You can add a hardened repository based on a Linux server to your backup infrastructure to protect your backup files from loss due to malware activity or unplanned actions. The hardened repository supports the following features:
- Immutability: You specify the period when you add a hardened repository, and backup files must be immutable.
- Single-use credentials: Credentials will only be used once to add the Linux server to the backup infrastructure. The backup infrastructure does not store these credentials. The attacker cannot access the hardened repository even if the Veeam Backup & Replication server is compromised.
1. Login to the Veeam Backup and replication manager server.
2. Open the Veeam Backup & Replication Console and click Connect.
3. On the Home page, select Backup Infrastructure.
4. On the Backup Infrastructure page, select Backup Repositories.
5. Right-click Backup Repositories and select Add backup repository.
6. Select Direct attached storage on the Add Backup Repository page.
7. Select Linux (Hardened Repository) on the Direct Attached Storage page.
8. On the Name page, specify a Backup Repository name.
9. Give a brief description in the Description field for future reference and click Next.
10. On the Server page, select the Linux server from the Repository server drop-down list and click Populate.
11. Select the disk and click Next.
12. On the Repository page, click Browser for Path to folder.
13. On the Select Folder page, expand the server.
14. Select the backup folder and click OK.
15. On the Repository page, click Populate.
16. On the Repository page, select Use fast closing on XFS volumes.
17. Select Make recent backup immutable for 7 days. It depends on your requirement.
18. Use the Load control settings to manage the load on the backup repository and avoid storage I/O timeouts.
19. Click Advanced.
20. On the Storage Compatibility Settings, select Align backup file data blocks (recommended) checkbox.
21. Select Use per-machine backup files and click OK.
Note:
Select Decompress backup file data blocks before storing if you use a deduplicating storage feature or appliance.
22. On the Repository page, click Next.
23. Select a mount server from the Mount server drop-down list on the Mount Server page.
24. Select a folder in the Instant recovery write cache folder field for writing cache during mount operations.
25. Select Enable vPower NFS service on the mount server (recommend) and click Ports.
26. Review the ports settings on the vPower NFS Port Settings page and click OK.
27. Click Next on the Mount Server page.
28. On the Review page, click Apply.
29. Select the Search the repository for existing backups and import them automatically checkbox if the backup repository contains backups previously created with Veeam Backup & Replication.
30. Select the Import guest file system index data to the catalog checkbox if the backup repository contains guest file system index files previously created by Veeam Backup & Replication.
31. Click Next on the Apply page.
32. Click Finish on the Summary page.
33. Verify that the Hardened Backup Repository has been added.
I hope you enjoy this post.
Cary Sun
Twitter: @SifuSun
Web Site: carysun.com
Blog Site: checkyourlogs.net
Blog Site: gooddealmart.com
Author: Cary Sun
Cary Sun has a wealth of knowledge and expertise in data center and deployment solutions. As a Principal Consultant, he likely works closely with clients to help them design, implement, and manage their data center infrastructure and deployment strategies.
With his background in data center solutions, Cary Sun may have experience in server and storage virtualization, network design and optimization, backup and disaster recovery planning, and security and compliance management. He holds CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999. Cary is also a Microsoft Most Valuable Professional (MVP), Microsoft Azure MVP, Veeam Vanguard and Cisco Champion. He is a published author with several titles, including blogs on Checkyourlogs.net, and the author of many books.
Cary is a very active blogger at checkyourlogs.net and is permanently available online for questions from the community. His passion for technology is contagious, improving everyone around him at what they do.
Blog site: https://www.checkyourlogs.net
Web site: https://carysun.com
Blog site: https://gooddealmart.com
Twitter: @SifuSun
in: https://www.linkedin.com/in/sifusun/
Amazon Author: https://Amazon.com/author/carysun
