down list and click
Populate.

256

Technet24
Chapter 3 Configura on

11. Select the disk and click


Next.

12. On the Repository page,


click Populate to review
the disk capacity and free
space.

257
Chapter 3 Configura on

13. Use the Load control


se ngs to manage the
load on the backup
repository and avoid
storage I/O meouts.
14. Click Advanced.

15. On the Storage


Compa bility Se ngs,
select Align backup file
data blocks
(recommended) checkbox
16. Select This repository is
backed by rotated drives
checkbox and Specify how
Veeam Backup &
Replica on should react
when a drive is swapped.
17. Select Use per-machine
backup files and click OK.

Note:

Select Decompress backup file


data blocks before storing if

258

Technet24
Chapter 3 Configura on

you use a deduplica ng


storage feature or appliance.

18. Click Next on the


Repository page.

19. Select a mount server


from the Mount server
drop-down list on the
Mount Server page. The
mount server is required
for file-level and
applica on items
restora on.
20. Select a folder in the
Instant recovery write
cache folder field for
wri ng cache during
mount opera ons.
21. Unselect Enable vPower
NFS service on the mount
server because the

259
Chapter 3 Configura on

vPower NFS service is not


used for instant recovery
to a Microso Hyper-V
VM.
22. Click Next.

23. Click Apply on the Review


page.
24. Select the Search the
repository for exis ng
backups and import them
automa cally checkbox if
the backup repository
contains backups
previously created with
Veeam Backup &
Replica on.
25. Select the Import guest
file system index data to
the catalog checkbox if
the backup repository
contains guest file system
index files previously
created by Veeam Backup
& Replica on.

260

Technet24
Chapter 3 Configura on

26. Click Next on the Apply


page.

27. Click Finish on the


Summary page.

261
Chapter 3 Configura on

28. Verify that the Rotated


Drives Backup Repository
has been added.

262

Technet24
Chapter 3 Configura on

General and User Roles Settings


All jobs, backup infrastructure components, and other backup server-managed objects have
general se ngs applied to them.
Users or groups who intend to work with Veeam Backup & Replica on can be assigned one of the
following roles.

Even if you exclude built-in administrator accounts (Domain\Administrator and


Machine\Administrator) from all Veeam Backup & Replica on roles, they have full access to
Veeam Backup & Replica on. So, for example, users added to the Administrators group will s ll
have access to Veeam Backup & Replica on if the Administrators group is removed from the
Veeam Backup & Replica on roles.

263
Chapter 3 Configura on

The Veeam Backup Administrator role must be assigned to the user account that runs the Veeam
Backup Service. Users in the Administrators group are automa cally assigned the Veeam Backup
Administrator role during installa on. If you change the default se ngs, ensure that you assign
the appropriate user account as the Veeam Backup Administrator role. It is recommended that
the Veeam Backup Administrator role be explicitly assigned to the user account rather than the
group.
It is strongly advised to enable mul -factor authen ca on to protect administrator accounts from
compromise (MFA).
If you enable MFA, remember that Veeam Backup & Replica on must be run from the service
account with MFA disabled.

264

Technet24
Chapter 3 Configura on

Configure Multi-Factor Authentication for Users


Mul -factor authen ca on (MFA) is supported by Veeam Backup & Replica on for addi onal
user verifica on. A one- me password (OTP) generated in the mobile authen cator applica on is
a secondary verifica on method. With login and password creden als, it creates a more secure
environment and keeps user accounts safe.
MFA has the following requirements and limita ons:
 Users can only manage MFA with the Veeam Backup Administrator role.

 Veeam Backup & Replica on Community Edi on does not support MFA.

 Veeam Backup Enterprise Manager does not na vely support MFA.

 User groups are not supported. You can enable MFA only for user accounts.

 MFA works only for interac ve login.

 Push no fica ons for mobile devices are not supported. Only the mobile authen cator
applica on provides an OTP code.

Instruc ons Screenshot (if applicable)

265
Chapter 3 Configura on

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

266

Technet24
Chapter 3 Configura on

3. Select Users and Roles


from the main menu.

267
Chapter 3 Configura on

4. Click Add on the Security


page.

5. On the Add user page,


click Browse in the User
or group field.

268

Technet24
Chapter 3 Configura on

6. Enter a user name on the


Select User, Computer, or
Group page and click
Check Names.

7. Click OK on the Select


User, Computer, or Group
page.

8. Select a role from the


Role drop-down list on
the Add user page and
click OK.

269
Chapter 3 Configura on

9. On the Security page,


select the Administrators
group and click Remove.

10. Select the new user.


11. Select the Require two-
factor authen ca on for
interac ve Log in
checkbox.
12. Select Enable auto logoff
a er a period min of
inac vity.
13. Click OK.

270

Technet24
Chapter 3 Configura on

14. Please remove all


unsupported security
groups from the list if the
error message pops up.

15. Close Veeam Backup and


Replica on console and
reopen it.
16. Enter the user name and
password on the Veeam
Backup & Replica on 12
page.

271
Chapter 3 Configura on

17. Open an Authen ca on


APP from your device and
select Add (+).

Note:

I have tried Microso and


google authen ca on apps.

18. Scan the QR code or enter


the code.

272

Technet24
Chapter 3 Configura on

19. Ensure the account add to


your device successfully.

273
Chapter 3 Configura on

20. Click Next on the Two-


factor authen ca on
enabled on this backup
server page.

21. Enter the one- me


password code in the
Confirma on code field
and click Confirm.

274

Technet24
Chapter 3 Configura on

22. Ensure that the open


Veeam Backup and
Replica on console is
successful.

275
Chapter 3 Configura on

Configure Group Managed Service Accounts (gMSA)


A Group Managed Service Account (gMSA) is a domain account that can be configured on the
server. The Microso Windows opera ng system manages the password, so the administrator
does not need to manage the password. Complex passwords are generated randomly and
changed every 30 days, reducing the risk of brute force and dic onary a acks.
gMSA has the following requirements and limita ons:
 Microso Windows Server 2012 and later support gMSAs.

 Backups of Linux target machines that are members of an Ac ve Directory domain are
not supported by gMSAs.

 Because gMSAs require a connec on to the domain controller, these accounts can only
be accessed via the network.

 If you use a gMSA to back up a machine, both the backup proxy and the target machine
must have access to the domain controller to obtain the gMSA password. In addi on, the
gMSA must be added to a member of the Administrators group on the target machine
(local or domain). Add to the member if Domain Administrator is only required for
Microso Ac ve Directory backups and local Administrator permissions are sufficient for
all other supported applica ons.

Note:
gMSA is supported for applica on-aware processing for backups or replicas of VMs running
Microso Ac ve Directory (domain controllers), Microso Exchange, Microso SQL Server, and
Oracle 12c Release 2 and later. However, the gMSA cannot back up or replicate VMs that run
Microso SharePoint.

Instruc ons Screenshot (if applicable)

276

Technet24
Chapter 3 Configura on

1. Log in to the domain


controller server.
2. Open Windows
PowerShell and run as
administrator.
3. Run the cmdlet below to
generate a root key.
Add-KdsRootKey –
Effec veTime ((get-
date).addhours(-10))

4. Run the cmdlet below to


ensure the KDS root key
has been created
successfully.

Get-KdsRootKey

5. Run the cmdlet below to


check the KDS key.

Test-KdsRootKey -KeyId
(Get-KdsRootKey).KeyId

6. Run the below cmdlet to


enable gMSA.
Add-WindowsFeature
NET-Framework, RSAT-
ADDS 2>&1 | Out-Null;
Import-Module
ServerManager;

277
Chapter 3 Configura on

Install-WindowsFeature -
IncludeAllSubFeature
RSAT | Out-Null;
Import-Module
Ac veDirectory;
7. Restart the domain
controller server.

8. Log in to the domain


controller server.
9. Select the Ac ve
Directory Users and
Computers item from the
Tools drop-down list on
the Server Manager page.
10. Create a new Ac ve
Directory OU.
Note:
New-ADOrganiza onalUnit -
Name "gMSA" -Path
"DC=GOODDEALMART,
DC=CA."

278

Technet24
Chapter 3 Configura on

11. Create a new security


group for gMSA
computers.
Note:
New-ADGroup -Name
gMSAComputers -
GroupCategory Security -
GroupScope Global -Path
"OU=gMSA,
DC=GOODDEALMART,
DC=CA."

