Creating Immutable Configuration Backups


This feature is available starting from Veeam Backup & Replication 12.1 (build

Veeam Backup & Replication allows you to keep configuration backups on object storage repositories that support immutability. Immutability makes data temporarily immutable and prohibits deletion of configuration backups from object storage repositories. Therefore, it protects your data against loss as a result of attacks, malware activity or any other injurious actions.


The version of Veeam Backup & Replication installed on a backup server for a Service Provider and a tenant must be 12.1 (build Otherwise, the configuration backup stored on an object storage repository will not be immutable.

Retention Policy for Immutable Configuration Backups

By default, object storage repositories keeps the number of restore points that you define in the configuration backup settings. In case, a total number of restore point exceeds the retention policy settings, Veeam Backup & Replication deletes the oldest restore point. If you keep configuration backups on immutable object storage repositories, Veeam Backup & Replication will not delete the older restore points. Instead, it will mark them as immutable and will keep them on object storage repositories until immutability period passes.

Creating Immutable Configuration Backups

To make configurations backups immutable, perform the following steps:

  1. Configure an object storage repository where you will keep configuration backups. For more information, see Immutability for Object Storage Repositories.
  2. From the main menu, select Configuration Backup.
  3. Make sure that the Enable configuration backup to the following repository check box is selected.
  4. From the Backup repository list, choose an object storage repository on which the configuration backup must be stored.
  5. In the Restore points to keep field, specify the number of restore points that you want to maintain in the object storage repository.
  6. To create an encrypted backup, select the Enable backup file encryption check box. From the Password field, select a password you want to use for encryption. If you have not created a password beforehand, click Add or use the Manage passwords link to specify a new password. For more information, see Creating Encrypted Configuration Backups.
  7. Click Backup now.

Creating Immutable Configuration Backups 

Page updated 5/29/2024

Page content applies to build