Managing Hardened Repository

Updating Hardened Repository Components

If you use Veeam Backup & Replication 12 prior cumulative patch P20230718 and want to update hardened repository components or remove a hardened repository from the backup infrastructure, make sure that the SSH connection is enabled. Consider that you also need to specify single-use credentials you use to connect to the Linux server and deploy Veeam Data Mover.

Important

The SSH connection is also required for updating hardened repository components in the following situations:

  • If you upgrade from Veeam Backup & Replication 11a or earlier versions to Veeam Backup & Replication 12 including versions with installed cumulative patches.
  • If you upgrade from any previous Veeam Backup & Replication version to Veeam Backup & Replication 12.1 (build 12.1.0.2131).

If you need to specify single-use credentials for multiple hardened repositories, you can use the Components Update window or the Set-VBRLinux cmdlet.

If you update Veeam Backup & Replication 12 to any cumulative patch, the SSH connection is not required for updating hardened repository components. For more information about cumulative patches, see this Veeam KB article.

Upgrading Linux Repository to Hardened Repository

If you upgrade to Veeam Backup & Replication 12, all Linux backup repositories with enabled Make recent backups immutable for check box will be automatically converted to hardened repositories. Note that if these repositories were added with persistent credentials, they will be automatically converted to single-use credentials.

Note

If a Linux backup repository with enabled Make recent backups immutable for check box was added with root credentials, the upgrade process will be interrupted. To continue it, you must specify a user account with non-root permissions for this repository. For more information, see this Veeam KB article.

Switching from Linux Repository to Hardened Repository

If you have a Linux server added to the backup infrastructure as a backup repository and want to use it as a hardened repository, perform the following steps:

  1. On the Linux server, change permissions for the directory where backups are stored. Both owner and group must be the account with non-root permissions you use to connect to the Linux server.

chown -R owner:group <dir_path>

  1. Go to the Veeam Backup & Replication console and perform the following steps:
    1. Open the Backup Infrastructure view and select Managed Servers in the navigation pane. Right-click the Linux server, select Properties, go to the SSH Connection step of the wizard, and specify the account with non-root permissions you use to connect to the Linux server. Note that these credentials must be single-use.
    2. Disable all backup jobs that use this Linux repository. For more information, see Disabling and Deleting Jobs.

Note

If you have Veeam Agent backup jobs managed by Veeam Agent, you need to delete these jobs and configure them once again after you switch to the hardened repository.

  1. Remove backup files stored on the Linux repository from the backup configuration. To do this, go to the Backups > Disk node and select the backup file. Hold [Ctrl] and right-click the file. Then click Remove from configuration.

Important

Removing backups from configuration is designed for experienced users only. It is strongly recommended to create encrypted configuration backup before performing this operation.

Managing Hardened Repository 

  1. Add the same Linux server to the backup infrastructure as a hardened repository using the New Backup Repository wizard. At the Review step of the wizard, select the Search the repository for existing backups and import them automatically check box to detect existing backup files and display them in the Veeam Backup & Replication console under the Imported > Backups node. For more information, see Adding Hardened Repositories.

Note

If you work with encrypted backups, you need to decrypt them after importing. For more information, see How Data Decryption Works.

  1. Go to the Jobs node and edit the job associated with the Linux repository. At the Storage step of the wizard, select the hardened repository from the Backup repository list.

Managing Hardened Repository 

Click Map backup and specify imported backups from the previous step.

Managing Hardened Repository 

Finish the wizard to apply changes.

  1. Open the Backup Infrastructure view and remove the Linux backup repository from the backup infrastructure.

Managing Hardened Repository 

Note

For more information on enabling immutability for tenant backups, see the Switching from Linux Repository to Hardened Repository section in the Veeam Cloud Connect Guide.

Page updated 3/4/2024

Page content applies to build 12.1.1.56