279
Chapter 3 Configura on

12. Add computer objects to


the new security group.
These computer objects
will be allowed to use
gMSA.
Note:
$gMSAComputers = @('DC01-
2022$','MGMT01$','SMB3$','S
TORAGE-
WIN$','VBR12POSTGRESQL$')

Add-AdGroupMember -
Iden ty gMSAComputers -
Members $gMSAComputers

280

Technet24
Chapter 3 Configura on

13. Open Windows


PowerShell and run as
administrator.
14. Run the below cmdlet to
create a gMSA account.
$gMSAName = 'VBRgMSA'
$gMSAGroupName =
'gMSAComputers'
$gMSADNSHostName =
'dc01-
2022.gooddealmart.ca'

New-ADServiceAccount -
Name $gMSAName -
DNSHostName
$gMSADNSHostName -
PrincipalsAllowedToRetrie
veManagedPassword
$gMSAGroupName -
Enabled $True

15. Select the Ac ve


Directory Users and
Computers from the Tools
drop-down list on the
Server Manager page.
16. Ensure the newly created
VBRgMSA service account
is shown in the Managed
Service Accounts OU.

Note:
Use separate gMSAs
accounts for cri cal

281
Chapter 3 Configura on

backup infrastructure
components to provide a
more secure
environment.

17. Run the below cmdlet to


install gMSA on the
domain controller as the
target machine.

Install-ADServiceAccount
VBRgMSA

18. Run the below cmdlet to


ensure that the gMSA was
successfully installed.

Test-ADServiceAccount
VBRgMSA

19. Run the below cmdlet to


Add the VBRgMSA service
account to the domain
Admins group.

Add-ADGroupMember -
Iden ty Administrators -
Members VBRgMSA$

20. Run the below cmdlet to


Add the VBRgMSA service
account to the Local
Administrators group.

$gMSAComputers =
@('MGMT01','SMB3','STO

282

Technet24
Chapter 3 Configura on

RAGE-
WIN','VBR12POSTGRESQL'
)

Invoke-Command
$gMSAComputers {Add-
LocalGroupMember -
Group ‘Administrators’ -
Member ‘VBRgMSA$’}

21. Log in to the Veeam


Backup and replica on
manager server.
22. Open the Veeam Backup
& Replica on Console and
click Connect.

283
Chapter 3 Configura on

23. Select Creden als and


Passwords from the main
menu.
24. Select Datacenter
Creden als.

284

Technet24
Chapter 3 Configura on

25. Click Add on the Manage


Creden als page and
select Managed service
account.

26. Enter the new gMSA


account in the Username
field on the Creden als
page.
27. Give a brief descrip on in
the Descrip on field for
future reference and click
OK.

285
Chapter 3 Configura on

28. Ensure the gMSA account


is added to the Manage
Creden als page and click
OK.

286

Technet24
Chapter 3 Configura on

Configure Notification with Free SendGrid Account of Azure


You can configure the SendGrid account as an SMTP relay for no fica on se ngs if you want
Veeam Backup & Replica on to send email no fica ons about backup job results.

Instruc ons Screenshot (if applicable)

1. Sign in Azure portal with a


global admin account.

h ps://portal.azure.com

2. On the Azure services


page, select +Create
resource.

287
Chapter 3 Configura on

3. On the Create a resource


page, search and select
Twilio SendGrid.

4. On the Create Twilio


SendGrid page, select
subscribe Plan and click
Subscribe.

288

Technet24
Chapter 3 Configura on

5. On the Create SendGrid


Account page, select
Basics, file in all the
informa on and then click
Next: Tags.

289
Chapter 3 Configura on

6. On the Tags page, click


Next: Review + subscribe.

290

Technet24
Chapter 3 Configura on

7. On the Review + subscribe


page, select I give
Microso permission to
use and share my contact
informa on so that
Microso or the provider
can contact me.

291
Chapter 3 Configura on

8. On the Configure SaaS


account page, click
Configure account now.

9. On the Microso Sign-in


page, enter your account
name and click Next.

292

Technet24
Chapter 3 Configura on

10. Enter a password, and


click Sign in.

293
Chapter 3 Configura on

11. On the Verify your


iden ty page, select the
iden ty method.

294

Technet24
Chapter 3 Configura on

12. Enter the code, and click


Verify.

295
Chapter 3 Configura on

13. On the Permissions


requested page, select
Consent on behalf of your
organiza on and click
Accept.

296

Technet24
Chapter 3 Configura on

14. Fill in the informa on,


and click Get Started!

297
Chapter 3 Configura on

15. On the SendGrid


Welcome page, select
Authen ca on a domain
instead.

16. On the Authen cate Your


Domain page, select your
DNS host, select Yes to
rewrite all tracking links to
use your chosen domain –
not sendgrid.net, and
click Next.

17. Enter your domain name


on the Domain You Send
From a page, and click
Next.

298

Technet24
Chapter 3 Configura on

18. On the Install DNS


Records page, copy and
add all these records to
your External DNS
records.

19. In my case, add them to


GoDaddy.

20. If you cannot add DNS


records, select Send To A
Coworker.

299
Chapter 3 Configura on

21. Type your coworker’s


email address, and click
Send. Then, ask your
coworker to add these
DNS records.

22. On the Install DNS


Records page, select I've
added these records, click
Verify.

23. On the Verify Your


Domain page, make sure
your authen cated
domain for the domain
name was verified
without issues and click
Return to Sender
Authen ca on.

300

Technet24
Chapter 3 Configura on

24. On the Sender


Authen ca on page,
ensure Domain
Authen ca on and link
Branding status is
Verified.

25. Under the Se ngs page,


select API Keys.

26. On the API Keys page,


select Create API Key.

301
Chapter 3 Configura on

27. On the Create API Key


page, type the API Key
Name and select
Restricted Access as API
Key Permissions.

28. Enable Mail Ac vity as


Access Details, click
Create & View.

29. Copy the key on the API


Key Created page, save it,
and click Done.

302

Technet24
Chapter 3 Configura on

30. Under se ngs, select IP


Access Management.

31. On the IP Access


Management page, click
+Add UP Address.

32. On the Cau on page,


select I confirm that the IP
addresses I'm allow lis ng
are dedicated and will not
change without my
knowledge.
33. Select I understand that I
will only be able to access
this account (including
the API, mail sends, and
user interface) from the IP
address(es) I'm adding,

303
Chapter 3 Configura on

34. Click Confirm and


Con nue.

35. On the Add IP Addresses


page, add IP addresses or
ranges you would like to
allow access to SendGrid.
Make sure to include the
public IP address of the
Veeam management
server and click Save.

36. On the Home page,


expand Se ngs and click
Sender Authen ca on.

304

Technet24
Chapter 3 Configura on

37. On the Sender


Authen ca on page, click
Authen cate Your
Domain.

38. Specify your DNS host


from the drop-down list
on the Authen ca on
Your Domain page.
39. Select No Would you also
like to brand the links for
this domain?
40. Click Next.

41. On the Domain, You send


From page, specify your
FQDN name, and click
Next.

305
Chapter 3 Configura on

42. Add those CNAME records


to your domain on the
Install DNS Records page,
select I’ve added these
records, and click Verify.

43. On the Verify Your


Domain page, ensure
verifica on is successful
and click Return to Send
Authen ca on.

44. Sign Out of Account.

306

Technet24
Chapter 3 Configura on

45. Log in to the Veeam


Backup and replica on
manager server.
46. Open the Veeam Backup
& Replica on Console and
click Connect.

307
Chapter 3 Configura on

47. Select General Op ons


from the main menu.

308

Technet24
Chapter 3 Configura on

48. On the Op ons page,


select Email Se ngs.

309
Chapter 3 Configura on

49. Select Enable e-mail


no fica on (recommend)
on the Email Se ngs
page.
50. In the SMTP server field,
enter smtp.sendgrid.net,
and click Advanced.

310

Technet24
Chapter 3 Configura on

51. On the Advanced SMTP


op ons page, type 587 in
the Port field.
52. Use 100000 milliseconds
as the Timeout.
53. Select Connect using SSL.
54. Select This SMTP server
requires authen ca on.
55. Click Add to add a
creden al as Log on as
account.

311
Chapter 3 Configura on

56. Type apikey as Username.


57. Paste the apikey number
as a password.
58. Click OK.

312

Technet24
Chapter 3 Configura on

59. On the Advanced SMTP


op ons page, click OK.

313
Chapter 3 Configura on

60. In the From field, enter an


email address you want to
use as a sender.
61. In the To field, enter an
email address of a
no fica on recipient. To
specify mul ple email
addresses, use a
semicolon.
62. Click Test Message.

314

Technet24
Chapter 3 Configura on

63. Verify the test message


sent successfully, and click
OK.

315
Chapter 3 Configura on

64. On the Op ons page, click


OK.

316

Technet24
Chapter 3 Configura on

Configure Notification with Microsoft Office 365 NON-MFA


Account
You can configure Microso Office 365 non-MFA account for no fica on se ngs if you want
Veeam Backup & Replica on to send email no fica ons about backup job results.

Instruc ons Screenshot (if applicable)

1. Sign in Office 365 portal


with a Global Admin
account and select Admin.

2. On the Microso 365


admin center, expand
Users and select Ac ve
users.

317
Chapter 3 Configura on

3. On the Ac ve users' page,


click Veeam service
account (in my case,
VEEAM).

4. On the account page,


select License and apps.

5. On the License and apps


page, click Add license.

318

Technet24
Chapter 3 Configura on

6. On the Office 365 license


page, enable Assign
license to the account and
click Save changes.

7. Click Back <--.

8. On the account page,


select Mail. It would be
preferable to wait a few
minutes before preparing
a mailbox for the user.

319
Chapter 3 Configura on

9. On the Mail page, select


Manage email apps.

10. On the Manage email


apps, select
Authen cated SMTP and
click Save changes.

320

Technet24
Chapter 3 Configura on

11. Log in to the Veeam


Backup and replica on
manager server.
12. Open the Veeam Backup
& Replica on Console and
click Connect.

321
Chapter 3 Configura on

13. Select General Op ons


from the main menu.

322

Technet24
Chapter 3 Configura on

14. On the Op ons page,


select Email Se ngs.

323
Chapter 3 Configura on

15. Select Enable e-mail


no fica on (recommend)
on the Email Se ngs
page.
16. In the SMTP server field,
enter smtp.sendgrid.net,
and click Advanced.

324

Technet24
Chapter 3 Configura on

17. On the Advanced SMTP


op ons page, enter 587 in
the Port field.
18. Use 100000 milliseconds
as the Timeout.
19. Select Connect using SSL.
20. Select This SMTP server
requires authen ca on.
21. Click Add to add a
creden al as Log on as
account.

325
Chapter 3 Configura on

22. The SMTP server requires


authen ca on. Type the
office 365 service account
(VEEAM@carysun.com in
my case) as Username,
enter the account
password, and click OK.

326

Technet24
Chapter 3 Configura on

23. On the Advanced SMTP


op ons page, click OK.

327
Chapter 3 Configura on

24. In the From field, enter an


email address you want to
use as a sender.
25. In the To field, enter an
email address of a
no fica on recipient. To
specify mul ple email
addresses, use a
semicolon.
26. Click Test Message.

328

Technet24
Chapter 3 Configura on

27. Ensure the test email was


successfully sent to
recipients, and click OK.

329
Chapter 3 Configura on

28. On the Email Se ngs


page, System no fica ons
are sent by default
whenever a backup job
session ends with the
following states: Success,
Warning, or Failure. Keep
the default se ngs, and
click OK.

330

Technet24
Chapter 3 Configura on

Configure Notification with Microsoft Office 365 MFA Account


You can configure Microso Office 365 MFA account for no fica on se ngs if you want Veeam
Backup & Replica on to send email no fica ons about backup job results.

Instruc ons Screenshot (if applicable)

1. Sign in Office 365 portal


with a Global Admin
account, and select
Admin.

2. On the Microso 365


admin center, expand
Users and select Ac ve
users.

331
Chapter 3 Configura on

3. On the Ac ve users' page,


click Veeam service
account (VEEAMMFA, in
my case).

4. On the account page,


select License and apps.

5. On the License and apps


page, click Add license.

332

Technet24
Chapter 3 Configura on

6. On the Office 365 license


page, enable Assign
license to the account,
and click Save changes.

333
Chapter 3 Configura on

7. Click Back <--.

8. On the account page,


select Mail. It would be
preferable to wait a few
minutes before preparing
a mailbox for the user.

334

Technet24
Chapter 3 Configura on

9. On the Mail page, select


Manage email apps.

335
Chapter 3 Configura on

10. On the Manage email


apps, select
Authen cated SMTP and
click Save changes.

11. On the Ac ve Users page,


select Mul -factor
authen ca on.

336

Technet24
Chapter 3 Configura on

12. Sign in with a Global


admin account.
13. On the mul -factor
authen ca on page,
select service se ngs.

14. On the service se ngs


page, select Allow users
to create an app password
to sign in to non-browser
apps, click save and then
sign out from the office
365 portal.

337
Chapter 3 Configura on

15. On the mul -factor


authen ca on page,
select users.

16. If the Veeam service


account is non-MFA,
follow the steps below to
enable MFA.
17. On the users' page, click
Veeam service account.

338

Technet24
Chapter 3 Configura on

18. On the quick steps page,


select Enable.

19. Click enable mul -factor


auth on the About helping
mul -factor auth page.

20. On the Updates,


successful page, click
Close.

339
Chapter 3 Configura on

21. Sign in Office 365 portal


with a Veeam service
account

22. On the Sign in page, enter


the Veeam services
account email address.

340

Technet24
Chapter 3 Configura on

23. Enter the password.

24. On the More informa on


required page, click Next.

341
Chapter 3 Configura on

25. Select Fill in the


informa on on the Step 1
page and click Next.

26. On the Step 2 page, enter


the verifica on code and
click Verify.

342

Technet24
Chapter 3 Configura on

27. In Step 3, copy and save


the app password, and
click Done.

28. If the Veeam service


account is an exis ng MFA
account, follow the below
steps to add App
password authen ca on.
29. Sign in to the Office 365
portal with the Veeam
service account and select
View account.

30. On the My account page,


select Security info.

343
Chapter 3 Configura on

31. On the Security info page,


select the +Add method.

32. On the Add Method,


select App password and
click Add.

33. Type VBO365APP as the


name of the App
password, and click Next.

344

Technet24
Chapter 3 Configura on

34. Copy and keep the


password in a safe place.
Then, it will not be shown
again.
35. Click Done.

36. Log in to the Veeam


Backup and replica on
manager server.
37. Open the Veeam Backup
& Replica on Console and
click Connect.

345
Chapter 3 Configura on

38. Select General Op ons


from the main menu.

346

Technet24
Chapter 3 Configura on

39. On the Op ons page,


select Email Se ngs.

347
Chapter 3 Configura on

40. Select Enable e-mail


no fica on (recommend)
on the Email Se ngs
page.
41. In the SMTP server field,
enter smtp.sendgrid.net
and click Advanced.

348

Technet24
Chapter 3 Configura on

42. On the Advanced SMTP


op ons page, enter 587 in
the Port field.
43. Use 100000 milliseconds
as the Timeout.
44. Select Connect using SSL.
45. Select This SMTP server
requires authen ca on.
46. Click Add to add a
creden al as Log on as
account.

349
Chapter 3 Configura on

47. The SMTP server requires


authen ca on. Type the
office 365 service account
(VEEAMMFA@carysun.co
m in my case) as
Username, enter the App
password as the
password, and click OK.

350

Technet24
Chapter 3 Configura on

48. On the Advanced SMTP


op ons page, click OK.

351
Chapter 3 Configura on

49. In the From field, enter


the Veeam service
account’s email address
as a sender.
50. In the To field, enter an
email address of a
no fica on recipient. To
specify mul ple email
addresses, use a
semicolon.
51. Click Test Message.

352

Technet24
Chapter 3 Configura on

52. Ensure the test email was


successfully sent to
recipients, and click OK.

353
Chapter 3 Configura on

53. On the No fica ons page,


system no fica ons are
sent by default whenever
a backup job session ends
with the following states:
Success, Warning, or
Failure. Keep the default
se ngs, and click OK.

354

Technet24
Chapter 3 Configura on

Enable Configuration Backup


The configura on database of Veeam Backup & Replica on can be backed up and restored. If the
backup server fails, you can quickly reinstall it and restore its configura on from a backup
configura on.
You can also use configura on backups to restore the configura on from one backup server to
another in the backup infrastructure. For example, Veeam Backup & Replica on exports
configura on data from the database and saves it to the backup repository during configura on
backup.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

355
Chapter 3 Configura on

3. Enter the MFA


Confirma on code and
click Confirm.

356

Technet24
Chapter 3 Configura on

4. Select Configura on
Backup from the Man
menu.

357
Chapter 3 Configura on

5. Select Enable
configura on backup to
the following repository
checkbox on the
Configura on Backup
Se ngs page.

6. Select the backup


repository from the drop-
down list.

7. Enter the restore points


number in the Restore
points to keep field.

8. Click No fica ons.

358

Technet24
Chapter 3 Configura on

9. Select Send SNMP


no fica on on this job
checkbox's Configura on
Backup No fica on page.
If necessary.

10. Select Send e-mail


no fica ons to the
following recipients check
box and enter a
recipient's email address.
You can enter mul ple
addresses, each email
address separated by a
semicolon.

11. Select the Use global


no fica on se ngs
checkbox.

12. Click OK.

13. Click Schedule on the


Configura on Backup
Se ngs page.

14. On the Backup


Configura on Schedule
page, select Run the job
automa cally checkbox.

15. Select Daily at this me,


enter the backup me in
the me field and select
every day from the drop-
down list.

359
Chapter 3 Configura on

16. Click OK.

17. On the Configura on


Backup Se ngs page,
click Backup now if you
want to back up manually.

360

Technet24
Chapter 3 Configura on

18. Select Enable backup file


encryp on on the
Configura on Backup
Se ngs page.

19. Select a password from


the Password drop-down
list or click Add to create a
password.

20. Click OK.

361
Chapter 3 Configura on

Configure Best Practices Analyzer


Veeam Backup & Replica on includes a built-in tool that checks your backup server configura on
to ensure it adheres to the Microso Windows Server opera ng system and Veeam backup
infrastructure components security best prac ces.
The tool Best Prac ces Analyzer examines the following configura on parameters.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

362

Technet24
Chapter 3 Configura on

3. Enter the MFA


Confirma on code and
click Confirm.

363
Chapter 3 Configura on

4. Select the Best Prac ces


Analyzer on the Home
page.

364

Technet24
Chapter 3 Configura on

5. On the Best Prac ces


Analyzer page, click
Analyze a er se ng up
the parameters as
recommended and ensure
that the status is changed
to Passed.

6. Select the parameter and


click Suppress to skip the
security check.

7. Comment briefly on the


Note field on the Edit
Note page for future
reference, and click OK.

365
Chapter 3 Configura on

8. Click Close on the Best


Prac ces Analyzer page.

366

Technet24
Chapter 4 Backup

Chapter 4

Backup
Veeam Backup is a so ware applica on for data protec on and disaster recovery in virtualized
environments. It provides backup, recovery, replica on, and con nuous data protec on for
VMware vSphere and Microso Hyper-V virtual machines, physical servers, and cloud-based
workloads.
Veeam Backup & Replica on creates VM image-level backups. Image-level backups can be used
for various restore scenarios, such as Instant Recovery, restoring full VM, recovery VM file,
recovery file-level, etc.
Veeam Backup offers several features that help protect data, including:
 Backup and replica on: Veeam Backup provides backup and replica on of virtual
machines, physical servers, and cloud workloads. Backups can be scheduled, and Veeam
Backup offers several backup methods, including incremental and full backups.
 Recovery: Veeam Backup allows quick and easy recovery of virtual machines, files, and
applica on items, including granular-level recovery for emails and SharePoint items.
 Monitoring and repor ng: Veeam Backup provides monitoring and repor ng of backup
and replica on jobs, allowing administrators to iden fy issues and ensure backups are
running as expected quickly.
 Cloud integra on: Veeam Backup integrates with several cloud providers, including AWS,
Microso Azure, and Google Cloud Pla orm, allowing backups to be stored in the cloud.
Veeam Backup is a powerful, flexible data protec on and disaster recovery solu on in virtualized
environments.

367
Chapter 4 Backup

Create a Backup job to backup the specified VMs


To backup VMs, you must first create a backup job. The backup job specifies how, where, and
when VM data should be backed up. A single job can process one or more virtual machines. Jobs
can be started by hand or scheduled for a specific me.
This procedure creates a backup job to back up the produc on VMs specified.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

368

Technet24
Chapter 4 Backup

3. Enter the MFA


Confirma on code and
click Confirm.

4. Select Jobs on the Home


page and right-click Jobs.

5. Select Backup and click


Virtual machine.

369
Chapter 4 Backup

6. On the Name page, enter


a name for the backup job
in the Name field.

7. Give a brief descrip on in


the Descrip on field for
the future.

8. Select the High priority


checkbox if you want this
job to allocate resources
in the first place.

9. Click Next.

10. Click Add on the Virtual


Machines page.

370

Technet24
Chapter 4 Backup

11. Select the VM from the


Select objects list on the
Add Objects page and
click Add.

12. If you have mul ple VMS


that needs to back up in
the same backup job, you
can repeat the step to add
them.

371
Chapter 4 Backup

13. Click Next on the Virtual


Machines page.

14. On the Storage page, click


Choose to select a backup
proxy if you don’t want to
use the default Off-host
backup (automa c proxy
selec on) se ng.

372

Technet24
Chapter 4 Backup

15. On the Backup Proxy


page, if you select On-
host backup mode, the
source Microso HyperV
host will serve as both the
source host and the
backup proxy. In this
mode, Veeam Data Mover
runs directly on the
source host, which speeds
up data retrieval but
places addi onal strain on
the host.

16. If you select Off-host


backup mode, Veeam
Data Mover will run on a
dedicated off-host backup
proxy. All backup
processing opera ons
from the source host are
routed to the off-host
backup proxy in this
model.

17. If the off-host backup


mode is selected for the
job, but no off-host
backup proxies are
available when the job
begins, Veeam Backup &
Replica on will transi on
to on-host backup mode.

18. You unselect the Failover


to on-host backup mode if
no suitable off-host

373
Chapter 4 Backup

proxies are available in


the checkbox. S ll, the job
will fail to start if off-host
backup proxies are
unavailable or configured
properly.

19. Click OK.

20. Select the backup


repository from the
Backup repository drop-
down list where the
created backup files must
be saved.

374

Technet24
Chapter 4 Backup

21. Click Map backup is


helpful if you have
relocated backup files to a
new backup repository
and want to point the job
to exis ng backups in this
new backup repository.
Backup job mapping can
also be used if the
configura on database
becomes corrupt and you
need to reconfigure
backup jobs.

375
Chapter 4 Backup

22. Set the reten on policy


se ngs for restore points
in the Reten on Policy
field.

23. Select days or restore


points from the drop-
down list.

24. You can configure GFS


reten on policy se ngs
for the backup job to
ignore the short-term
reten on policy for some
full backups and store
them for long-term
archiving.

25. Select the Keep certain


full backups for longer for
archival purposes. Then, if
you need it, click
Configure.

376

Technet24
Chapter 4 Backup

26. Select the Keep weekly


full backups for check box,
and specify the number of
weeks you want to
prevent restore points
from being modified and
deleted.

27. Select the Keep monthly


full backups for check box,
and specify the months
you want to prevent
restore points from being
modified and deleted.

28. Select the Keep yearly full


backups for check box,
and specify the years you
want to prevent restore
points from being
modified and deleted.

29. Click OK.

377
Chapter 4 Backup

30. On the Storage page,


click Advanced.

378

Technet24
Chapter 4 Backup

31. On the Backup page,


select Incremental
(recommended).

32. Select create synthe c full


backups periodically or
ac ve full backups
periodically checkbox.

33. Click Configure to


schedule full backups
periodically and click OK.

379
Chapter 4 Backup

34. Select Incremental and


disable synthe c full or
ac ve full backups to
create a forever forward
incremental backup chain
if needed.

380

Technet24
Chapter 4 Backup

35. On the Advanced Se ngs,


select Maintenance.

381
Chapter 4 Backup

36. To regularly perform a


health check on the
backup chain's most
recent restore point,
select the Perform backup
files health check (detects
and auto-heals
corrup on) checkbox in
the Storage-level
corrup on guard sec on.

37. Click Configure to set a


metable for the health
check.

382

Technet24
Chapter 4 Backup

38. Select the Remove


deleted items data a er
the checkbox and enter
the few days you want
backup data for deleted
VMs to be kept.

39. Select the Defragment


and compact full backup
file checkbox and click
Configure.

40. Set the schedule for the


compact opera on to
compact a full backup
periodically.

Note:

GFS reten on is not


compa ble with defragment
and compact func onality.

383
Chapter 4 Backup

41. On Advanced Se ngs,


select Storage.

42. Select the Enable inline


data deduplica on
(recommended)
checkbox.

43. Select the Exclude swap


file blocks
(recommended)
checkbox.

44. Select the Exclude deleted


file blocks
(recommended)
checkbox.

45. Select the compression


level for the backup from
the drop-down list.

384

Technet24
Chapter 4 Backup

46. Select the Storage


op miza on for the
backup from the drop-
down list.

385
Chapter 4 Backup

47. Select the Enable backup


file encryp on checkbox
to encrypt the content of
backup files.

48. Select a password from


the drop-down list. Then,
if you s ll need to do,
click Add or use the
Manage passwords link to
create a new password.

386

Technet24
Chapter 4 Backup

49. On the Advanced Se ngs,


select No fica ons.

50. Keep the default se ngs.

387
Chapter 4 Backup

51. On the Advanced Se ngs,


select Hyper-V.

52. Keep the default se ngs.

388

Technet24
Chapter 4 Backup

53. On the Advanced Se ngs


page, click Scripts and
keep the default se ngs.

54. Click OK.

389
Chapter 4 Backup

55. On the Storage page, click


Next.

56. When you add VMs


running VSS-aware
applica ons to the backup
job, you can enable
applica on-aware
processing to create a
transac onally consistent
backup. The
transac onally consistent
backup ensures that
applica ons on VMs can
be recovered without
data loss.

57. Select the Enable


applica on-aware
processing checkbox on
the Guest Processing page
and click Applica ons.

390

Technet24
Chapter 4 Backup

58. On the Applica on-Aware


Processing Op ons page,
select the VM and click
Edit.

391
Chapter 4 Backup

59. On the Processing


Se ngs, click General.

60. Keep the default se ngs.

392

Technet24
Chapter 4 Backup

61. On the Processing


Se ngs page, click SQL if
the VM is a Microso SQL
Server VM.

62. Select Truncate logs


(Prevents logs from
growing forever) to
truncate transac on logs
a er a successful backup.

393
Chapter 4 Backup

63. On the Processing


Se ngs page, click Oracle
if the VM is an Oracle
Server.

64. Select a user account


from the drop-down list.

65. Select Do not delete


archived logs checkbox.

394

Technet24
Chapter 4 Backup

66. On the Processing


Se ngs page, click
PostgreSQL if the VM is a
PostgreSQL Server VM.

67. Select a user account


from the drop-down list.

68. Select Database user with


password checkbox.

395
Chapter 4 Backup

69. On the Processing


Se ngs page, click
Exclusions and keep the
default se ngs.

396

Technet24
Chapter 4 Backup

70. On the Processing


Se ngs page, click Scripts
and keep the default
se ngs.

71. Click OK.

397
Chapter 4 Backup

72. On the Applica on-


Aware Processing
Op ons page, click OK.

73. Select the Enable guest


file system indexing
checkbox and click
Indexing.

398

Technet24
Chapter 4 Backup

74. On the Guest File System


Indexing Op ons page,
select the VM, click Edit
and select Windows
indexing.

75. On the Guest file system


indexing mode page, keep
the default se ngs.

76. Click OK.

399
Chapter 4 Backup

77. Click OK on the Guest file


system indexing mode
page.

78. Click Choose on the Guest


interac on proxy field on
the Guest Processing
page.

400

Technet24
Chapter 4 Backup

79. On the Guest Interac on


Proxy page, select the
domain member servers
as the Guest Interac on
proxy when you use gMSA
as the guest OS
creden al.

80. Click OK.

401
Chapter 4 Backup

81. Choose a user account on


the Guest Processing page
with sufficient
permissions from the
Guest OS creden als
drop-down list.

82. If you have mul ple VMs


at the same job, click
Creden als to Customize
guest OS creden als for
individual machines and
opera ng systems.

83. On the Guest Processing


page, click Test Now to
verify network
connec vity and
creden als for each
machine included in the
job.

402

Technet24
Chapter 4 Backup

84. On the Guest Creden als


Test page, ensure
verifica on success for
each machine.

85. Click Close.

86. Click Next on the Guest


Processing page.

403
Chapter 4 Backup

87. Select Run the job


automa cally checkbox
on the Schedule page and
select your specified
schedule.

88. Define whether Veeam


Backup & Replica on
should retry the backup
job if it fails in the
Automa c retry sec on.

89. Define the me interval


the backup job must
complete in the Backup
window sec on. The
backup window ensures
that the job does not
overlap with produc on
hours and that there is no
unnecessary overhead on
the produc on
environment.

90. Click Apply.

404

Technet24
Chapter 4 Backup

91. Click Finish on the


Summary page.

92. Verify that the backup job


has been added.

405
Chapter 4 Backup

Create an Immutable Backup job to backup the specified VMs


Immutable Backup is a Veeam Backup & Replica on feature that protects against ransomware
a acks by preven ng malicious so ware from modifying or dele ng backup data.
Immutable backup means that once data is wri en to a backup repository, it cannot be modified,
overwri en, or deleted un l a specified reten on period has passed. This can prevent
ransomware from corrup ng or encryp ng backup data because the malware cannot modify or
delete the backup files.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

406

Technet24
Chapter 4 Backup

3. Enter the MFA


Confirma on code and
click Confirm.

4. Select Jobs on the Home


page and right-click Jobs.

5. Select Backup and click


Virtual machine.

407
Chapter 4 Backup

6. On the Name page, enter


a name for the backup job
in the Name field.

7. Give a brief descrip on in


the Descrip on field for
the future.

8. Click Next.

9. Click Add on the Virtual


Machines page.

408

Technet24
Chapter 4 Backup

10. Select the VM from the


Select objects list on the
Add Objects page and
click Add.

11. If you have mul ple VMS


that needs to back up in
the same backup job, you
can repeat the step to add
them.

409
Chapter 4 Backup

12. Click Next on the Virtual


Machines page.

13. On the Storage page, click


Choose to select a backup
proxy if you don’t want to
use the default Off-host
backup (automa c proxy
selec on) se ng.

410

Technet24
Chapter 4 Backup

14. On the Backup Proxy


page, if you select On-
host backup mode, the
source Microso HyperV
host will serve as both the
source host and the
backup proxy. In this
mode, Veeam Data Mover
runs directly on the
source host, which speeds
up data retrieval but
places addi onal strain on
the host.

15. If you select Off-host


backup mode, Veeam
Data Mover will run on a
dedicated off-host backup
proxy. All backup
processing opera ons
from the source host are
routed to the off-host
backup proxy in this
model.

16. If the off-host backup


mode is selected for the
job, but no off-host
backup proxies are
available when the job
begins, Veeam Backup &
Replica on will transi on
to on-host backup mode.

17. You unselect the Failover


to on-host backup mode if
no suitable off-host

411
Chapter 4 Backup

proxies are available in


the checkbox. S ll, the job
will fail to start if off-host
backup proxies are
unavailable or configured
properly.

18. Click OK.

19. Select the Hardened


backup repository from
the Backup repository
drop-down list.

412

Technet24
Chapter 4 Backup

20. Set the reten on policy


se ngs for restore points
in the Reten on Policy
field.

21. Select days or restore


points from the drop-
down list.

22. You can configure GFS


reten on policy se ngs
for the backup job to
ignore the short-term
reten on policy for some
full backups and store
them for long-term
archiving.

23. Select the Keep certain


full backups for longer for
archival purposes
checkbox and click
Configure.

413
Chapter 4 Backup

24. Select the Keep weekly


full backups for check box,
and specify the number of
weeks you want to
prevent restore points
from being modified and
deleted.

25. Select the Keep monthly


full backups for check box,
and specify the months
you want to prevent
restore points from being
modified and deleted.

26. Select the Keep yearly full


backups for check box,
and specify the years you
want to prevent restore
points from being
modified and deleted.

27. Click OK.

414

Technet24
Chapter 4 Backup

28. On the Storage page,


click Advanced.

415
Chapter 4 Backup

29. On the Backup page,


select Incremental
(recommended).

30. Select create synthe c full


backups periodically or
ac ve full backups
periodically checkbox.

31. Click Configure to


schedule full backups
periodically and click OK.

416

Technet24
Chapter 4 Backup

32. Select Incremental and


disable synthe c full or
ac ve full backups to
create a forever forward
incremental backup chain
if needed.

417
Chapter 4 Backup

33. On the Advanced Se ngs,


select Maintenance.

418

Technet24
Chapter 4 Backup

34. To regularly perform a


health check on the
backup chain's most
recent restore point,
select the Perform backup
files health check (detects
and auto-heals
corrup on) checkbox in
the Storage-level
corrup on guard sec on.

35. Click Configure to set a


metable for the health
check.

419
Chapter 4 Backup

36. Select the Remove


deleted items data a er
the checkbox and enter
the few days you want
backup data for deleted
VMs to be kept.

37. Select the Defragment


and compact full backup
file checkbox and click
Configure.

38. Set the schedule for the


compact opera on to
compact a full backup
periodically.

Note:

GFS reten on is not


compa ble with defragment
and compact func onality.

420

Technet24
Chapter 4 Backup

39. On Advanced Se ngs,


select Storage.

40. Select the Enable inline


data deduplica on
(recommended)
checkbox.

41. Select the Exclude swap


file blocks
(recommended)
checkbox.

42. Select the Exclude deleted


file blocks
(recommended)
checkbox.

43. Select the compression


level for the backup from
the drop-down list.

421
Chapter 4 Backup

44. Select the Storage


op miza on for the
backup from the drop-
down list.

422

Technet24
Chapter 4 Backup

45. Select the Enable backup


file encryp on checkbox
to encrypt the content of
backup files.

46. Select a password from


the drop-down list. Then,
if you s ll need to do,
click Add or use the
Manage passwords link to
create a new password.

423
Chapter 4 Backup

47. Select No fica ons on the


Advanced Se ngs.

48. Keep the default se ngs.

424

Technet24
Chapter 4 Backup

49. Select Hyper-V on the


Advanced Se ngs.

50. Keep the default se ngs.

425
Chapter 4 Backup

51. On the Advanced Se ngs


page, select Scripts and
keep the default se ngs.

52. Click OK.

426

Technet24
Chapter 4 Backup

53. Click Next on the Storage


page.

54. When you add VMs


running VSS-aware
applica ons to the backup
job, you can enable
applica on-aware
processing to create a
transac onally consistent
backup. The
transac onally consistent
backup ensures that
applica ons on VMs can
be recovered without
data loss.

55. Select the Enable


applica on-aware
processing checkbox on
the Guest Processing page
and click Applica ons.

427
Chapter 4 Backup

56. On the Applica on-Aware


Processing Op ons page,
select the VM and click
Edit.

428

Technet24
Chapter 4 Backup

57. On the Processing


Se ngs, click General.

58. Keep the default se ngs.

429
Chapter 4 Backup

59. On the Processing


Se ngs page, click SQL if
the VM is a Microso SQL
Server VM.

60. Select Truncate logs


(Prevents logs from
growing forever) to
truncate transac on logs
a er a successful backup.

430

Technet24
Chapter 4 Backup

61. On the Processing


Se ngs page, click Oracle
if the VM is an Oracle
Server.

62. Select a user account


from the drop-down list.

63. Select Do not delete


archived logs checkbox.

431
Chapter 4 Backup

64. On the Processing


Se ngs page, click
PostgreSQL if the VM is a
PostgreSQL Server VM.

65. Select a user account


from the drop-down list.

66. Select Database user with


password checkbox.

432

Technet24
Chapter 4 Backup

67. On the Processing


Se ngs page, click
Exclusions and keep the
default se ngs.

433
Chapter 4 Backup

68. On the Processing


Se ngs page, click Scripts
and keep the default
se ngs.

69. Click OK.

434

Technet24
Chapter 4 Backup

70. On the Applica on-


Aware Processing
Op ons page, click OK.

71. Select the Enable guest


file system indexing
checkbox and click
Indexing.

435
Chapter 4 Backup

72. On the Guest File System


Indexing Op ons page,
select the VM, click Edit
and select Windows
indexing.

73. On the Guest file system


indexing mode page, keep
the default se ngs.

74. Click OK.

436

Technet24
Chapter 4 Backup

75. Click OK on the Guest file


system indexing mode
page.

76. Keep the default


Automa c selec on
se ng in the Guest
interac on proxy field.

437
Chapter 4 Backup

77. Choose a user account on


the Guest Processing page
with sufficient
permissions from the
Guest OS creden als
drop-down list.

78. If you have mul ple VMs


at the same job, click
Creden als to Customize
guest OS creden als for
individual machines and
opera ng systems.

79. On the Guest Processing


page, click Test Now to
verify network
connec vity and
creden als for each
machine included in the
job.

438

Technet24
Chapter 4 Backup

80. On the Guest Creden als


Test page, ensure
verifica on success for
each machine.

81. Click Close.

82. Click Next on the Guest


Processing page.

439
Chapter 4 Backup

83. Select Run the job


automa cally checkbox
on the Schedule page and
select your specified
schedule.

84. Define whether Veeam


Backup & Replica on
should retry the backup
job if it fails in the
Automa c retry sec on.

85. Define the me interval


the backup job must
complete in the Backup
window sec on. The
backup window ensures
that the job does not
overlap with produc on
hours and that there is no
unnecessary overhead on
the produc on
environment.

86. Click Apply.

440

Technet24
Chapter 4 Backup

87. Click Finish on the


Summary page.

88. Verify that the backup job


has been added.

441
Chapter 4 Backup

Create a Backup job to backup the specified Physical Machines


(Managed by Backup Server Mode)

This procedure uses the managed backup server mode to create a backup job to back up the
specific physical produc on machines.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

442

Technet24
Chapter 4 Backup

3. Enter the MFA


Confirma on code and
click Confirm.

4. Select Jobs on the Home


page and right-click Jobs.

5. Select Backup and click


Windows computer.

443
Chapter 4 Backup

6. Select Managed by
backup server mode on
the Job Mode page and
click Next.

7. On the Name page, enter


a name for the backup job
in the Name field.

8. Give a brief descrip on in


the Descrip on field for
the future.

9. Click Next.

444

Technet24
Chapter 4 Backup

10. On the Computers page,


click Add and select
Protec on group.

445
Chapter 4 Backup

11. Select the protec on


group on the Select
Objects page and click OK.

12. You can select mul ple


protec on groups for the
same backup job and
repeat the step to add
them.

446

Technet24
Chapter 4 Backup

13. Click Next on the


Computers page.

14. Select Volume level


backup mode on the
Backup Mode page to
back up the specified
computer volumes and
click Next.

447
Chapter 4 Backup

15. On the Objects page,


select Backup the
following volumes only.

16. Click Add and select OS


volume.

17. Click Next

18. Select the backup


repository from the
Backup repository drop-
down list on the Storage
page.

448

Technet24
Chapter 4 Backup

19. Set the reten on policy


se ngs for restore points
in the Reten on Policy
field.

20. Select days or restore


points from the drop-
down list.

21. You can configure GFS


reten on policy se ngs
for the backup job to
ignore the short-term
reten on policy for some
full backups and store
them for long-term
archiving.

22. Select the Keep certain


full backups for longer for
archival purposes. Then, if
you need it, click
Configure.

449
Chapter 4 Backup

23. Select the Keep weekly


full backups for check box,
and specify the number of
weeks you want to
prevent restore points
from being modified and
deleted.

24. Select the Keep monthly


full backups for check box,
and specify the months
you want to prevent
restore points from being
modified and deleted.

25. Select the Keep yearly full


backups for check box,
and specify the years you
want to prevent restore
points from being
modified and deleted.

26. Click OK.

450

Technet24
Chapter 4 Backup

27. On the Storage page, click


Advanced.

451
Chapter 4 Backup

28. Select Create synthe c


full backups or Ac ve full
backups periodically
checkbox.

29. Schedule full backups


periodically and click OK.

452

Technet24
Chapter 4 Backup

30. On the Advanced Se ngs,


select Maintenance.

31. To regularly perform a


health check on the
backup chain's most
recent restore point,
select the Perform backup
files health check (detects
and auto-heals
corrup on) checkbox in
the Storage-level
corrup on guard sec on.

32. Click Configure to set a


metable for the health
check.

453
Chapter 4 Backup

33. Select the Remove


deleted items data a er
the checkbox and enter
the few days you want
backup data for deleted
VMs to be kept.

34. Select the Defragment


and compact full backup
file checkbox and click
Configure.

35. Set the schedule for the


compact opera on to
compact a full backup
periodically.

Note:

You don’t need to enable


the defragment and
compact func onality
checkbox if GFS reten on
is enabled.

454

Technet24
Chapter 4 Backup

36. On Advanced Se ngs,


select Storage.

37. Select the Compression


level from the drop-down
list.

455
Chapter 4 Backup

38. Select Storage


op miza on from the
drop-down list.

456

Technet24
Chapter 4 Backup

39. Select the Enable backup


file encryp on checkbox
to encrypt the content of
backup files.

40. Select a password from


the drop-down list. Then,
if you s ll need to do,
click Add or use the
Manage passwords link to
create a new password.

457
Chapter 4 Backup

41. On the Advanced Se ngs,


select No fica ons.

42. Keep the default se ngs.

458

Technet24
Chapter 4 Backup

43. On the Advanced Se ngs,


select Integra on.

44. Keep the default se ngs.

459
Chapter 4 Backup

45. On the Advanced Se ngs


page, select Scripts.

46. Keep the default se ngs


and click OK.

460

Technet24
Chapter 4 Backup

47. On the Storage page, click


Next.

48. When you add Physical


machines running VSS-
aware applica ons to the
backup job, you can
enable applica on-aware
processing to create a
transac onally consistent
backup. The
transac onally consistent
backup ensures that
applica ons on VMs can
be recovered without
data loss.

49. Select the Enable


applica on-aware
processing checkbox on
the Guest Processing

461
Chapter 4 Backup

page, and click


Applica ons.

50. On the Applica on-Aware


Processing Op ons page,
select the Object and click
Edit.

462

Technet24
Chapter 4 Backup

51. On the Processing


Se ngs page, select
General.

52. Select Enable applica on-


aware processing
checkbox.

53. Select Process transac on


logs with this job
(recommended).

463
Chapter 4 Backup

54. On the Processing


Se ngs page, click SQL if
the Physical Machine is a
Microso SQL Server.

55. Select a user account


from the drop-down list.

56. Select Truncate logs


(Prevents logs from
growing forever).

464

Technet24
Chapter 4 Backup

57. Select Oracle on the


Processing Se ngs page if
the Physical Machine is an
Oracle Server.

58. Select a user account


from the drop-down list.

59. Select Do not delete


archived logs.

465
Chapter 4 Backup

60. On the Processing


Se ngs page, select
SharePoint if the Physical
Machine is a SharePoint
Server.

61. Select a user account


from the drop-down list.

466

Technet24
Chapter 4 Backup

62. On the Processing


Se ngs page, select
Scripts.

63. Keep the default se ngs


and click OK.

467
Chapter 4 Backup

64. On the Applica on-


Aware Processing
Op ons page, click OK.

65. Select the Enable guest


file system indexing
checkbox and click
Indexing.

468

Technet24
Chapter 4 Backup

66. On the Guest File System


Indexing Op ons page,
select the Object, click
Edit and.

469
Chapter 4 Backup

67. On the Guest file system


indexing mode page, keep
the default se ngs.

68. Click OK.

470

Technet24
Chapter 4 Backup

69. On the Guest File System


Indexing Op ons page,
click OK.

70. On the Guest Processing


page, click Next.

471
Chapter 4 Backup

71. Select Run the job


automa cally checkbox
on the Schedule page and
select your specified
schedule.

72. Define whether Veeam


Backup & Replica on
should retry the backup
job if it fails in the
Automa c retry sec on.

73. Define the me interval


the backup job must
complete in the Backup
window sec on. The
backup window ensures
that the job does not
overlap with produc on
hours and that there is no
unnecessary overhead on
the produc on
environment.

74. Click Apply.

472

Technet24
Chapter 4 Backup

75. On the Summary page,


click Finish.

76. Verify that the backup job


has been added

473
Chapter 4 Backup

Create a Backup job to backup the specified Physical Machines


(Managed by Agent Mode)

This procedure uses the managed backup server mode to create a backup job to back up the
specific physical produc on machines.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

474

Technet24
Chapter 4 Backup

3. Enter the MFA


Confirma on code and
click Confirm.

4. Select Jobs on the Home


page and right-click Jobs.

5. Select Backup and click


Windows computer.

475
Chapter 4 Backup

6. On the Job Mode page,


select Managed by agent
mode and click Next.

7. On the Name page, enter


a name for the backup job
in the Name field.

8. Give a brief descrip on in


the Descrip on field for
the future.

9. Click Next.

476

Technet24
Chapter 4 Backup

10. On the Computers page,


click Add and select
Protec on group.

477
Chapter 4 Backup

11. Select the protec on


group on the Select
Objects page and click OK.

12. You can select mul ple


protec on groups for the
same backup job and
repeat the step to add
them.

478

Technet24
Chapter 4 Backup

13. Click Next on the


Computers page.

14. Select Volume level


backup mode on the
Backup Mode page to
back up the specified
computer volumes and
click Next.

479
Chapter 4 Backup

15. On the Objects page,


select Backup the
following volumes only.

16. Click Add and select OS


volume.

17. Click Next

18. Select the Veeam backup


repository and click Next.

480

Technet24
Chapter 4 Backup

19. Enter the Veeam Backup


and Replica on manager
server name or IP address
in the DNS name or
external IP address field
on the Backup Server
page.

20. Select the backup


repository from the
Backup repository drop-
down list on the Storage
page.

481
Chapter 4 Backup

21. Set the reten on policy


se ngs for restore points
in the Reten on Policy
field.

22. Select days or restore


points from the drop-
down list.

23. You can configure GFS


reten on policy se ngs
for the backup job to
ignore the short-term
reten on policy for some
full backups and store
them for long-term
archiving.

24. Select the Keep certain


full backups for longer for
archival purposes. Then, if
you need it, click
Configure.

482

Technet24
Chapter 4 Backup

25. Select the Keep weekly


full backups for checkbox,
and specify the number of
weeks you want to
prevent restore points
from being modified and
deleted.

26. Select the Keep monthly


full backups for checkbox,
and specify the months
you want to prevent
restore points from being
modified and deleted.

27. Select the Keep yearly full


backups for checkbox, and
specify the years you
want to prevent restore
points from being
modified and deleted.

28. Click OK.

483
Chapter 4 Backup

29. On the Storage page, click


Advanced.

484

Technet24
Chapter 4 Backup

30. Select Create synthe c


full backups or Ac ve full
backups periodically
checkbox.

31. Schedule full backups


periodically and click OK.

485
Chapter 4 Backup

32. On the Advanced Se ngs,


select Maintenance.

33. To regularly perform a


health check on the
backup chain's most
recent restore point,
select the Perform backup
files health check (detects
and auto-heals
corrup on) checkbox in
the Storage-level
corrup on guard sec on.

34. Click Configure to set a


metable for the health
check.

486

Technet24
Chapter 4 Backup

35. Select the Remove


deleted items data a er
the checkbox and enter
the few days you want
backup data for deleted
VMs to be kept.

36. Select the Defragment


and compact full backup
file checkbox and click
Configure.

37. Set the schedule for the


compact opera on to
compact a full backup
periodically.

Note:

You don’t need to enable


the defragment and
compact func onality
checkbox if GFS reten on
is enabled.

487
Chapter 4 Backup

38. On Advanced Se ngs,


select Storage.

39. Select the Compression


level from the drop-down
list.

488

Technet24
Chapter 4 Backup

40. Select Storage


op miza on from the
drop-down list.

489
Chapter 4 Backup

41. Select the Enable backup


file encryp on checkbox
to encrypt the content of
backup files.

42. Select a password from


the drop-down list. Then,
if you s ll need to do,
click Add or use the
Manage passwords link to
create a new password.

490

Technet24
Chapter 4 Backup

43. On the Advanced Se ngs,


select No fica ons.

44. Keep the default se ngs


and click OK.

491
Chapter 4 Backup

45. On the Storage page, click


Next.

46. On the Backup Cache


page, keep the default
se ngs and click Next.

492

Technet24
Chapter 4 Backup

47. When you add Physical


machines running VSS-
aware applica ons to the
backup job, you can
enable applica on-aware
processing to create a
transac onally consistent
backup. The
transac onally consistent
backup ensures that
applica ons on VMs can
be recovered without
data loss.

48. Select the Enable


applica on-aware
processing checkbox on
the Guest Processing
page, and click
Applica ons.

49. On the Applica on-Aware


Processing Op ons page,
select the Object and click
Edit.

493
Chapter 4 Backup

50. On the Processing


Se ngs page, select
General.

51. Select Enable applica on-


aware processing
checkbox.

52. Select Process transac on


logs with this job
(recommended).

494

Technet24
Chapter 4 Backup

53. On the Processing


Se ngs page, click SQL if
the Physical Machine is a
Microso SQL Server.

54. Select a user account


from the drop-down list.

55. Select Truncate logs


(Prevents logs from
growing forever).

495
Chapter 4 Backup

56. Select Oracle on the


Processing Se ngs page if
the Physical Machine is an
Oracle Server.

57. Select a user account


from the drop-down list.

58. Select Do not delete


archived logs.

496

Technet24
Chapter 4 Backup

59. On the Processing


Se ngs page, select
SharePoint if the Physical
Machine is a SharePoint
Server.

60. Select a user account


from the drop-down list.

497
Chapter 4 Backup

61. On the Processing


Se ngs page, select
Scripts.

62. Keep the default se ngs


and click OK.

498

Technet24
Chapter 4 Backup

63. On the Applica on-


Aware Processing
Op ons page, click OK.

64. Select the Enable guest


file system indexing
checkbox and click
Indexing.

499
Chapter 4 Backup

65. On the Guest File System


Indexing Op ons page,
select the Object, click
Edit and.

500

Technet24
Chapter 4 Backup

66. On the Guest file system


indexing mode page, keep
the default se ngs.

67. Click OK.

501
Chapter 4 Backup

68. On the Guest File System


Indexing Op ons page,
click OK.

69. On the Guest Processing


page, click Next.

502

Technet24
Chapter 4 Backup

70. Select Run the job


automa cally checkbox
on the Schedule page and
select your specified
schedule.

71. Define whether Veeam


Backup & Replica on
should retry the backup
job if it fails in the
Automa c retry sec on.

72. Define the me interval


the backup job must
complete in the Backup
window sec on. The
backup window ensures
that the job does not
overlap with produc on
hours and that there is no
unnecessary overhead on
the produc on
environment.

73. Click Apply.

503
Chapter 4 Backup

74. On the Summary page,


click Finish.

75. Verify that the Machine


rescan and Job configured
are completed without
issues.

504

Technet24
Chapter 4 Backup

76. Verify that the backup job


has been added

505
Chapter 4 Backup

Create a Backup job to backup all VMS of the Hyper-V Host


This procedure creates a backup job to back up all VMS of the produc on Hyper-V host. The new
VMS will be backed up automa cally a er the backup job is created. You don’t need to modify
the backup job se ngs.

Instruc ons Screenshot (if applicable)

1. Log in to the Veeam


Backup and replica on
manager server.

2. Open the Veeam Backup


& Replica on Console and
click Connect.

506

Technet24
Chapter 4 Backup

3. Enter the MFA


Confirma on code and
click Confirm.

4. Select Jobs on the Home


page and right-click Jobs.

5. Select Backup and click


Virtual machine.

507
Chapter 4 Backup

6. On the Name page, enter


a name for the backup job
in the Name field.

7. Give a brief descrip on in


the Descrip on field for
the future.

8. Select the High priority


checkbox if you want this
job to allocate resources
in the first place.

9. Click Next.

10. Click Add on the Virtual


Machines page.

508

Technet24
Chapter 4 Backup

11. Select the Host from the


Select objects list on the
Add Objects page and
click Add.

12. If you have mul ple Hosts


that need to back up in
the same backup job, you
can repeat the step to add
them.

509
Chapter 4 Backup

13. Click Next on the Virtual


Machines page.

14. On the Storage page, click


Choose to select a backup
proxy if you don’t want to
use the default Off-host
backup (automa c proxy
selec on) se ng.

510

Technet24
Chapter 4 Backup

15. On the Backup Proxy


page, if you select On-
host backup mode, the
source Microso HyperV
host will serve as both the
source host and the
backup proxy. In this
mode, Veeam Data Mover
runs directly on the
source host, which speeds
up data retrieval but
places addi onal strain on
the host.

16. If you select Off-host


backup mode, Veeam
Data Mover will run on a
dedicated off-host backup
proxy. All backup
processing opera ons
from the source host are
routed to the off-host
backup proxy in this
model.

17. If the off-host backup


mode is selected for the
job, but no off-host
backup proxies are
available when the job
begins, Veeam Backup &
Replica on will transi on
to on-host backup mode.

18. You unselect the Failover


to on-host backup mode if
no suitable off-host

511
Chapter 4 Backup

proxies are available in


the checkbox. S ll, the job
will fail to start if off-host
backup proxies are
unavailable or configured
properly.

19. Click OK.

20. Select the backup


repository from the
Backup repository drop-
down list where the
created backup files must
be saved.

512

Technet24
Chapter 4 Backup

21. Set the reten on policy


se ngs for restore points
in the Reten on Policy
field.

22. Select days or restore


points from the drop-
down list.

23. You can configure the


backup job's GFS
reten on policy se ngs
to ignore the short-term
reten on policy for some
full backups and store
them for long-term
archiving.

24. Select Keep certain full


backups for longer for
archival purposes and
click Configure.

513
Chapter 4 Backup

25. Select the Keep weekly


full backups for checkbox,
and specify the number of
weeks you want to
prevent restore points
from being modified and
deleted.

26. Select the Keep monthly


full backups for checkbox,
and specify the months
you want to prevent
restore points from being
modified and deleted.

27. Select the Keep yearly full


backups for checkbox, and
specify the years you
want to prevent restore
points from being
modified and deleted.

28. Click OK.

514

Technet24
Chapter 4 Backup

29. On the Storage page,


click Advanced.

515
Chapter 4 Backup

30. On the Backup page,


select Incremental
(recommended).

31. Select create synthe c full


backups periodically or
ac ve full backups
periodically checkbox.

32. Click Configure to


schedule full backups
periodically and click OK.

516

Technet24
Chapter 4 Backup

33. Select Incremental and


disable synthe c full and
ac ve full backups to
create a forever forward
incremental backup chain.

517
Chapter 4 Backup

34. On the Advanced Se ngs,


Maintenance.

35. To regularly perform a


health check on the
backup chain's most
recent restore point,
select the Perform backup
files health check (detects
and auto-heals
corrup on) checkbox in
the Storage-level
corrup on guard sec on.

36. Click Configure to set a


metable for the health
check.

518

Technet24
Chapter 4 Backup

37. Select the Remove


deleted items data a er
the checkbox and enter
the few days you want
backup data for deleted
VMs to be kept.

38. Select the Defragment


and compact full backup
file checkbox and click
Configure.

39. Set the schedule for the


compact opera on to
compact a full backup
periodically.

Note:

GFS reten on is not


compa ble with
defragment and compact
func onality.

519
Chapter 4 Backup

40. On Advanced Se ngs,


select Storage.

41. Select the Enable inline


data deduplica on
(recommended)
checkbox.

42. Select the Exclude swap


file blocks
(recommended)
checkbox.

43. Select the Exclude deleted


file blocks
(recommended)
checkbox.

44. Select the compression


level for the backup from
the drop-down list.

520

Technet24
Chapter 4 Backup

45. Select the Storage


op miza on for the
backup from the drop-
down list.

521
Chapter 4 Backup

46. Select the Enable backup


file encryp on checkbox
to encrypt the content of
backup files.

47. Select a password from


the drop-down list. Then,
if you s ll need to do,
click Add or use the
Manage passwords link to
create a new password.

522

Technet24
Chapter 4 Backup

48. On the Advanced Se ngs,


select No fica ons.

49. Keep the default se ngs.

523
Chapter 4 Backup

50. On the Advanced Se ngs,


select Hyper-V.

51. Keep the default se ngs.

524

Technet24
Chapter 4 Backup

52. On the Advanced Se ngs


page, click Scripts and
keep the default se ngs.

53. Click OK.

525
Chapter 4 Backup

54. Click Next on the Storage


page.

55. Click Next on the Guess


Processing page.

526

Technet24
Chapter 4 Backup

56. Select Run the job


automa cally checkbox
on the Schedule page and
select your specified
schedule.

57. Define whether Veeam


Backup & Replica on
should retry the backup
job if it fails in the
Automa c retry sec on.

58. Define the me interval


the backup job must
complete in the Backup
window sec on. The
backup window ensures
that the job does not
overlap with produc on
hours and that there is no
unnecessary overhead on
the produc on
environment.

59. Click Apply.

527
Chapter 4 Backup

60. Click Finish on the


Summary page.

61. Verify that the backup job


has been added.

528

Technet24
Chapter 4 Backup

529

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy