VBRCMRv12_1___Lab_Guide-u (1)

e
ut
ib
Veeam Backup &
tr
is
Replication v12.1:
Configure, Manage andD
or
Recover
e
at
lic
Lab Guide
up
D
ot
N
o
D
VBRCMRv12.1 Lab Guide
e
ut
ib
tr
is
D
or
e
at
lic
up
D
ot
N
© 2024 Veeam Software. Confidential information. All rights reserved.

o
All trademarks are the property of their respective owners. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or
translated into any language in any form by any means, without written permission from Veeam Software Inc (Veeam). The information contained in this document
represents the current view of Veeam on the issue discussed as of the date of publication and is subject to change without notice. Veeam shall not be liable for
D
technical or editorial errors or omissions contained herein. Veeam makes no warranties, express or implied, in this document. Veeam may have patents, patent
applications, trademark, copyright, or other intellectual property rights covering the subject matter of this document. All other trademarks mentioned herein are the
property of their respective owners. Except as expressly provided in any written license agreement from Veeam, the furnishing of this document does not give you
any license to these patents, trademarks, copyrights, or other intellectual property.
Please read the End User Software License Agreement before using the accompanying software program(s). Using any part of the software indicates that you accept
the terms of the End User Software License Agreement.
Document Revision: 20240617
© 2024 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners. 20240617 | 2
Table of contents
e
Lab 1: Secure Veeam backup server ................................................................................................................. 5
Lab 1.1: Secure the Veeam backup server ............................................................................................................................. 6
ut
Lab 2: Protect virtual machines .......................................................................................................................10
Lab 2.1: Add the virtual infrastructure to the Veeam Backup & Replication inventory ...................................................... 11
ib
Lab 2.2: Protect virtual workloads ....................................................................................................................................... 13
Lab 3: Veeam Agent backup capabilities .........................................................................................................19
tr
Lab 3.1: Automate deployment of Veeam Agents ............................................................................................................... 20
Lab 3.2: Protect physical workloads..................................................................................................................................... 24
is
Lab 4: Unstructured data backup capabilities ..................................................................................................27
Lab 4.1: Prepare Veeam infrastructure for file share backups ............................................................................................ 28
D
Lab 4.2: Protect file share workloads ................................................................................................................................... 30
Lab 5: Backup infrastructure optimization.......................................................................................................34
or
Lab 5.1: Deploy a dedicated VMware backup proxy............................................................................................................ 35
Lab 5.2: Deploy a Veeam Hardened Repository .................................................................................................................. 37
Lab 5.3: Deploy immutable object storage .......................................................................................................................... 41
e
Lab 6: Second site backup and backup management .......................................................................................44
Lab 6.1: Create a backup copy job ....................................................................................................................................... 45
at
Lab 6.2: Create a Scale-out Backup Repository (SOBR) ....................................................................................................... 47

Lab 6.3: Create a dynamic backup job ................................................................................................................................. 49
lic
Lab 6.4: Migrate virtual machine backups to another job ................................................................................................... 51

Lab 7: Building replication capabilities ............................................................................................................53
Lab 7.1: Prepare Veeam infrastructure for virtual machine replication .............................................................................. 54
up
Lab 7.2: Working with replication jobs ................................................................................................................................ 56

Lab 7.3: Working with CDP policies ..................................................................................................................................... 60
Lab 8: Testing virtual machine backups ...........................................................................................................64
D
Lab 8.1: Create a SureBackup job to verify backups ............................................................................................................ 65

Lab 8.2: Create a SureBackup job to verify replicas ............................................................................................................. 71
ot
Lab 9: Working with Veeam Backup Enterprise Manager ................................................................................76

Lab 9.1: Connect the backup server with Veeam Backup Enterprise Manager ................................................................... 77
Lab 9.2: Decrypt an imported encrypted file ....................................................................................................................... 78
N
Lab 9.3: Create a restore operator user ............................................................................................................................... 81

Lab 10: Application items recovery .................................................................................................................83
o
Lab 10.1: Perform a Microsoft SQL Server instant database recovery ................................................................................ 84
Lab 10.2: Restore an Active Directory user .......................................................................................................................... 87
D
Lab 11: Recovering a guest OS file ...................................................................................................................90

Lab 11.1: Restore a guest operating system file .................................................................................................................. 91
Lab 11.2: Restore a guest operating system file with disk publishing ................................................................................. 93
Lab 12: Full virtual machines recovery ............................................................................................................96
Lab 12.1: Recover a virtual machine with Instant Recovery ................................................................................................ 97
Lab 12.2: Recover a virtual machine with full VM recovery and quick rollback ................................................................ 100
Lab 13: Restore a physical machine from an Agent backup ........................................................................... 102
Lab 13.1: Perform a bare metal recovery of a Windows physical machine from an Agent backup .................................. 103
Lab 13.2: Perform an instant VM recovery of a Linux physical machine from an Agent backup ....................................... 106
Lab 14: Restore from a replica....................................................................................................................... 109
Lab 14.1: Disaster failover to a VMware vSphere replica and failback to production ....................................................... 110
e
Lab 14.2: Working with replica failover plans .................................................................................................................... 113
Lab 14.3: Planned failover to a Microsoft Hyper-V replica ................................................................................................ 116
ut
Lab 15: Restore from a file share backup....................................................................................................... 118
Lab 15.1: Recover a file share folder from backup ............................................................................................................ 119
ib
Lab 15.2: Recover an entire file share with instant file share recovery ............................................................................. 121
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 1: Secure Veeam backup server

Expected time to complete all exercises is 20 minutes maximum.
e
This module contains the following lab exercises:
ut
Lab 1.1: Secure the Veeam backup server
ib
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 1.1: Secure the Veeam backup server

Acoustic Intelligence Solutions’ CIO is worried about the possibility of a ransomware attack, and he
considers critical to secure the backup server as the backup solution will be the last line of defense agains
this type of attack. He has tasked you, as the backup administrator, to implement security and monitoring
e
mechanism on the backup server that not only maintain the backup data away from maliciuos activity, but
ut
also notify the administrators about backup job finish states.
ib
Learning objectives covered in this exercise:
- Check alignment with the Veeam backup server best practices
tr
- Configure restricted access to the Veeam backup server
is
- Protect and secure the Veeam backup server configuration data
- Configure the Veeam backup server to send notifications
D
Task 1: Run the Security & Compliance Analyzer or
Veeam Backup & Replication allows you to check your backup server configuration with a built-in tool to
ensure it follows security best practices for Microsoft Windows Server operating system (OS) and Veeam
backup infrastructure components.
e
1. From the desktop, launch the Veeam Backup & Replication Console shortcut.
at
2. In the newly opened window, in the Server section, enter: kol-veeam-vbr.vmce-mgmt.lab .

lic
Note: by default, the Veeam Backup & Replication console will try to connect to the localhost, click the
section that displays localhost to enter the Veeam backup server domain name.
up
3. Click the Connect button.

4. Maximize the newly opened kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and Replication console
D
window.
5. In the top left corner, click the Home ribbon.
ot
6. On the Home ribbon, select Security & Compliance.

N
Important: It is critical never to join the Veeam backup server to an active directory production
domain. In this training environment, the Veeam backup server has been joined to the veeam-mgmt.lab
o
management domain not to the vmce.lab production domain.

Because the Veeam backup server is not joined to the vmce.lab production domain, select the Backup
D
7.
server should not be a part of the production domain line item.
8. Click the Suppress button.
9. In the newly opened Edit Note window, remove the current text from the Note: section and enter:
Veeam Backup Server has been joined to the management domain vmce-mgmt.lab .
10. In the Edit Note window, click the OK button.
Note: This parameter will have the Passed status only if the backup server is not joined to any domain.
In other cases, it will have the Unable to detect status because there is no way to identify if a domain
is intended for production machines or not.
e
11. Back in the Security & Compliance Analyzer window, click the Close button.
ut
ib
Task 2: Configure user roles and security settings
tr
Veeam Backup & Replication supports multi-factor authentication (MFA) for additional user verification. A
one-time password (OTP) generated in a mobile authenticator application is used as a second verification
is
method. Combined with login and password credentials, it creates a more secure environment and protects
user accounts from being compromised.
D
Since user groups are not supported by MFA, you must remove the BUILTIN\Administrator user group
before enabling MFA.
or
1. Open the Main Menu by clicking its icon (≡) in the top left corner.
e
2. Select Users and Roles.
at
3. In the newly opened Users & Roles window, select the BUILTIN\Administrator group.
4. Click the Remove button.
lic
5. Tick the Enable multi-factor authentication (MFA) checkbox.

6. Select the Rasmus-user account.
up
7. Click the Edit… button.

D
Important: As this is a training environment, we will disable multi-factor authentication (MFA) for the
student account to avoid authentication problems later due to lost MFA tokens. Veeam strongly
recommends disabling MFA ONLY for service accounts and NEVER for real user accounts as this will
ot
compromise security.
N
8. In the newly opened Edit User window, tick the This is a service account (disables multi-factor
authentication) checkbox.
o
9. In the Edit User window, click the OK button.

D
10. Back in the Users & Roles window, click the Add… button.
11. In the newly opened Add user window, enter User or group: VMCE-MGMT\svcVeeam .
12. Click the Role drop-down list.
13. Select the Veeam Backup Administrator role.
14. Tick the This is a service account (disables multi-factor authentication) checkbox.
15. In the Add user window, click the OK button.
16. Back in the Users & Roles window, click the Add… button.
17. In the newly opened Add user window, enter User or group: VMCE-MGMT\Ricardo-user .
e
18. Verify Veeam Restore Operator is selected in the Role drop-down list.
ut
19. Verify the This is a service account (disables multi-factor authentication) checkbox is NOT ticked.
ib
20. In the Add user window, click the OK button.
21. Back in the Users & Roles window, tick the Enable auto logoff after checkbox.
tr
is
Important: As this is a training environment, we will increase this timeout to 60 minutes. In a production
environment, Veeam strongly recommends keeping the default value of 10 minutes or less.
D
22. Increase the Enable auto logoff after timeout value to: 60 minutes.
23. In the Users & Roles window, click the OK button.
or
Note: An expected warning window will appear, warning that configuration backup is disabled for
e
security purposes. We handle this warning as the very next task.
at
24. In the newly opened Warning window, click the OK button.

lic
Task 3: Configure configuration backup

up
In order to manage the warning from the previous window, as well as ensuring any stored credentials will be
safely included in the configuration backup, your next task is to enable the configuration backup with
encryption.
D
Select Configuration Backup.
ot
2.
3. In the newly opened Configuration Backup Settings window, tick the Enable configuration backup
N
to the following repository: checkbox.

4. Tick the Enable backup file encryption checkbox.
o
5. To add a new encryption password, click the Add… button.

D
6. In the newly opened Password window, enter:

a. Hint: Configuration backup
b. Password: XsW@AS_6%6QHz!
7. In the Password window, click the OK button.
Note: Password loss protection is disabled because the Veeam backup server has not been registered
on a Veeam Backup Enterprise Manager server. We will remediate this in a later lab.
8. Back in the Configuration Backup Settings window, click the OK button.
e
ut
Task 4: Configure email notifications
ib
In order to maintain a secure and efficient data protection platform, it is critical to enable notifications
about successful jobs or issues.
tr
is
2. Select Options.
3. In the newly opened Options window, select the E-mail Settings tab.
D
4. Tick the Enable e-mail notifications (recommended) checkbox. or
5. Enter:
a. SMTP server: cph-mail01.vmce.lab
e
b. From: veeam-alerts@vmce-mgmt.lab
at
c. To: veeam-admins@vmce-mgmt.lab
6. Click the Test Message button.
lic
7. From the Windows taskbar, launch the Microsoft Edge browser.

8. In the newly opened Microsoft Edge window, enter URL: http://cph-mail01.vmce.lab
up
9. Click the e-mail with the subject line Veeam Backup & Replication.
10. Close the Microsoft Edge window.
D
11. Back in the Veeam Backup and Replication window, click the OK button.
ot
12. Back in the Options window, click the OK button.

13. Close the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and Replication console window.
N
o
Congratulations!
D
You have completed this lab.
Lab 2: Protect virtual machines

Expected time to complete all exercises is 30 minutes maximum, plus an optional 15 minutes to monitor jobs
at the end.
e
ut
ib
Lab 2.1: Add the virtual infrastructure to the Veeam backup server inventory
Lab 2.2: Protect virtual workloads
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 2.1: Add the virtual infrastructure to the Veeam Backup & Replication
inventory
Acoustic Intelligence Solutions has a large virtualized environment, containing both: VMware vSphere and
Microsoft Hyper-V infrastructures, composed by Microsoft Windows and Linux servers which are critical for
e
the business. As the backup administrator, you need to register the virtual infrastructure on the backups
server which will allow you to create image-level backups of critical virtual machines.
ut
ib
- Identify the steps to add virtual infrastructure management tools to the Veeam Backup & Replication
tr
inventory
is
Task 1: Add the VMware vCenter Server
To configure the Veeam Backup & Replication installation for your environment, the first step is to add the
D
source hypervisors containing production virtual machines. This allows Veeam Backup & Replication to
extract data and produce backups. Your environment contains both Microsoft Hyper-V and VMware
or
vSphere, and you will add each hypervisor separately.
1. From the desktop, launch the Veeam Backup & Replication Console.
e

at
3. On the Server ribbon, click the Add Server button.

lic
4. In the newly opened Add Server window, select VMware vSphere.
Note: DO NOT add any VMware ESXi hosts connected to the VMware vCenter Server. Only add
up
truly standalone VMware ESXi servers. If you do not have any standalone VMware ESXi hosts, the
correct way to proceed is by adding the VMware vCenter Server itself.
D
5. Select vSphere.
ot
6. In the newly opened New VMware Server window, on the Name step, enter:
a. DNS name: kol-vc01.vmce-mgmt.lab

N
b. Description: VMware vCenter Server located in DR site

7. On the Name step, click the Next > button.
o
8. On the Credentials step, click the Add… button.

D
9. In the newly opened Credentials window, enter:
a. Username: svcVeeam@vmce-mgmt.lab
b. Password: Pa%%w0rd
c. Description: Veeam Service Account in management domain
10. In the Credentials window, click the OK button.
11. Back in the New VMware Server window, on the Credentials step, click the Apply button.
Important: An expected alert about an untrusted certificate will appear. In a production
e
environment, Veeam strongly recommends avoid using self-signed certificates. In this training
environment, we will continue connecting anyway.
ut
12. In the newly opened Certificate Security Alert window, click the Continue button.
ib
13. On the Apply step, click the Finish button when it is available.
tr
is
Task 2: Add the Microsoft Hyper-V server
D
2. In the newly opened Add Server window, select Microsoft Hyper-V.
or
3. In the newly opened New Hyper-V Server window, enter:
a. DNS name or IP address: cph-hv01.vmce-mgmt.lab
e
b. Description: Microsoft Hyper-V host placed in the Production site

at

lic
5. Select the Microsoft Hyper-V server (standalone) radio button.

6. On the Type step, click the Next > button.
up
7. Click the Credentials drop-down list.

8. Select the svcVeeam@vmce-mgmt.lab credential.
D
9. On the Credentials step, click the Next > button.

10. On the Review step, keep the default settings and click the Apply button.
ot
Note: This process will take a few minutes. Please, be patient.

N
o
Note: The cph-hv01.vmce-mgmt.lab host is now added as a managed server as well.

D
Lab 2.2: Protect virtual workloads

As the backup administrator of Acoustic Intelligence Solutions, you need to create backup jobs to protect
the virtual workloads from the VMware vSphere and Microsoft Hyper-V environments. The protection
requirements are:
e
- All VMs (Hyper-V and vSphere) must be protected daily.
ut
- VM backups must be retained for 7 days in the production site.
- Windows VM backups must be application-consistent.
ib
- MS SQL Server database log must be protected every 15 minutes.
- Backup server should not store OS credentials.
tr
- Linux VM backups can be crash-consistent.
- All backup files must be encrypted.
is
- Implement mechanisms to detect and repair corrupted backup data and run them monthly.
D
- Configure Group Managed Service Accounts (gMSA) for Windows guest operating systems interactions
or
- Create a virtual machine backup job
- Describe the steps to configure application-aware processing
- Identify backup job configurations and features
e
at
Task 1: Prepare secure authentication for Windows-based workloads

The guest interaction proxy is a backup infrastructure component that sits between the backup server and
lic
processed virtual machines. This component is needed if the backup or replication jobs need to interact
with the virtual machine guest operating systems.
up
1. In the bottom left corner, select the Backup Infrastructure view.

D
3. In the newly opened Add Server window, select Microsoft Windows.

4. In the newly opened New Windows Server window, enter:
ot
a. DNS name or IP address: cph-veeam-gip01.vmce.lab

N
b. Description: Veeam guest interaction proxy placed in the production site

o

D
7. Select svcVeeam@vmce-mgmt.lab.
9. On the Review step, click the Apply button.
12. Select Credentials & Passwords.
13. Select Datacenter Credentials.
14. In the newly opened Manage Credentials window, click the Add… button.
e
15. Select Managed service account….
ut
ib
a. Username: gmsaVeeam@vmce.lab
b. Description: Group Managed Service Account for Production domain
tr
is
18. Back in the Manage Credentials window, click the OK button.
D
Task 2: Create a Hyper-V backup job
or
1. In the bottom left corner of the window, navigate to the Home view (the icon looks like a house).
2. On the Home ribbon, click the Backup Job.
e
Select Virtual machine.

at
3.
4. Select Microsoft Hyper-V….

lic
5. In the newly opened New Backup Job window, enter:

a. Name: T1-CPH-HV-APP-7D
up
b. Description: Backup: Tier 1, Copenhagen, Hyper-V, Application servers, 7

day retention
D

7. Click the Add… button.
ot
8. In the newly opened Add Objects window, expand the cph-hv01.vmce-mgmt.lab host.
N
9. Select the CPH-GIT01 virtual machine.
Note: If no CPH-GIT01 virtual machine can be found, the most likely cause is you accidentally
o
launched a new backup job for VMware vSphere instead of Microsoft Hyper-V.
D
10. Hold the SHIFT key on the keyboard while selecting the CPH-SYSLOG01 virtual machine.
Important: A total of two virtual machines are now selected: CPH-GIT01 and CPH-SYSLOG01.
11. In the Add Objects window, click the Add button.
12. Back in the New Backup Job window, on the Virtual Machines step, click the Next > button.
13. Click the Advanced… button.
14. In the newly opened Advanced Settings window, Click the Maintenance tab.
15. Tick the Perform backup files health check checkbox.
e
16. Click the Storage tab.
ut
ib
18. In the Encryption section, click the Add… button.
19. In the newly opened Password window, enter:
tr
a. Hint: Backups
is
b. Password: P5a3QyjUxqox%z
D
20. In the Password window, click the OK button.
21. Back in the Advanced Settings window, click the OK button.
or
22. Back in the New Backup Job window, on the Storage step, click the Next > button.
23. On the Guest Processing step, keep the defaults and click the Next > button.
e
24. Tick the Run the job automatically checkbox.

at
25. On the Schedule step, click the Apply button.

lic
26. Tick the Run the job when I click Finish checkbox.
up
27. On the Summary step, click the Finish button.
Note: If you forgot to tick the Run the job when I click Finish checkbox, start the backup job
D
manually by selecting the job in the main panel and clicking the Start button on the Job ribbon.
Important: Do not wait for this job to finish. Continue immediately with the next lab exercise.
ot
N
Task 3: Create a vSphere backup job

o
1. On the Home ribbon, click the Backup Job button.

D
2. Select Virtual machine.

3. Select VMware vSphere….
a. Name: T1-CPH-ESX-APP-7D
b. Description: Backup: Tier 1, Copenhagen, ESXi, Application servers, 7 day

retention
e
7. In the newly opened Add Objects window, expand the kol-vc01.vmce-mgmt.lab vCenter Server.
ut
8. Expand the Copenhagen data center.
ib
9. Expand the Production cluster.
10. Select the CPH-APP01 virtual machine.
tr
11. While holding the SHIFT key on the keyboard select the CPH-WEB02 virtual machine.
is
Important: A total of eight virtual machines are now selected: CPH-APP01, CPHAPP02, CPH-DC01,
D
CPH-MAIL01, CPHMSSQL01, CPHPGSQL01, CPH-WEB01 and CPH-WEB02.
or
13. Back in the New Backup Job window, on the Virtual Machines step, click the Next > button.
e
15. In the newly opened Advanced Settings window, click the Maintenance tab.
at

Click the Storage tab.
lic
17.

up
19. Click the Password drop-down list.

20. Select the Backups password.
D
21. In the Advanced Settings window, click the OK button.

ot
23. On the Guest Processing step, tick the Enable application-aware processing checkbox.
24. Click the Applications… button.
N
25. In the newly opened Application-Aware Processing Options window, expand the Object column so
the object names are fully visible.
o
26. Verify the CPH-APP01 object is selected.

D
27. While holding the CTRL key on the keyboard, select the CPH-APP02, CPH-WEB01 and CPH-WEB02
virtual machines.
Important: A total of four virtual machines are now selected: CPH-APP01, CPH-APP02, CPH-WEB01
and CPH-WEB02.

29. Select General.
30. In the newly opened Processing Settings window, select the Disable application processing radio
button.
e
31. In the Processing Settings window, click the OK button.
ut
32. Back in the Application-Aware Processing Options window, select the CPH-DC01 virtual machine.
ib
33. While holding the CTRL key on the keyboard, select the CPH-MAIL01 and CPH-PGSQL01 virtual
machines.
tr
Important: A total of three virtual machines are now selected: CPH-DC01, CPH-MAIL01 and CPH-
is
PGSQL01.
D
35. Select General. or
36. In the newly opened Processing Settings window, tick the Use persistent guest agent checkbox.
e
38. Back in the Application-Aware Processing Options window, select the CPH-MSSQL01 object.
at

40. In the newly opened Processing Settings window, click the SQL tab.
lic
41. Select the Backup logs periodically radio button.

up
43. Back in the Application-Aware Processing Options window, click the OK button.
44. Back in the New Backup Job window, in the Guest interaction proxy section, click the Choose…
D
button.
45. In the newly opened Guest Interaction Proxy window, select the Prefer the following guest
ot
interaction proxy servers radio button.

Tick the cph-veeam-gip01.vmce.lab checkbox.
N
46.
47. In the Guest Interaction Proxy window, click the OK button.

o
48. Back in the New Backup Job window, click the Guest OS Credentials drop-down list.
D
49. Select the gmsaVeeam@vmce.lab credential.

50. Click the Test Now button.
Important: The guest credentials test is expected to fail for servers CPH-APP01, CPH-APP02, CPH-
WEB01 and CPH-WEB02 because they are all Linux-based servers. If the tests fail for any other
server(s), the most likely reason is that you selected the svcVeeam@vmce-mgmt.lab credential
instead of the gmsaVeeam@vmce.lab credential.
51. In the newly opened Guest Credentials Test window, wait for Windows servers to show a green
checkmark, then click the Close button.
e
52. Back in the New Backup Job window, on the Guest Processing step, click the Next > button.
ut
ib
tr
is
manually by selecting the job in the main panel and clicking the Start button on the Job ribbon.
D
Important: Notify your instructor, verbally or by chat, that you have completed the lab. If you want
or
to monitor the job, it will take approximately 15 minutes to complete.
e
at
Congratulations!
lic

up
D
ot
N
o
D
Lab 3: Veeam Agent backup capabilities

Expected time to complete all labs is 30 minutes maximum, plus an optional 10 minutes to monitor jobs at
the end.
e
ut
ib
Lab 3.1: Automate deployment of Veeam Agents
Lab 3.2: Protect physical workloads
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 3.1: Automate deployment of Veeam Agents

Acoustic Intelligence Solutions has some Windows and Linux physical servers they also need to protect.
From time to time these servers get retired and new ones are acquired. They do not want to manually add
or remove servers from backup jobs. The installation and update of Agents should also be done
e
automatically, allowing for immediate protection.
ut
ib
- Create dynamic protection groups
tr
Task 1: Create a protection group for automatic deployment of Veeam Agents for Windows
is
In Veeam Backup & Replication, computers that you want to protect with Veeam Agents are organized into
protection groups. You can use the Veeam Backup & Replication console to create one or more protection
D
groups that include individual computers, Microsoft Active Directory objects or a list of computers imported
from a CSV file. or
1. From the desktop, launch the Veeam Backup & Replication Console.

e
3. From the bottom left corner of the screen, navigate to the Inventory view.
at
4. Select Physical Infrastructure.

lic
5. On the Protection Group ribbon, click the Add Group button.
6. In the newly opened New Protection Group window, enter:

up
a. Name: Protection group using Active Directory security group

b. Description: Automated deployment of Veeam Agent for Windows to servers in
D
a security group
ot
8. On the Type step, keep the default settings and click the Next > button.
N
9. Click the Change… button.

o
10. In the newly opened Specify Domain window, in the Domain controller or domain DNS name:
section, enter: cph-dc01.vmce.lab
D
11. Click the Account drop-down list.
12. Select the svcVeeam@vmce-mgmt.lab account.
13. In the Specify Domain window, click the OK button.
14. Back in the New Protection Group window, click the Add… button.
15. In the newly opened Add Objects window, in the search field at the bottom of the window, in the
Object name: section, enter: veeam agent
Click the magnifying glass icon next to the search field.
e
16.
ut
17. Select the Veeam Agent Protected Servers security group.
18. In the Add Objects window, click the OK button.
ib
19. Back in the New Protection Group window, on the Active Directory step, click the Next > button.
tr
20. Untick the All virtual machines checkbox.
is
Note: Because this is a training environment, we will include virtual machines. In a production
D
environment, you would not want to protect virtual machines using Veeam Agents, unless, for
example, the virtual machine does not support hypervisor snapshots. or
21. Untick the All computers that have been offline for over 30 days checkbox.
22. On the Exclusions step, confirm no checkboxes are ticked, then click the Next > button.
e
23. Confirm the Master account defaulted to svcVeeam@vmce-mgmt.lab, and click the Test Now
at
button.
lic
24. In the newly opened Guest Credentials Test window, verify that the test has completed
successfully, then click the Close button.
up
25. Back in the New Protection Group window, on the Credentials step, click the Next > button.
26. Tick the Install changed block tracking driver (for Windows machines only) checkbox.
D
27. Tick the Perform reboot automatically if required checkbox.

ot
Note: Installing the CBT driver will require a reboot of the server. In production environments, it may
be desirable to control when production servers are rebooted.
N
28. On the Options step, click the Next > button.

o

D
30. On the Apply step, click the Finish button.
31. In the newly opened Machine rescan window, verify the PHYSICAL-WIN.vmce.lab server is listed in
the inventory.
Important: If you do not see the PHYSICAL-WIN.vmce.lab server listed in the Machine rescan
window, please ask your trainer for assistance.
32. In the Machine rescan window, click the Close button.
e
Note: The installation process will continue in the background.
ut
ib
Task 2: Create a protection group for automatic deployment of Veeam Agents for Linux
Just like protection groups that include Active Directory containers, protection groups of the CSV file type
tr
are also dynamic. If a new computer appears in a CSV file after the protection job is created, within the next
rescan session, Veeam Backup & Replication will automatically update the protection group settings to
is
include that computer.
D
1. On the Protection Group ribbon, click the Add Group button.
2. In the newly opened New Protection Group window, enter:
or
a. Name: Protection group using CSV file
b. Description: Automated deployment of Veeam Agent for Linux to servers in a
e
CSV file
at

4. Select the Computers from CSV file radio button.
lic
5. On the Type step, click the Next > button.

up
6. Click the Browse… button.

7. In the newly opened Select File window, in the Type in the path to file section, enter:
C:\Install\protection-group-linux.csv
D
8. In the Select File window, click the OK button.

ot
9. Back in the New Protection Group window, verify PHYSICAL-LIN.vmce.lab appears in the
Computers list and click the Next > button.
N

11. Select SSH private key….
o

D
a. Username: administrator
c. Private key: C:\Install\id_rsa.ppk
d. Passphrase: #1 Global Leader in Data Protection & Ransomware Recovery
e. Description: Linux account with sudo permission

13. Tick the Elevate account privileges automatically checkbox.
15. Back in the New Protection Group window, click the Test Now button.
e
16. In the newly opened Guest Credentails Test window, wait for the PHYSICAL-LIN.vmce.lab server
ut
to reach a status of Success, then click the Close button.
ib
17. Back in the New Protection Group window, click the Next > button.
18. On the Options step, keep the default settings and click the Next > button.
tr
is
In the newly opened Machine rescan window, verify the PHYSICAL-LIN.vmce.lab server is listed in
D
21.
the inventory. or
Important: If you do not see the PHYSICAL-LIN.vmce.lab server listed in the Machine rescan
window, please ask your trainer for assistance.
e
22. In the Machine rescan window, click the Close button.
at
Note: The installation process will continue in the background.

lic
up
D
ot
N
o
D
Lab 3.2: Protect physical workloads

As the backup administrator of Acoustic Intelligence Solutions, you need to create backup jobs to protect
Windows and Linux physical workloads. The requirements provided by the architects are:
- All physical machines must be protected daily.
e
- Physical machine backups must be retained for 7 days in the production site.
ut
- Physical machine backups can be crash-consistent.
ib
tr
is
- Create a backup job for physical machines
- Identify the backup job configurations and features
D
Task 1: Create a backup job to protect physical Windows workloads in a protection group
or
To back up data of your protected computers, you must configure a Veeam Agent backup job in Veeam
Backup & Replication. The Veeam Agent backup job defines what data to back up, how, where and when to
back up data. One Veeam Agent backup job can be used to process one or more protected computers.
e

at
2. Select Windows computer….

lic
3. In the newly opened New Agent Backup Job window, on the Job Mode step, keep the default
settings and click the Next > button.
up
4. Enter:
a. Name: T1-CPH-PHY-WINDOWS-7D
D
b. Description: Backup: Tier 1, Copenhagen, Physical, Windows servers, 7 day

retention
ot

N
7. Select Protection group….

o
8. In the newly opened Select Objects window, select the Protection group using Active Directory
security group object.
D
9. In the Select Objects window, click the OK button.

10. Back in the New Agent Backup Job window, on the Computers step, click the Next > button.
11. On the Backup Mode step, keep the default settings and click the Next > button.
12. On the Storage step, keep the default settings and click the Advanced… button.
13. Click the Maintenance tab.

e
ut
18. Select the Backups credential.
ib
20. Back in the New Agent Backup Job window, on the Storage step, click the Next > button.
tr
21. On the Guest Processing step, keep the default settings and click the Next > button.
is
D
or
25. Click the Finish button.
e
manually by clicking the Start button on the Job ribbon.

at
lic
Task 2: Create a backup job to protect physical Linux workloads in a protection group
up
1. Navigate to the Home view.

D
3. Select Linux computer….

ot
4. In the newly opened New Agent Backup Job window, on the Job Mode step, keep the default
N
5. Enter:
a. Name: T1-CPH-PHY-LINUX-7D
o
b. Description: Backup: Tier 1, Copenhagen, Physical, Linux servers, 7 day

D
retention
8. Select Protection group….
9. In the newly opened Select Objects window, select the Protection group using CSV file object.
10. In the Select Objects window, click the OK button.
11. Back in the New Agent Backup Job window, on the Computers step, click the Next > button.
12. On the Backup Mode step, keep the default settings and click the Next > button.
e
13. On the Storage step, keep the default settings and click the Advanced… button.
ut
ib
tr
is
D
or
21. Back in the New Agent Backup Job window, on the Storage step, click the Next > button.
22. On the Guest Processing step, keep the default settings and click the Next > button.
e

at

lic
up
manually by clicking the Start button on the Job ribbon.
D
ot
N
o
Congratulations!
D
Lab 4: Unstructured data backup capabilities

Expected time to complete all labs is 20 minutes maximum.
e
ut
Lab 4.1: Prepare Veeam infrastructure for file share backups
ib
Lab 4.2: Protect file share workloads
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 4.1: Prepare Veeam infrastructure for file share backups

At Acoustic Intelligence Solutions, employees save their project files and other important files in a
Windows SMB file share located at the Copenhagen data center. The performance and availability of these
files are critical for company operations. Users normally share these files with co-workers inside and outside
e
their teams. However, data confidentiality must be ensured.
ut
ib
- Describe the Veeam components required to create a file share backup job
- Deploy a new repository for file share backups
tr
Task 1: Deploy required Veeam components for creating file share backups
is
A cache repository is a storage location where Veeam Backup & Replication keeps temporary metadata.
D
This temporary metadata reduces the load on the unstructured data source during the backup procedure.
The cache repository keeps track of all objects that have changed between each backup session. This
allows Veeam Backup & Replication to perform incremental backups from the unstructured data source
or
very quickly and efficiently.
e
2. In the newly opened Veeam Backup & Replication 12 window, click the Connect button.
at
3. In the bottom left corner of the window, navigate to the Backup Infrastructure view.
lic
4. In the Backup Infrastructure view, select Backup Repositories.

5. On the Backup Repository ribbon, click the Add Repository button.
up
6. In the newly opened Add Backup Repository window, select Direct attached storage.
7. Select Microsoft Windows.
D
8. In the newly opened New Backup Repository window, enter:

a. Name: File Share - Cache Repository
ot
b. Description: Backup repository exclusively used as a cache repository for

file shares
N

o
10. Verify the Repository Server drop-down list defaulted to KOL-VEEAM-VBR.vmce.lab, then click the
Populate button.
D
11. Select the E:\ drive.

12. On the Server step, click the Next > button.
13. Modify the Path to folder to: E:\File Share Cache Repository
14. On the Repository step, click the Next > button.
15. On the Mount Server step, keep the default settings and click the Next > button.
17. On the Apply step, click the Next > button.
e
19. In the newly opened Veeam Backup and Replication window, click the No button to keep the
ut
configuration backup at the default location.
ib
Important: In a production environment, the configuration backup should ideally be stored at a
different site than the backup server.
tr
is
Task 2: Add the file share to the Veeam backup server
D
You must add to the backup server any unstructured data sources that you plan to backup.
1. In the bottom left corner of the window, navigate to the Inventory view.
or
2. In the Inventory view, select Unstructured Data.
3. On the Data Source ribbon, click the Add Data Source button.
e
4. In the newly opened Add Unstructured Data Source window, select File share.
at
Note: Verify that you are selecting File share and NOT File server.
lic
5. In the newly opened Add File share window, select SMB share.
In the newly opened New File Share window, enter SMB server or file share:
up
6.
\\nas.vmce.lab\storage\
7. Tick the This share requires access credentials checkbox.
D
8. Click the Credential drop-down list.

Select svcVeeam@vmce-mgmt.lab.
ot
9.
10. On the SMB File Share step, click the Next > button.
N
11. Click the Cache Repository drop-down list.

12. Select File Share - Cache Repository.
o
13. On the Processing step, click the Apply button.

D
Lab 4.2: Protect file share workloads

As the backup administrator of Acoustic Intelligence Solutions, you have to create backup jobs to protect
the file share observing the following requirements:
- SMB file share must be protected every 12 hours.
e
- File share backups must be retained for 31 days in the production site.
ut
- A maximum of 4 file versions should be kept.
- A notification should be received in case any file or folder was skipped during the backup.
ib
- File permissions must remain unchanged even when an individual file is restored
tr
- File share backup jobs must be easily identifiable and filtered in the managing console by the
is
administrators.
D
- Create a file share backup job
or
- Identify the file share backup job configurations and features
- Create management views in the Veeam Backup & Replication console
e
Task 1: Create a backup job to protect file share workloads

at
To protect files and folders on the file share, configure a file backup job. The backup job defines how, where
and when to back up data from the file share. One job can be used to protect one or more file shares. Jobs
lic
can be started manually or scheduled to run automatically at a specific time.

1. In the bottom left corner of the window, navigate to the Home view.
up

3. Select File share….
D
4. In the newly opened New File Backup Job window, enter:

ot
a. Name: T1-CPH-NAS-FILES-31D
b. Description: Backup: Tier 1, Copenhagen, File Share, 31 days retention
N

o
7. In the newly opened Select File or Folder window, verify the selected server is
D
\\nas.vmce.lab\storage\.
8. In the Select File or Folder window, keep the default folder selection of \\nas.vmce.lab\storage\
and click the OK button.
9. Back in the New File Backup Job window, select \\nas.vmce.lab\storage\.
10. Click the Filters… button.
Note: Notice that by default all file names and extensions are included, but two snapshot folders are
excluded. Such snapshot folders could be present due to Veeam producing snapshots to avoid file
locks.
e
11. In the newly opened Include and exclude masks window, click the Cancel button.
ut
12. Back in the New File Backup Job window, on the Objects step, click the Next > button.
ib
13. Verify the Backup repository defaulted to Default Backup Repository.
14. Increase the Keep all file versions for the last setting to: 31 days.
tr
is
16. In the newly opened Advanced Settings window, select the Limit the number of both recent and
archived file versions radio button.
D
17. Confirm the Active file versions limit: checkbox is ticked. or
18. In the Active file versions limit: section, enter: 4 .
19. Click the ACL Handling tab.
e
20. Select the Files and folders (slower) radio button.
at
Important: Select Files and folders (slower) to back up permissions and attributes from both folders
and individual files. Selecting Folder-level only to back up permissions and attributes from folders
lic
only - in this case the restored files will inherit permissions from the target folder. Mind that Veeam
Backup & Replication does not collect ACL handling settings of the source file share root folder, so
up
you cannot restore them. Before restoring an entire file share, you will have to specify required ACL
handling settings for the root folder of the target file share.
D

ot

N

Tick the Perform backup files health check checkbox.
o
26.
27. Click the Notifications tab.

D
28. Tick the Make file or folder processing issues result in a job warning checkbox.
Important: Without this checkbox, no warnings will be issues if a file or folder is skipped and in turn
not backed up during job runs.

30. Back in the New File Backup Job window, on the Backup Repository step, click the Next > button.
31. On the Archive Repository step, keep the defaults and click the Next > button.
e
33. Select the Periodically every radio button.
ut
34. Click the Periodically every drop-down list with a current value of 1.
ib
35. In the Periodically every drop-down list, select 12.
tr
is
D
or
Task 2: Create a file share management view
e
A job filter allows you to filter jobs by different parameters. For example, you can create a filter that will only
at
show file share backup jobs. Only the user who creates filters can access them — that is, other users cannot
use these filters.
lic
1. In the Home view, in the left-hand navigation pane, select Jobs.

2. Click the View ribbon.
up
3. On the View ribbon, click the Add View button.

4. In the newly opened Add View window, in the View name section, enter: File Share
D
5. Tick the Add this view to the job management tree checkbox.
6. In the Workload section, tick the File checkbox.
ot
7. In the Job type section, tick the Backup checkbox.

N
8. In the Add View window, click the OK button.

9. All jobs except file jobs are now filtered out of the Jobs display. To remediate this, click the blue
o
funnel icon in the top middle portion of the screen above the jobs where the text File Share (1 out of
5 jobs shown) is displayed.
D
10. Select All jobs.

11. In the Home view, in the left-hand navigation pane, select the newly created File Share view.
12. Confirm the newly created T1-CPH-NAS-FILES-31D job is visible.
Congratulations!
e
ut
ib
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 5: Backup infrastructure optimization

e
ut
Lab 5.1: Deploy a dedicated VMware backup proxy
ib
Lab 5.2: Deploy a Veeam Hardened Repository
tr
Lab 5.3: Deploy immutable object storage
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 5.1: Deploy a dedicated VMware backup proxy

Backup architects recommended that Acoustic Intelligence Solutions should dedicate exclusive compute
resources to backup file processing because several jobs might run at the same time. For smaller
installations, sharing these resources with the backup server (for example) is a good option. However, larger
e
infrastructures will likely require dedicated resources for backup processing.
ut
- Describe the steps to add a VMware backup proxy to the backup infrastructure
ib
Task 1: Deploy a dedicated VMware backup proxy
tr
A VMware backup proxy is an architecture component that sits between the backup server and other
is
components of the backup infrastructure. While the backup server administers tasks, the proxy processes
jobs and delivers backup traffic.
D
1. From the desktop, launch the Veeam Backup & Replication Console shortcut.or
e
4. In the Backup Infrastructure view, select Backup Proxies.
at
5. On the Backup Proxy ribbon, click the Add Proxy button.

6. In the newly opened Add Backup Proxy window, select VMware backup proxy.
lic
7. In the newly opened New VMware Proxy window, click the Add New… button.
up

a. DNS name: cph-veeam-pxy01.vmce-mgmt.lab
D
b. Description: Backup proxy located in Copenhagen connected to the stretched

ot
backup network
N

o

D

16. Back in the New VMware Proxy window, in the Transport mode section, click the Choose… button.
17. In the newly opened Transport Mode window, select the Virtual appliance radio button.
18. Tick the Enable host to proxy traffic encryption in Network mode (NBDSSL) checkbox.
19. In the Transport Mode window, click the OK button.
20. Back in the New VMware Proxy window, hover the mouse cursor over the green checkmark until a
tool tip is displayed.
e
ut
Important: Because this backup proxy has two CPU cores, the max concurrent tasks limit has
automatically been set to 4. Veeam recommends configuring two tasks for every one CPU core (2:1
relationship).
ib
tr
22. On the Traffic Rules step, click the Apply button.
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 5.2: Deploy a Veeam Hardened Repository

Acoustic Intelligence Solutions is commited to prevent ransomware incidents. They want to incorporate
robust security measures that restrict the backup files from being modified or deleted (accidentally or
intentionally) from the repositories. These files should only be deleted when the defined 7-day retention
e
period have already expired.
ut
ib
- Describe the importance of immutability
- Identify the steps to add a Veeam Hardened Repository to the backup infrastructure
tr
- Configure the Linux operating system to increase the security of the Veeam Hardened Repository
- Secure and protect the Veeam backup server configuration backups
is
Task 1: Deploy a Veeam Hardened Repository for workload backups
D
To protect your backup files from loss as a result of malware activity or unplanned actions, you can add a
hardened repository based on a Linux server to your backup infrastructure.
or
e
at
Select Linux (Hardened Repository).

lic
4.

up
a. Name: T1-CPH-VEEAM-REP01-EXTENT01
b. Description: Tier 1, CPH-VEEAM-REP01 server, Extent 01

D

ot
7. Click the Add New… button.
8. In the newly opened New Linux Server window, enter:

N
a. DNS name: cph-veeam-rep01.vmce-mgmt.lab

o
b. Description: Veeam Hardened Repository 01 in Copenhagen

D
a. Username: veeamrepo
c. Description: Single-use credential, automatically deleted after first use
e
13. Back in the New Linux Server window, click the Next > button.
ut
14. In the newly opened Veeam Backup and Replication warning window, click the Yes button to trust
the Linux server.
ib
15. Back in the New Linux Server window, on the Review step, click the Apply button.
tr
is
17. Back in the New Backup Repository window, click the Populate button.
D
18. Select /mnt/backup1 (/dev/sdb/).
On the Server step, click the Next > button.

19.
or
20. Verify the location defaulted to /mnt/backup1/backups.
On the Repository step, click the Next > button.

e
21.
at
22. Click the Mount server drop-down list.
Select cph-veeam-pxy01.vmce-mgmt.lab.
lic
23.
24. On the Mount Server step, click the Next > button.
up
26. On the Apply step, click the Next > button when it is available.
D

ot
Task 2: Deploy a Veeam Hardened Repository for configuration backups

N

In the newly opened Add Backup Repository window, select Direct attached storage.
o
2.
Select Linux (Hardened Repository).

D
3.

a. Name: T1-CPH-VEEAM-REP01-CONFIGBCK
b. Description: Tier 1, CPH-VEEAM-REP01 server, Configuration backup
6. Cick the Populate button.

7. Select /mnt/backup1 (/dev/sdb/).
9. Enter Path: /mnt/backup1/configbck
e
10. On the Repository step, confirm you changed the path and click the Next > button.
ut
ib
tr
is
D
Task 3: Stop and disable SSH on the Veeam Hardened Repository
SSH connection is necessary only for the deployment and upgrade of Veeam Data Mover or transport
or
service in the Veeam Hardened Repository. The transport service will be used to communicate with backup
infrastructure components without the SSH connection. For security purposes, after you added the Linux
e
server, you must disable SSH connection for the user account you use to connect to the Linux server. If you
can work with the server from the console, disable SSH connection for the server itself.
at
1. Open the Main Menu by clicking it’s icon (≡) in the top left corner.
lic
2. Select Console.
3. Select PuTTY.
up
4. In the newly opened PuTTY Configuration window, enter host name: cph-veeam-rep01.vmce-
mgmt.lab
D
5. Click the Open button.

6. In the newly opened PuTTY Security Alert window, click the Accept button.
ot
7. In the newly opened PuTTY window, enter login as: veeamrepo

Press the ENTER key on the keyboard.
N
8.
9. Enter password (no input will be visible while typing): Pa%%w0rd

o
10. Press the ENTER key on the keyboard.

D
11. Enter command: sudo systemctl stop ssh

13. Enter password (no input will be visible while typing): Pa%%w0rd
15. Enter command: sudo systemctl disable ssh

17. Enter command: exit
e
ut
Task 4: Change backup repository used for configuration backup
ib
The configuration backup files are stored in the \VeeamConfigBackup\%BackupServer% folder on the
default backup repository. However, for security’s sake, it is recommended that you do not store
tr
configuration backups on the default backup repository or in any other folder on the backup server. In this
is
case, if the backup server fails, its configuration data will remain, and you will be able to recover the failed
backup server.
D
Configuration backups that were created before the target change will remain in the default backup
repository. You can manually copy them to the new backup repository to have all restore points of the
configuration backup in one place.
or
1. Open the Main Menu by clicking it’s icon (≡) in the top left corner.
e
2. Select Configuration Backup.
at
3. In the newly opened Configuration Backup Settings window, click the Repository drop-down list.
4. Select the T1-CPH-VEEAM-REP01-CONFIGBCK repository.
lic
5. In the Configuration Backup Settings window, click the OK button.

up
D
ot
N
o
D
Lab 5.3: Deploy immutable object storage

Keeping in mind the immutable capabilities and the data durability design of object storage systems,
Acoustic Intelligence Solutions was advised to implement this type of storage at Kolding datacenter to
store secondary copies of the backup files, therefore providing compliance with the 3-2-1 rule.
e
ut
- Describe the advantages of using object storage repositories
ib
- Identify the steps to create an object storage repository
tr
Task 1: Create the first object storage backup repository
is
An object storage repository is a repository intended for long-term data storage and based on either a
cloud solution or an S3 compatible on-premises storage solution.
D
2. In the newly opened Add Backup Repository window, select Object storage.
or
3. On the Object Storage step, select S3 Compatible.
4. On the S3 Compatible step, select S3 Compatible.
e
5. In the newly opened New Object Storage Repository window, enter:

at
a. Name: T2-KOL-VEEAM-S3-IMMUTABLE01
lic
b. Description: Tier 2, Object Storage, KOL-VEEAM-S3 bucket, IMMUTABLE01

6. Tick the Limit concurrent tasks to: checkbox.
up
7. In the Concurrent tasks: section, enter: 8
Important: Even with 8 concurrent tasks Veeam can usually saturate a 10 Gbit/s link. Consider
D
starting with a limit of 2 tasks and slowly increase it, while monitoring your network saturation.
ot
9. Enter Service point: http://kol-veeam-s3.vmce-mgmt.lab

N

o
a. Access key: ricardo-user

D
b. Secret key: Pa%%w0rd

c. Description: Object Storage credential for MinIO
13. Back in the New Object Storage Repository window, on the Account step, click the Next > button.
14. In the Bucket section, click the Browse… button.

15. In the newly opened Select Bucket window, select veeam-immutable-01.
16. In the Select Bucket window, click the OK button.
17. Back in the New Object Storage Repository window, in the Folder section, click the Browse…
e
button.
ut
18. In the newly opened Select Folder window, click the New Folder button.
ib
19. In the Folder name: section, enter: CapacityTier
tr
21. In the Select Folder window, click the OK button.
is
22. Back in the New Object Storage Repository window, tick the Make recent backups immutable for:
checkbox.
D
23. On the Bucket step, click the Next > button. or
24. Click the Mount Server drop-down list.
25. Select cph-veeam-pxy01.vmce-mgmt.lab.
On the Mount Server step, click the Next > button.
e
26.
On the Review step, click the Apply button.

at
27.
lic

up
Task 2: Create the second object storage backup repository

D

2. In the newly opened Add Backup Repository window, select Object storage.
ot
3. On the Object Storage step, select S3 Compatible.

4. On the S3 Compatible step, select S3 Compatible
N
5. In the newly opened New Object Storage Repository window, enter:

o
a. Name: T2-KOL-VEEAM-S3-IMMUTABLE02
D
b. Description: Tier 2, Object Storage, KOL-VEEAM-S3 bucket, IMMUTABLE02

6. Tick the Limit concurrent tasks to: checkbox.
7. Enter Concurrent tasks: 8
Important: Even with 8 concurrent tasks, Veeam can usually saturate a 10 Gbps link. Consider
starting with a limit of 2 tasks and slowly increasing it while monitoring your network saturation.
9. Enter Service point: http://kol-veeam-s3.vmce-mgmt.lab
e
11. Select the ricardo-user credential.
ut
12. On the Account step, click the Next > button.
ib
13. In the Bucket section, click the Browse… button.
14. In the newly opened Select Bucket window, select veeam-immutable-02.
tr
15. In the Select Bucket window, click the OK button.
is
16. Back in the New Object Storage Repository window, in the Folder section, click the Browse…
button.
D
17. In the newly opened Select Folder window, click the New Folder button. or
18. Enter Folder name: BackupCopy
e
20. In the Select Folder window, click the OK button.
at
21. Back in the New Object Storage Repository window, tick the Make recent backups immutable for:
checkbox.
lic
22. On the Bucket step, click the Next > button.

23. Click the Mount Server drop-down list.
up

25. On the Mount Server step, click the Next > button.
D

On the Apply step, click the Next > button when it is available.
ot
27.

N
o
D
Congratulations!
Lab 6: Second site backup and backup

management
e
ut
ib
tr
Lab 6.1: Create a backup copy job
is
Lab 6.2: Create a Scale-out Backup Repository (SOBR)
Lab 6.3: Create a dynamic backup job
D
Lab 6.4: Migrate virtual machine backups to another job or
e
at
lic
up
D
ot
N
o
D
Lab 6.1: Create a backup copy job

The CIO of Acoustic Intelligence Solutions understands the importance of safeguarding data and
recently heard about the 3-2-1 rule.
As the backup administrator, you were tasked to align the AIS backup solution with the 3-2-1 rule. You need
e
to create jobs that will automatically copy the backup files from the Hardened Repository at the production
ut
site to the object storage at the disaster recovery (DR) site. The architects made the following
recommendations:
ib
- Hyper-V VM backups must be copied to DR site immediately after they are created in the Production site.
- Hyper-V VM backups must be retained for 31 days in the DR site.
tr
- At least 12 monthly full backups must be retained at the DR site.
is
- At least 3 yearly full backups must be retained at the DR site.
D
- List the configurations needed to create a backup copy job
- Describe the use cases for backup copy jobs
or
Task 1: Create backup copy job to object storage
e
With backup copy, you can create several instances of the same backup file and copy them to secondary
at
(target) backup repositories for long-term storage. Target backup repositories can be located in the same
site as the source backup repository or can be deployed off-site. The backup copy file has the same format
lic
as the primary backup, so you can restore necessary data directly from it in case of a disaster.
up
3. In the Home view, on the Home ribbon, click the Backup Copy button.
D
4. In the newly opened New Backup Copy job window, enter:

a. Name: T2-KOL-HV-APP-31D-12M-3Y
ot
b. Description: Backup copy: Tier 2, Kolding, Hyper-V, Application servers,

N
31 day/12 month/3 year retention

5. Verify that the Immediate copy (mirroring) radio button is selected and click the Next > button.
o

D
7. Select From jobs….

8. Select the T1-CPH-HV-APP-7D job.
Important: Review that you selected T1-CPH-HV-APP-7D and NOT T1-CPH-ESX-APP-7D.

9. In the Select Jobs window, click the OK button.
10. Back in the New Backup Copy Job window, click the Next > button.
Note: An expected warning window will appear, warning that the source backup is encrypted and
you should consider to encrypt the backup copy as well.
In the newly opened Veeam Backup and Replication window, click the OK button.
e
11.
ut
12. Back in the New Backup Copy Job window, click the Backup Repository drop-down list.
13. Select the T2-KOL-VEEAM-S3-IMMUTABLE02 repository.
ib
14. In the Retention policy section, change the default 7 days value to 31 days.
Tick the Keep certain full backups longer for archival purposes checkbox.
tr
15.
16. Click the Configure… button.
is
17. In the newly Configure GFS window, tick the Keep monthly full backups for: checkbox, and
D
change the corresponding value to 12 months.
18. Tick the Keep yearly full backups for: checkbox and change the corresponding value to 3 years.
or
19. In the Configure GFS window, click the OK button.
20. Back in the New Backup Copy Job window, click the Advanced… button.
e
21. In the newly opened Advanced Settings window, tick the Perform backup files health check
at
checkbox.
lic

up

D
27. Back in the New Backup Job window, on the Target step, click the Next > button.
ot
28. In the Data Transfer step, keep the default settings and click the Next > button.
29. In the Schedule step, keep the default settings and click the Apply button.
N
30. Verify the Enable the job when I click Finish checkbox is ticked and click the Finish button.
o
D
Lab 6.2: Create a Scale-out Backup Repository (SOBR)

Acoustic Intelligent Solutions wants to review if there is a way of adhering to the 3-2-1 rule without
managing two different jobs. Also, they would like to be able to add, remove, and maintain repositories from
the backup infrastructure without having to change the jobs settings.
e
ut
- Describe the use cases for Scale-out Backup Repositories
ib
- Describe the tiers that can be included in a SOBR - List the steps to configure a SOBR
tr
Task 1: Create a SOBR with Hardened Repository and object storage for capacity tier
is
A Scale-out Backup Repository (SOBR) is a repository system with horizontal scaling support for multi-tier
storage of data. A SOBR consists of one or more backup repositories or object storage repositories called
D
Performance Tier, and it can be expanded with object storage repositories for long-term and archive
storage: Capacity Tier and Archive Tier. All the storage devices and systems inside the Scale-out Backup
Repository are joined into a system, with their capacities summarized.
or
2. In the Backup Infrastructure view, select Scale-out Repositories.
e
3. On the Scale-out Repository ribbon, click the Add Scale-out Repository button.
at
4. In the newly opened New Scale-out Backup Repository window, enter:

lic
a. Name: T1/T2-CPH/KOL-VEEAM-SOBR01
b. Description: Scale-out Backup Repository with Hardened Repository and
up
object storage for capacity tier

5. Click the Next > button.
D

7. In the newly opened Extents window,expand the Name column so the full name becomes visible.
ot
8. Tick the T1-CPH-VEEAM-REP01-EXTENT01 Hardened Repository.

In the Extents window, click the OK button.
N
9.
10. Back in the New Scale-out Backup Repository window, click the Next > button.
o
11. In the Placement Policy step, keep the default settings and click the Next > button.
D
12. Tick the Extend scale-out backup repository capacity with object storage: checkbox.
13. Click the Choose… button.
14. In the newly opened Capacity Tier Extents window, expand the Name column to make the full
repository names visible.
15. Tick the T2-KOL-VEEAM-S3-IMMUTABLE01 object storage repository.

16. In the Capacity Tier Extents window, click the OK button.
17. Back in the New Scale-out Backup Repository window, tick the Copy backups to object storage as
soon as they are created checkbox.
e
18. On the Capacity Tier step, click the Next > button.
ut
19. On the Archive Tier step, keep the defaults and click the Apply button.
ib
20. On the Summary step, click the Finish button when it is available.
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 6.3: Create a dynamic backup job

Backup architects have detected that VMware vSphere Windows and Linux virtual machines have been
added to the same backup job. This could affect the possibility to enable application-consistency backups
on Linux machines since they require different credentials to interact with the operating systems. The
e
architects recommended separating the virtual machines into two different jobs: one for Windows and one
ut
for Linux. The new backup job should have the exact same configurations as the original, but only hold
Linux virtual machines.
ib
Also, the CIO of Acoustic Intelligent Solutions is worried about having to modify the existing backup jobs
every time a new virtual machine is added or removed from the hypervisor inventory. Manual steps could
tr
lead to data not being protected immediately, which creates unnecessary risks. Ideally, every time a new
virtual machine is created it should be automatically included in a backup job, starting protection right
is
from day one.
D
- Describe the use of vCenter Server tags as virtual machine containers
or
- Configure a backup job to use vCenter Server tags as the virtual machine container to protect
Task 1: Create backup job using vSphere tags

e
If you use vCenter Server tags to categorize objects in the virtual infrastructure, you can filter objects that
at
you add to data protection and disaster recovery jobs and tasks by these tags. Use of tags facilitates object
management. You can quickly configure jobs and tasks for virtual machines that belong to a specific
lic
category, for example, a certain department or Service Level Agreement (SLA) level.
up

3. Select Virtual machine.
D

ot

a. Name: T1-CPH-ESX-TAG-7D
N
b. Description: Backup: Tier 1, Copenhagen, ESXi, Tagged virtual machines, 7

day retention
o

D

8. In the newly opened Add Object window, click the Tags combination icon on the top right corner.
9. Expand the kol-vc01.vmce-mgmt.lab vCenter server.
10. Expand the Backup vSphere tag category.
11. Tick the LINUX vSphere tag checkbox.

12. Tick the RPO-24H-7D vSphere tag checkbox.
14. Back in the New Backup Job window, click the Next > button.
e
15. Click the Backup Repository drop-down list.
ut
16. Select the T1/T2-CPH/KOL-VEEAM-SOBR01 repository.
ib
tr
is
D
or
e
at
26. In the Guest Processing step, keep the default settings and click the Next > button.
lic

up
Important: Do NOT run the job immediately.

29. Verify the Run the job when I click Finish checkbox is NOT ticked.
D
Important: Do NOT run the job immediately.

ot

N
o
D
Lab 6.4: Migrate virtual machine backups to another job

Unfortunately, after the last task, backups from Linux virtual machines are still associated with the original
backup job, which is not only confusing, but will also require a new active full backup in the new job to start
a new backup file chain on the destination repository.
e
The CIO of Acoustic Intelligence Solutions is requesting to solve that situation by associating existing
ut
Linux virtual machines backups with the recently created backup job, without performing a full backup
again.
ib
tr
- Describe the steps to move virtual machines to another backup job
is
- List the use cases for moving virtual machines
D
Task 1: Migrate a virtual machine backup to another job
Veeam Backup & Replication allows you to move all backups of a backup job to another repository or to
move specific workloads and their backups to another job.
or
Moving backups to another repository can be helpful if you are running out of free space on a repository
and want to move all backups created by a backup job to another repository, target the backup job to this
e
repository and continue the backup chain.

at
1. In the Home view, inside the Backups category, select Disk.

lic
2. In the main panel, expand the T1-CPH-ESX-APP-7D job.

up
4. While holding down the CTRL key on the keyboard, select the CPH-APP02 virtual machine.
5. While holding down the CTRL key on the keyboard, select the CPH-WEB01 virtual machine.
D
6. While holding down the CTRL key on the keyboard, select the CPH-WEB02 virtual machine.
Note: A total of four virtual machines are now selected: CPH-APP01, CPH-APP02, CPH-WEB01 and
ot
CPH-WEB02.
N
7. On the Backup ribbon, click the Move backup button.

8. In the newly opened Move Backup to Another Job window, verify the T1-CPH-ESX-TAG-7D backup
o
job is selected in the Destination backup job section.

D
9. Click the Show backups blue link.

10. Review the backup and size information and click the OK button.
11. In the newly opened Move Backup window, wait until the Status changes from In progress to
Success.

12. In the Move Backup window, click the Close button.
e
ut
Congratulations!
ib
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 7: Building replication capabilities

e
the end.
ut
ib
Lab 7.1: Prepare Veeam infrastructure for virtual machine replication
tr
Lab 7.2: Working with replication jobs
is
Lab 7.3: Working with CDP policies
D
or
e
at
lic
up
D
ot
N
o
D
Lab 7.1: Prepare Veeam infrastructure for virtual machine replication

As the backup administrator of Acoustic Intelligence Solutions, you have been tasked with deploying
additional Veeam components required for replicating virtual machines to the disaster recovery (DR) site.
e
ut
- Deploy the required components to replicate VMs to the DR site
ib
Task 1: Deploy a dedicated backup repository to store replica metadata
A backup repository is required for storing replica metadata. The backup repository must be deployed in
tr
the source site, as close to the source host as possible. When you perform incremental replication, the
is
source Veeam Data Mover communicates with the Veeam Data Mover Service on the backup repository to
obtain replica metadata and quickly detect changed blocks of data between two replica states.
D
In the newly opened Veeam Backup & Replication 12 window, click the Connect button.
or
e
On the Backup Repository ribbon, click the Add Repository button.
at
5. Select Microsoft Windows.
lic
In the newly opened New Backup Repository window, enter:

a. Name: Replica metadata
up
b. Description: Backup repository exclusively used for replica metadata

6. Click the Next > button on the Name step.
D
Important: We will create a backup repository that is located in the target site. This backup
repository will be used to store metadata for VM replicas - checksums of read data blocks required
ot
to streamline incremental sessions of the replication job. During replication jobs, Veeam Backup &
Replication frequently reads and writes small portions of metadata from/to the backup repository.
N
7. Verify the Repository Server drop-down menu defaulted to KOL-VEEAM-VBR.vmce-mgmt.lab.

o
8. Click the Populate button.

D
9. Select the E:\ drive.

11. Modify the Path to folder to: E:\Replica metadata .
12. On the Repository step, click the Next > button.
e
ut
Task 2: Deploy a dedicated VMware backup proxy on the DR site
ib
For every replication job, Veeam Backup & Replication requires three Veeam Data Movers: - Veeam Data
Mover hosted on the backup repository that is storing replica metadata (deployed in the previous task) -
tr
Source Veeam Data Mover hosted on the source backup proxy (this has already been deployed and used
is
for producing backups) - Target Veeam Data Mover hosted on the target backup proxy (this will be
deployed now)
D
or
3. In the newly opened Add Backup Proxy window, select VMware backup proxy.
4. In the newly opened New VMware Proxy window, click the Add New… button.
e

at

lic
a. DNS name: kol-veeam-pxy01.vmce-mgmt.lab

b. Description: Backup proxy located in Kolding connected to the stretched
up
backup network
D

ot

On the Review step, click the Apply button.
N
11.
o
13. Back in the New VMware Proxy window, click the Next > button.
D
14. On the Traffic Rules step, click the Apply button.

Lab 7.2: Working with replication jobs

As the backup administrator of Acoustic Intelligence Solutions, you need to create replica jobs to protect
the virtual Linux workloads from the VMware vSphere and Microsoft Hyper-V environments. The
requirements are:
e
- Linux virtual machines (Hyper-V and vSphere) must have the lowest possible RTO.
ut
- Linux virtual machines (Hyper-V and vSphere) must be available on the DR site in case of a disaster within
seconds.
ib
- Linux virtual machines (Hyper-V and vSphere) must be retained for 14 days in the DR site.
tr
is
- List the configuration options available within a replication
- Create a replication job
D
Task 1: Create a Microsoft Hyper-V replication job or
Replication is a technology that helps you protect mission-critical VMware virtual machines. When you
replicate a VM, Veeam Backup & Replication creates an exact copy of the VM in the native VMware
vSphere or Hyper-V format on the target host. Veeam Backup & Replication maintains this copy in sync with
e
the source VM. Replication provides minimum recovery time objective (RTO) in case a disaster strikes
because VM replicas are in a ready-to-start state.
at
lic
2. On the Home ribbon, click the Replication Job button.

3. Select Microsoft Hyper-V….
up
4. In the newly opened New Replication Job window, enter:

a. Name: T2-KOL-HV-APP-14R
D
b. Description: Replica: Tier 2, Kolding, Hyper-V, Application servers, 14

restore points
ot

N

7. In the newly opened Add Objects window, expand the cph-hv01.vmce-mgmt.lab host.
o
8. Select the CPH-GIT01 virtual machine.

D
Note: If no CPH-GIT01 virtual machine can be found, the most likely cause is you accidentally
launched a new replica job for VMware vSphere instead of Microsoft Hyper-V.
9. Hold the SHIFT key on the keyboard while selecting the CPH-SYSLOG01 virtual machine.
Important: A total of two virtual machines are now selected: CPH-GIT01 and CPH-SYSLOG01.
11. Back in the New Replication Job window, click the Sources… button.
12. In the newly opened Source Repositories window, verify the From production storage (actual VM
e
state) option is selected.
ut
Note: A backup job was already created for these two virtual machines. Since the production
ib
storage is used as the source, another snapshot will be triggered to the VMs when the replica job
runs.
tr
13. In the Source Repository window, click the Cancel button.
is
14. Back in the New Replication Job window, on the Virtual Machines step, click the Next > button.
15. In the Host or cluster: section, click the Choose… button.
D
16. In the newly opened Select Host window, select the cph-hv01.vmce-mgmt.lab host.
or
Important: The replica VM will be created in the same host where the production VM is deployed
because the lab infrastructure only has one Hyper-V host. In a real environment you might want to
use a different server.
e
In the Select Host window, click the OK button.

at
17.
18. Back in the New Replication Job window, on the Destination step, click the Next > button.
lic
19. Click the Repository for replica metadata drop-down list.

20. Select Replica metadata.
up
21. In the Retention policy section, change the default 7 restore points to 14 restore points.
D
23. On the Data Transfer step, keep the default settings and click the Next > button.
On the Guest Processing step, keep the default settings and click the Next > button.
ot
24.

N

o

D
Task 2: Create a VMware vSphere replication job

1. On the Home ribbon, click the Replication Job button.
e
ut
3. In the newly opened New Replication Job window, enter:
a. Name: T2-KOL-ESX-APP-14R
ib
b. Description: Replica: Tier 2, Kolding, ESXi, Application servers, 14
tr
restore points
4. Tick the Network remapping (for DR sites with different virtual networks) checkbox.
is
D
7. In the newly opened Add Objects window, expand the kol-vc01.vmce-mgmt.lab vCenter server.
or
e

at
11. While holding the CTRL key on the keyboard, select the CPH-APP02, CPH-WEB01 and CPH-WEB02
virtual machines.
lic
Important: A total of four virtual machines are now selected: CPH-APP01, CPH-APP02, CPH-WEB01
up
and CPH-WEB02.
D
13. Back in the New Replication Job window, click the Sources… button.
14. In the newly opened Source Repositories window, select the From backup files (latest VM state
ot
available in backups) radio button.

15. In the Backup repositories section, tick the T1/T2-CPH/KOL-VEEAM-SOBR01 repository checkbox.
N
16. In the Source Repository window, click the OK button.

o
17. Back in the New Replication Job window, on the Virtual Machines step, click the Next > button.
In the Host or cluster: section, click the Choose… button.
D
18.
19. In the newly opened Select Host window, expand the kol-vc01.vmce-mgmt.lab vCenter server.
20. Expand the Kolding data center.
21. Expand the DR cluster.
22. Select the kol-esx01.vmce-mgmt.lab host.

23. In the Select Host window, click the OK button.
24. Back in the New Replication Job window, on the Destination step, click the Next > button.
25. On the Network step click the Add… button.
e
ut
Note: If you do not see the Network step, verify that you ticked the Network remapping (for DR
sites with different virtual networks) checkbox on the Name step.
ib
26. In the newly opened Network mapping window, in the Source network section, click the Browse…
button.
tr
27. In the newly opened Select Network window, expand the kol-vc.vmce-mgmt.lab vCenter server.
is
28. Expand the cph-esx01.vmce-mgmt.lab host.
D
29. Select the CPH-PROD network.
30. In the Select Network window, click the OK button.
or
31. Back in the Network mapping window, in the Target network section, click the Browse… button.
32. In the newly opened Select Network window, expand the kol-esx01.vmce-mgmt.lab host.
e
33. Select the KOL-RECOVERY network.

at

Back in the Network mapping window, click the OK button.
lic
35.
36. Back in the New Replication Job window, on the Network step, click the Next > button.
up
37. Click the Repository for replica metadata drop-down list.

38. Select Replica metadata.
D
39. In the Retention policy section, change the default 7 restore points to 14 restore points.
ot
41. On the Data Transfer step, keep the default settings and click the Next > button.
N

o
D
Lab 7.3: Working with CDP policies

As the backup administrator of Acoustic Intelligence Solutions, you need to use Continuous Data
Protection (CDP) policies to protect PostgreSQL databases with the minimum possible RPO.
e
ut
- Deploy the required components and configure CDP policies
ib
Task 1: Deploy the I/O filter on the vSphere clusters
To be able to protect VMs with CDP, you must install the I/O filter on each cluster where the VMs that you
tr
plan to protect reside and where replicas will reside.
is
1. In the bottom left corner of the window, navigate to the Inventory view.
In the Inventory view, select kol-vc01.vmce-mgmt.lab vCenter.
D
2.
3. On the Server ribbon, click the Manage I/O Filters button. or

4. In the newly opened VeeamCDP Filter Management window, click the Select All button.
e
6. In the newly opened Veeam Backup & Replication window, click the Yes button to install the I/O
filters on the vSphere clusters.
at

lic

up
Task 2: Deploy a dedicated VMware CDP proxy on the Production site

D
A VMware CDP proxy is a component that operates as a data mover and transfers data between the
source and target hosts. Veeam recommends you to configure at least two VMware CDP proxies: one
ot
(source proxy) in the production site and one (target proxy) in the disaster recovery site.
N

On the Backup Proxy ribbon, click the Add Proxy button.
o
3.
In the newly opened Add Backup Proxy window, select VMware CDP Proxy.
D
4.
5. In the newly opened New VMware CDP Proxy window, click the Choose server drop-down list.
8. On the Cache step, keep the default settings and click the Next > button.
9. On the Traffic Rules step, keep the default settings and click the Next > button.
e
ut
Task 3: Deploy a dedicated VMware CDP proxy on the DR site
ib
tr
2. In the newly opened Add Backup Proxy window, select VMware CDP Proxy.
is
3. In the newly opened New VMware CDP Proxy window, click the Choose server drop-down list.
4. Select kol-veeam-pxy01.vmce-mgmt.lab.
D
On the Cache step, keep the default settings and click the Next > button.
6.
or
7. On the Traffic Rules step, keep the default settings and click the Next > button.
e
On the Apply step, click the Next > button when it is available.
at
9.

lic
up
Task 4: Create a CDP Policy to protect PostgreSQL database

Continuous data protection (CDP) is a technology that helps you protect mission-critical VMware virtual
machines when data loss for seconds or minutes is unacceptable. CDP also provides minimum recovery
D
time objective (RTO) in case a disaster strikes because CDP replicas are in a ready-to-start state.
To protect VMs with CDP, you must configure a CDP policy. The CDP policy defines which VMs to protect,
ot
where to store replicas, how often create short-term and long-term restore points, and so on. One CDP
policy can process one or multiple VMs.
N
On the Home ribbon, click the CDP Policy button.
o
2.
Select VMware vSphere….

D
3.
4. In the newly opened New CDP Policy window, enter:

a. Name: T2-KOL-ESX-PGSQL-15S
b. Description: CDP Policy: Tier 2, Kolding, ESXi, PosgreSQL database, 15
seconds RPO
5. Tick the Network remapping (for DR sites with different virtual networks) checkbox.
8. In the newly opened Add Objects window, expand the kol-vc01.vmce-mgmt.lab vCenter server.
e
ut
ib
11. Select the CPH-PGSQL01 virtual machine.
tr
13. Back in the New CDP Policy window, click the Next > button.
is
14. In the Host or cluster section, click the Choose… button.
D
15. In the newly opened Select Host window, expand the kol-vc01.vmce-mgmt.lab vCenter server.
16. Expand the Kolding data center.
or
17. Expand the DR cluster.
e

at
20. Back in the New CDP Policy window, click the Next > button.
lic
21. On the Network step click the Add… button.
Note: If you do not see the Network step, verify that you ticked the Network remapping (for DR
up
sites with different virtual networks) checkbox on the Name step.

22. In the newly opened Network mapping window, in the Source network section, click the Browse…
D
button.
23. In the newly opened Select Network window, expand the kol-vc.vmce-mgmt.lab vCenter server.
ot
24. Expand the cph-esx01.vmce-mgmt.lab host.

N

o
27. Back in the Network mapping window, in the Target network section, click the Browse… button.
D
28. In the newly opened Select Network window, expand the kol-esx01.vmce-mgmt.lab host.
29. Select the KOL-RECOVERY network.
31. Back in the Network mapping window, click the OK button.
32. Back in the New Replication Job window, on the Network step, click the Next > button.
33. In the Source proxy section, click the Choose… button.
34. In the newly opened Backup Proxy window, select the Use the selected backup proxy server only
radio button.
e
35. Tick the cph-veeam-pxy01.vmce-mgmt.lab proxy server checkbox.
ut
36. In the Backup Proxy window, click the OK button.
ib
37. Back in the New CDP Proxy window, in the Target proxy section, click the Choose… button.
38. In the newly opened Backup Proxy window, select the Use the selected backup proxy server only
tr
radio button.
is
39. Tick the kol-veeam-pxy01.vmce-mgmt.lab proxy server checkbox.
40. In the Backup Proxy window, click the OK button.
D
41. Back in the New CDP Proxy window, click the Test button. or
42. In the newly opened CDP Infrastructure Assessment window, review the CDP proxy requirements
and close the window.
43. Back in the New CDP Proxy window, click the Next > button.
e
44. Verify the Recovery Point Objective (RPO) section defaulted to 15 seconds.
at
45. In the Enable point-in-time recovery within: section, change the default 4 hours value to 2 hours.
lic

47. On the Guest Processing step, keep the default configurations and click the Next > button.
up
48. Verify the Enable the policy when I click Finish checkbox is ticked.
D
to monitor the policy, it will take approximately 10 minutes to do the initial sync.
ot
N
o
Congratulations!
D
Lab 8: Testing virtual machine backups

e
the end.
ut
ib
Lab 8.1: Create a SureBackup job to verify backups
tr
Lab 8.2: Create a SureBackup job to verify replicas
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 8.1: Create a SureBackup job to verify backups

Acoustic Intelligence Solutions is interested in extending the 3-2-1 rule with Veeam’s 3-2-1-1-0 rule. The 1
calls for a copy that is offline air-gapped or immutable, and the 0 calls for zero errors from backup and
recovery testing. AIS has already established immutability, but allowing for zero errors has not been
e
fullfilled yet. Currently, the biggest concern is the mail server, since many important e-mails are stored
ut
there, so AIS wants to verify its recoverability once per month.
ib
- List the required Veeam components to create a SureBackup job
tr
- List the characteristics of a virtual lab
- Describe the characteristic of an application group
is
- Describe the IP network masquerading feature
- Identify the steps to create a virtual lab
D
- List the steps to create a SureBackup job
or
Task 1: Create and advanced single-host virtual lab in the Production site
The virtual lab is an isolated virtual environment in which Veeam Backup & Replication verifies virtual
machines. In the virtual lab, Veeam Backup & Replication starts virtual machines from the application
e
group or linked job to perform the required tests.

at
lic
up
4. In the Backup Infrastructure view, in the SureBackup category, select Virtual Labs.
5. On the Virtual Lab ribbon, click the Add Virtual Lab button.
D

7. In the newly opened New Virtual Lab window, enter:
ot
a. Name: Virtual Lab Production site

N
b. Description: Virtual lab to be used in the Production site

o
9. In the Host section, click the Choose… button.

D
10. In the newly opened Select Server window, in the search field at the bottom of the window, enter
Object name: cph-esx01 .
11. Click the magnifying glass icon next to the search field.
12. Select the cph-esx01.vmce-mgmt.lab host.

14. Back in the New Virtual Lab window, on the Host step, click the Next > button.
15. On the Datastore step, keep the default settings and click the Next > button.
e
17. In the newly opened Network Settings window, click the Use the following IP address radio button.
ut
18. Enter:
ib
a. IP address: 192.168.11.100
b. Subnet mask: 255.255.255.0
tr
c. Default gateway: 192.168.11.1
is
d. Preferred DNS server: 192.168.11.4
D
e. Alternate DNS server: 192.168.21.4
19. In the Network Settings window, click the OK button.
or
20. Back in the New Virtual Lab window, on the Proxy step, click the Edit… button.
21. In the newly opened Proxy Appliance VM Settings window, click the Browse… button.
e
22. In the newly opened Select Production Network window, expand vSwitch0
at
23. Select the CPH-MGMT port group.

lic
24. In the Select Production Network window, click the Add button.
25. Back in the Proxy Appliance VM Settings window, click the OK button.
up
26. Back in the New Virtual Lab window, on the Proxy step, click the Next > button.
27. Select the Advanced single-host (manual configuration).
D
28. On the Networking step, click the Next > button.
Important: An error may appear: Unable to resolve default network settings. If this error is
ot
displayed, simply click the OK button. We will configure the network settings later.
N
29. If the CPH-MGMT network is visible, select it then click the Remove button. If it is not visible, skip this
step.
o

D
31. In the newly opened Network Mapping window, in the Production network section, click the
Browse… button.
32. In the newly opened Select Production Network window, in the search field at the bottom of the
window, enter Object name: CPH-PROD .
34. Select the CPH-PROD port group.
36. Back in the Network Mapping window, in the Isolated network: section, remove the default network
e
name and enter: CPH-VLAB_CPH-PROD .
ut
37. In the Network Mapping window, click the OK button.
ib
38. Back in the New Virtual Lab window, on the Isolated Networks step, click the Next > button.
tr
40. In the newly vNIC Connection Settings window, click the Choose isolated network to connect this
is
vNIC to: drop-down list.
41. Select the CPH-VLAB_CPH-PROD (CPH-PROD) network.
D
Important: An error may appear: Unable to resolve network settings. If this error is displayed,
or
simply click the OK button. We will configure the network settings in the very next step.
42. Back in the vNIC Connection Setings window, enter:
e
a. IP address: 192.168.12.1
at
b. Mask: 255.255.255.0
c. Masquerade network IP address: 192 . 168 . 112 .D
lic
43. Click the DNS Servers button.

44. In the newly opened DNS Servers window, click the Add… button.
up
45. In the newly opened Add DNS Server window, enter IP address: 192.168.12.4 .
46. In the Add DNS Server window, click the Add button.
D
47. Back in the DNS Servers window, click the Add… button.
ot
N
50. Back in the DNS Servers window, click the OK button.

Back in the vNIC Connection Settings window, click the OK button.
o
51.
52. Back in the New Virtual Lab window, on the Network Settings step, click the Next > button.
D
53. On the Static Mapping step, keep the default settings and click the Next > button.
54. On the Ready to Apply step, click the Apply button.
55. On the Applying Configuration step, click the Finish button when it is available.
Task 2: Create an application group

The application group creates the “surroundings” for the verified machine. The application group contains
one or several machines on which the verified machine is dependent. These machines run applications and
e
services that must be started to enable fully functional work of the verified machine. Typically, the
ut
application group contains at least a domain controller, DNS server and DHCP server.
1. In the Backup Infrastructure view, in the SureBackup category, select Application Groups.
ib
2. On the Application Group ribbon, click the Add Group button.
tr
3. In the newly opened New Application Group window, enter:
is
a. Name: Mail server application group
b. Description: Application group including the mail server and its
D
surroundings
or
6. Select From backups….
e
7. In the newly opened Select Backup window, expand the Job name column so the object names are
at
fully visible.
lic
8. Expand the T1-CPH-ESX-APP-7D backup job.

9. Select the CPH-DC01 object.
up
10. While holding the CTRL key on the keyboard, select the CPH-MAIL01 object.
Important: A total of two virtual machines are now selected: CPH-DC01 and CPH-MAIL01.
D
11. In the Select Backup window, click the Add button.

Back in the New Application Group window, select the CPH-DC01 virtual machine.
ot
12.

N
14. In the newly opened Verification Options window, tick the DNS Server and Domain Controller
(Authoritative Restore) roles.
o
15. Click the Startup Options tab.

D
16. In the Memory section, change the default 100 percent value with 50 percent.
17. In the Verification Options window, click the OK button.
18. Back in the New Application Group window, select the CPH-MAIL01 virtual machine.
20. In the newly opened Verification Options window, tick the Mail Server role.
21. Click the Startup Options tab.
22. In the Memory section, change the default 100 percent value with 50 percent.
23. In the Verification Options window, click the OK button.
e
24. Back in the New Application Group window, on the Machines step, click the Apply button.
ut
ib
tr
Task 3: Create a SureBackup job for automated testing of backups
is
SureBackup is the Veeam technology that tests machine backups and checks if you can recover data from
them. You can verify any restore point of a backed-up machine.
D
2. In the Home view, select the Jobs category.
or
3. In the main panel, select the T1-CPH-ESX-APP-7D backup job.
4. In the Job ribbon, click the Disable button.
e
at
Note: The Microsoft SQL Server database log backup configuration makes the T1-CPH-ESX-APP-7D
backup job to run continuously, which blocks the SureBackup job from starting.
lic
5. On the Home view, select the Jobs category.

6. In the Home ribbon, click the SureBackup Job button.
up
7. In the newly opened New SureBackup Job window, enter:

a. Name: T1-CPH-ESX-MAIL-TEST
D
b. Description: SureBackup: Automated recoverability testing for CPH-MAIL01

and CPH-DC01 VMs
ot

On the Virtual Lab step, keep the default settings and click the Next > button.
N
9.
10. Click the Application group drop-down list.

o
11. Select Mail server application group.

D
12. Verify the CPH-DC01 and CPH-MAIL01 virtual machines are displayed in the Application group
info section and click the Next > button.
13. On the Linked Jobs step, keep the default settings and click the Next > button.
14. Tick the Perform backup integrity check (read and verify each block against a checksum)
checkbox.
15. On the Settings step, click the Next > button.

17. Select the Monthly at this time radio button.
e
ut
ib
21. In the mail panel, select the T1-CPH-ESX-APP-7D backup job.
22. In the Job ribbon, click the Disable button.
tr
is
Note: Since the SureBackup job is running, the depending backup job can be re-enabled. Be aware
that future runs of the SureBackup job will be blocked by the backup job.
D
or
e
at
lic
up
D
ot
N
o
D
Lab 8.2: Create a SureBackup job to verify replicas

Acoustic Intelligence Solutions is replicating the Linux servers that compose the corporate web
applications to the DR site. Since these web applications are cloned from master templates, they only want
to verify the recoverability of one of these applications. This verification must be scheduled to be executed
e
monthly, and due to the simplicity of the services they do not need to verify the application at this stage.
ut
- List the required Veeam components to create a SureBackup job to verify replicas
ib
- List the characteristics of a virtual lab
- Describe the characteristic of an application group
tr
- Describe the IP network masquerading feature
is
- Identify the steps to create a virtual lab
- List the steps to create a SureBackup job to verify replicas
D
Task 1: Create an advanced single-host virtual lab in the DR site or
2. In the Backup Infrastructure view, in the SureBackup category, select Virtual Labs.
e
3. On the Virtual Lab ribbon, click the Add Virtual Lab button.
at

5. In the newly opened New Virtual Lab window, enter:
lic
a. Name: Virtual Lab DR site

b. Description: Virtual lab to be used in the Disaster Recovery site
up

D
8. In the newly opened Select Server window, in the search field at the bottom of the window, enter
Object name: kol-esx01 .
ot

N

o
12. Back in the New Virtual Lab window, on the Host step, click the Next > button.
D
15. In the newly opened Network Settings window, click the Use the following IP address radio button.
16. Enter:
a. IP address: 192.168.21.100
b. Subnet mask: 255.255.255.0
c. Default gateway: 192.168.21.1
e
d. Preferred DNS server: 192.168.21.4
ut
e. Alternate DNS server: 192.168.11.4
ib
17. In the Network Settings window, click the OK button.
18. Back in the New Virtual Lab window, on the Proxy step, click the Edit… button.
tr
19. In the newly opened Proxy Appliance VM Settings window, verify the Production network section
is
defaulted to the KOL-MGMT network.
In the Proxy Appliance VM Settings window, click the OK button.
D
20.
21. Back in the New Virtual Lab window, on the Proxy step, click the Next > button.
or
22. Select the Advanced single-host (manual configuration).
23. On the Networking step, click the Next > button.
e
Important: An error may appear: Unable to resolve default network settings. If this error is
at
displayed, simply click the OK button. We will configure the network settings later.
Click the Add… button.
lic
24.
25. In the newly opened Network Mapping window, in the Production network section, click the
Browse… button.
up
26. In the newly opened Select Production Network window, in the search field at the bottom of the
window, enter Object name: KOL-RECOVERY .
D
28. Select the KOL-RECOVERY port group.
ot
N
30. Back in the Network Mapping window, in the Isolated network: section, remove the default network
name and enter: KOL-VLAB_KOL-RECOVERY .
o
31. In the Network Mapping window, click the OK button.

D
32. Back in the New Virtual Lab window, on the Isolated Networks step, click the Next > button.
34. In the newly vNIC Connection Settings window, click the Choose isolated network to connect this
vNIC to: drop-down list.
35. Select the KOL-VLAB_KOL-RECOVERY (KOL-RECOVERY) network.
Important: An error may appear: Unable to resolve network settings. If this error is displayed,
simply click the OK button. We will configure the network settings in the very next step.
Back in the vNIC Connection Setings window, enter:
e
36.
ut
a. IP address: 192.168.22.1
b. Mask: 255.255.255.0
ib
c. Masquerade network IP address: 192 . 168 . 222 .D
Click the DNS Servers button.
tr
37.
38. In the newly opened DNS Servers window, click the Add… button.
is
D
41. Back in the DNS Servers window, click the Add… button.
or
e
44. Back in the DNS Servers window, click the OK button.

at
45. Back in the vNIC Connection Settings window, click the OK button.
lic
46. Back in the New Virtual Lab window, on the Network Settings step, click the Next > button.
47. On the Static Mapping step, keep the default settings and click the Next > button.
up
48. On the Ready to Apply step, click the Apply button.

49. On the Applying Configuration step, click the Finish button when it is available.
D
ot
Task 2: Create an application group to test replica virtual machines

1. In the Backup Infrastructure view, in the SureBackup category, select Application Groups.
N
2. On the Application Group ribbon, click the Add Group button.

3. In the newly opened New Application Group window, enter:
o
a. Name: Web server application group

D
b. Description: Application group including a web server and an application

server
6. Select From replicas….

7. In the newly opened Select Replica window, expand the Job name column so the object names are
fully visible.
8. Expand the T2-KOL-ESX-APP-14R replica job.
e
9. Select the CPH-APP01 object.
ut
10. While holding the CTRL key on the keyboard, select the CPH-WEB01 object.
ib
Important: A total of two virtual machines are now selected: CPH-APP01 and CPH-WEB01.
In the Select Replica window, click the Add button.
tr
11.
12. Back in the New Application Group window, on the Machines step, click the Apply button.
is
Note: Since no roles were specified for the virtual machines in the application group, the application
D
test will be skipped.
or
e
Task 3: Create a SureBackup job for automated testing of replicas
at
To guarantee recoverability of your data, Veeam Backup & Replication complements the SureBackup
recovery verification technology with SureReplica.
lic
SureReplica is in many respects similar to the SureBackup recovery verification. It lets you validate your
disaster recovery environment without impacting the production infrastructure. You can automatically
up
verify every created restore point of every VM replica and ensure that they are functioning as expected.
D
2. On the Home ribbon, click the SureBackup Job button.

3. In the newly opened New SureBackup Job window, enter:
ot
a. Name: T2-KOL-ESX-APP-14R-TEST
b. Description: SureReplica: Automated recoverability testing of T2-KOL-ESX-
N
APP-14R replica job VMs

o
5. On the Virtual Lab step, in the Virtual lab section, verify the Virtual Lab DR site is defaulted and
D
click the Next > button.

6. On the Application Group step, click the Application group drop-down list.
7. Select Web server application group.
9. On the Linked Jobs step, keep the default settings and click the Next > button.
10. On the Settings step, keep the default settings and click the Next > button.
12. Select the Monthly at this time radio button.
e
ut
ib
tr
is
D
Congratulations!
or
e
at
lic
up
D
ot
N
o
D
Lab 9: Working with Veeam Backup Enterprise

Manager
e
ut
ib
tr
Lab 9.1: Connect backup server with Veeam Backup Enterprise Manager
is
Lab 9.2: Decrypt an imported encrypted file
Lab 9.2: Create a restore operator user
D
or
e
at
lic
up
D
ot
N
o
D
Lab 9.1: Connect the backup server with Veeam Backup Enterprise
Manager
The CIO of Acoustic Intelligence Solutions is looking for a management tool for the backup solution that
allows monitoring and basic management without the need to install new software on the administrator
e
machine. If possible, this tool should be web-based. It should also have a single pane of glass to monitor and
manage multiple backup servers, in case additional backup servers are deployed in the future.
ut
ib
- Describe the features of Veeam Backup Enterprise Manager
tr
- Identify the steps to add a Veeam backup server to the Veeam Backup Enterprise Manager inventory
is
Task 1: Connect the backup server with Veeam Backup Enterprise Manager
Veeam Backup Enterprise Manager is a management and reporting component that allows you to manage
D
multiple Veeam Backup & Replication installations from a single web console. Veeam Backup Enterprise
Manager helps you optimize performance in remote office/branch office (ROBO) and large-scale
or
deployments and maintain a view of your entire virtual environment.
1. From the Windows taskbar, launch the Microsoft Edge browser.
e
2. Navigate to the URL: https://kol-veeam-vbr.vmce-mgmt.lab:9443 .
at
3. In the newly opened Sign in to access this site window, enter:

a. Username: rasmus-user@vmce-mgmt.lab
lic
Click the OK button.
up
4.
5. Click the Configuration button in the top right corner.

Click the Add… button.
D
6.
7. In the newly opened Backup Server Settings window, enter:

ot
a. DNS name: kol-veeam-vbr.vmce-mgmt.lab

b. Description: Production Veeam Backup server
N
c. Username: svcVeeam@vmce-mgmt.lab
o
d. Password: Pa%%w0rd
D
8. In the Backup Server Settings window, click the OK button.

9. Verify the Build column has been populated.
Lab 9.2: Decrypt an imported encrypted file

The CIO of Acoustic Intelligence Solutions is worried about losing access to encrypted data. Although the
password and hint are securely stored in the job settings, it may be impossible to recover encrypted data if
both the backup server and the current backup administrator are replaced. With that in mind, the backup
e
architects recommend implementing a complementary solution that generates an additional pair of keys,
ut
allowing the decryption of backup files even if the user key is forgotten or lost.
ib
- Enable password loss protection for backup encryption
tr
- Identify the steps to decrypt an imported encrypted backup file without the encryption password
is
Task 1: Decrypt an imported encrypted file
D
Veeam Backup & Replication offers you a way to restore encrypted data even if you do not have a
password. For this purpose, Veeam Backup & Replication employs an additional pair of keys in the
encryption process: Enterprise Manager keys.
or
1. In the Microsoft Edge browser, in the Veeam Backup Enterprise Manager window, navigate to the
Settings view.
e
2. Click the Key Management tab.

at
3. Verify the Enable encryption password loss protection checkbox is ticked.

lic
4. Click the Import button.

5. In the newly opened Import Keyset window, click the Browse text link.
up
6. In the newly opened Open window, in the File name section, enter: C:\Install\Veeam Certified
Engineer.pem .
D
8. Back in the Import Keyset window, click the Import button.

ot
9. Back in the Veeam Backup Enterprise Manager window, tick the Key retention period checkbox.
10. Tick the Auto-generate new keys checkbox.
N
11. Click the Save button.

o
12. Minimize the Microsoft Edge browser window.

D
Important: DO NOT sign out from Veeam Backup Enterprise Manager yet.
15. On the Home ribbon, click the Import Backup button.
16. In the newly opened Import Backup window, in the Computer section, verify the KOL-VEEAM-
VBR.vmce-mgmt.lab server is selected.
17. In the Backup File section, enter: C:\Install\VMWithOldHWVersion_EEE3D2018-12-
14T093448.vbk .
e
18. Click the OK button.
ut
19. In the newly opened Backup Import window, wait until the log shows Job finished with warning at.
ib
Note: An expected warning message appears, warning that imported backup file is encrypted and
the encryption password is needed to be able to use it.
tr
20. Click the Close button.
is
21. In the Home view, in the Backups category, select Disk (Encrypted).
22. In the main panel, select the Install backup.
D
23. On the Encrypted Backup ribbon, click the Specify Password button. or
24. In the newly opened Specify Password window, click the I have lost the password text link.
25. In the newly opened Encryption Key Restore window, click the Copy to clipboard button.
e
26. From the Windows taskbar, switch to the Microsoft Edge window.
at
Note: If the Sign in screen is displayed, enter Username: Rasmus-user Password: Pa%%w0rd
and then click the Sign in button.
lic
27. Click the Password Recovery button.

In the newly opened Password Recovery window, right-click on the Paste challenge request
up
28.
provided by the restore wizard section.
29. Select Paste.
D
30. Click the Next button.

On the Verify Request step, click the Next button.
ot
31.
32. On the Response step, right-click on the selected text.

N
33. Select Copy.

o
35. From the Windows taskbar, switch to the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and
D
Replication console window.

36. Back in the Encryption Key Restore window, on the Request step, click the Next > button.
37. Right-click on the Insert response message section.
38. Select Paste.
39. On the Response step, click the Next > button.

41. In the newly opened Backup Decryption window, wait until the status changes to Success and click
the Close window.
e
ut
ib
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 9.3: Create a restore operator user

The application managers of Acoustic Intelligence Solutions recently communicated a new requirement.
They want the ability to make their own restores, or for someone from the help desk to make them under a
manager requisition. The CIO, on the other hand, is worried about data confidentiality being compromised if
e
many people have restore access to the solution console. Emails and contacts from the email servers,
ut
registries from the databases and files from the file shares could be accessed by someone with the Veeam
restore operator role. The backup architects have proposed a more granular set of access controls, where
restore operators and application managers can have restore permissions but only for certain type of files
ib
and in specific virtual machines.
tr
is
- Describe the importance of granular permissions
- Identify the steps to add a restore user with limited scope
D
Task 1: Create a restore operator user
or
Veeam Backup Enterprise Manager implements security based on user roles by limiting access to features
and data. This empowers the administrator to delegate permissions in a granular way, on an as-needed
basis. For example, the administrator can grant permissions to another user to recover files without being
e
able to see the content of the files.

at
1. In the Microsoft Edge browser, in the Veeam Backup Enterprise Manager window, navigate to the
Roles view.
lic

up
3. In the newly opened Add Role window, enter Account: VMCE-MGMT\Ricardo-user .

4. Click the Role drop-down list.
D
5. Select Restore Operator.

6. Tick the Files and folders checkbox.
ot
7. Tick the Allow restore of files with these extensions only: checkbox.
8. In the Allow restore of files with these extensions only:, enter docx.
N
9. In the Add Role window, click the OK button.

o
10. In the top right corner, click the VMCE-MGMT\Rasmus-user text link.
D
11. Select Sign Out.

12. Enter Username: Ricardo-user@vmce-mgmt.lab .
13. Enter Password: Pa%%w0rd .
14. Click the Sign in button.
15. Click the Files tab.

16. In the Search backups of: section, enter: CPH-DC01.
17. Select the CPH-DC01 machine.
18. Click the Mount text link.
e
19. Wait until the Loading… message dissapears and in the Type a file name to search for: section,
ut
enter: *.pptx .
ib
20. Click the Search button. (It is expected that zero results are found.)
21. Enter Type a file name to search for: *.docx .
tr
22. Click the Search button.
is
23. Select the quote.docx file.
Click the Download button. (if the download button is not visible, click the Other Actions button
D
24.
first.) or
25. In the newly opened Download window, click the Yes button to confirm download of this object.
26. Confirm the download starts automatically and finishes successfully. (The Edge browser should
open a small Downloads window on the top right corner showing the quote.docx file.)
e
27. Click the down arrow in the Microsoft Edge toolbar to close the Downloads window.
at
28. Click the VMCE-MGMT\Ricardo-user text link in the top right corner.
lic
29. Select Sign Out.

30. Close the Microsoft Edge window.
up
Congratulations!
D

ot
N
o
D
Lab 10: Application items recovery

e
ut
Lab 10.1: Perform a Microsoft SQL Server instant database recovery
ib
Lab 10.2: Restore an Active Directory user
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 10.1: Perform a Microsoft SQL Server instant database recovery

In an accidental incident, one of the Microsoft SQL Server databases at Acoustic Intelligence Solutions
had a massive drop of tables. Now, all that data is missing from the database. Due to the large amount of
data stored, database administrators are concerned that the recovery time is beyond the committed SLA.
e
They want to know if there is a way to recover the database to a temporary location (even one with lower
ut
performance). This would allow them to continue operations as quickly as possible, then move operations
from the temporary location to the production database after business hours.
ib
tr
- List the benefits of instant database recovery
- Identify the steps to perform an instant database recovery
is
Task 1: Drop a table from a Microsoft SQL Server database
D
For this scenario, we are simulating a major data loss from a database. or
1. From the desktop, open the Scripts folder.
2. In the Scripts folder, right-click the MSSQL Database Test script.
e
3. Select Run with PowerShell.
at
4. In the newly opened Windows PowerShell window, wait until a simulated customers data table is
displayed and press any key on the keyboard.
lic
5. In the Scripts folder, right-click the MSSQL Database Break script.

up
7. In the newly opened Windows PowerShell window, wait until the Customers table dropped! text is
D

ot
10. In the newly opened Windows PowerShell window, wait until it shows Invoke-Sqlcmd : Invalid
object name ‘Customers’ error message is displayed and press any key on the keyboard.
N
o
Task 2: Restore the database with instant database recovery

D
Instant recovery combines capabilities of the data restore and data publishing features. If you want
databases to be online as quickly as possible, you can use the instant recovery option and restore
databases in the background.
3. In the Home view, in the Backups category, select Disk.

4. In the main panel, expand the T1-CPH-ESX-APP-7D backup job.
5. Select the CPH-MSSQL01 virtual machine.
6. On the Backup ribbon, click the Application Items button.
e
7. Select Microsoft SQL Server….
ut
8. In the newly opened Microsoft SQL Server Database Restore window, on the Restore Point step,
ib
keep the default settings to restore from the latest avilable backup and click the Next > button.
9. On the Reason step, click the Next > button.
tr
10. On the Summary step, click the Browse button.
is
11. In the newly opened CPH-MSSQL01… - Veeam Explorer for Microsoft SQL Server window, in the
left panel, select the Customers database.
D
12. On the Database ribbon, click the Instant Recovery button. or
13. Select Instant recovery of the point-in-time state to CPH-MSSQL01.vmce.lab\MSSQLDB….
14. In the newly opened Instant Recovery Wizard window, select the Restore to a specific point in
time (requires transaction log backups) radio button.
e
15. Slide the indicator to 30 minutes before the time shown at the right. E.g. if the time shown at the right
at
is 3:37 PM, slide the indicator to 3:07 PM.

Click the Next > button.
lic
16.
17. Select the Manual radio button.

up
18. Click the Recover button.

19. In the newly opened Windows Security window, enter:
D
a. User name: Rasmus-user

ot

21. In the newly opened Veeam Explorer for Microsoft SQL Server click the OK button to accept the
N
deletion of the current database.

Back in the CPH-MSSQL01… - Veeam Explorer for Microsoft SQL Server window, in the Instant
o
22.
Recovery (1) category, select the Customers database.
D
23. Wait until the Ready for switchover text is displayed in the Action section.
24. From the Windows toolbar, switch to the Scripts folder.
27. In the newly opened Windows PowerShell window, wait until a simulated customers data table is
Task 3: Switchover the instant recovered database to production
e
The switchover option becomes available after all the database files are copied to the target server and all
ut
database files are synchronized. During switchover, the published mount is detached from the target SQL
Server instance and the copied database is attached to this instance. Note that if you have selected to
ib
restore to the original server, the restored database will replace the original database.
tr
1. From the Windows taskbar, switch to the CPH-MSSQL01… - Veeam Explorer for Microsoft SQL
Server window.
is
2. Verify the Customers database in the Instant Recovery (1) section is selected.
D
3. On the Instant Recovery ribbon, click the Switchover Now button.
4. Wait until the Instant Recovery (1) category is no longer displayed.
or
5. Close the CPH-MSSQL01… - Veeam Explorer for Microsoft SQL Server window.
6. Close the Scripts folder.
e
at
lic
up
D
ot
N
o
D
Lab 10.2: Restore an Active Directory user

An intern at Acoustic Intelligence Solutions was deleting some users who left the company from the
directory, but unfortunately he ended up deleting several users who should not have been deleted. The
intern does not know exactly which users were incorrectly deleted, but he needs to quickly restore them to
e
avoid impacting user productivity. He wants to know if there is a way to compare the list of users from the
ut
production and the backed up domain controllers. That way, he can easily find out which users were
deleted and which ones have to be restored.
ib
tr
- List the benefits of instant database recovery
- Identify the steps to perform an instant database recovery
is
Task 1: Delete an Active Directory user
D
For this scenario, we are simulating a user deletion from the Active Directory. or
1. Minimize the Veeam Backup and Replication console window.
2. From the desktop, launch Active Directory shortcut.
e
3. In the newly opened Active Directory Users and Computers window, expand the vmce.lab domain.
at
4. Select the Testing organizational unit.

5. Select the Test User user.
lic
6. Click the Delete button. (The icon looks like a red X).
7. In the newly opened Active Directory Domain Services window, click the Yes button to confirm the
up
user deletion.
8. Back in the Active Directory Users and Computers window, DO NOT close this window.
D
ot
Task 2: Perform the restore using Veeam Explorer for Microsoft Active Directory
Veeam Explorer for Microsoft Active Directory allows you to restore and export Active Directory objects and
N
containers from backups created by Veeam Backup & Replication.

o

D
2. Select the CPH-DC01 virtual machine.
3. On the Backup ribbon, click the Application Items button.
4. Select Microsoft Active Directory….
5. In the newly opened Microsoft Active Directory Object Restore window, on the Restore Point step,
keep the default settings and click the Next > button.
6. On the Reason step, keep the default settings and click the Next > button.
On the Summary step, click the Browse button.
e
7.
ut
8. In the newly opened Veeam Explorer for Microsoft Active Directory window, if a Add Database
window opens, keep the default settings and click the Open button.
ib
9. On the Home ribbon, click the Compare with Production button.
tr
10. On the Home ribbon, click the Show Changed Objects Only button.
is
11. Expand the vmce.lab domain.
D
12. Expand Users and Computers.

or
14. On the main panel, select the Test User user.
15. On the Objects ribbon, click the Restore Objects button.

e
at
16. Select Restore objects to XXX-DC01.vmce.lab.

lic
Important: Select either CPH-DC01.vmce.lab or KOL-DC01.vmce.lab as offered in the user

interface.
up
17. Wait for the restore to complete.
18. In the newly opened Veeam Explorer for Microsoft Active Directory window, click the OK button.
D
19. Close the CPH-DC01… - Veeam Explorer for Microsoft Active Directory window.
Using the Windows taskbar, switch to the Active Directory Users and Computers window.
ot
20.

N
22. Click the Refresh button or press the F5 key on the keyboard.
o
23. Verify the Test User user appears.

D
24. Close the Active Directory Users and Computers window.
Congratulations!
e
ut
ib
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 11: Recovering a guest OS file

e
ut
Lab 11.1: Restore a guest operating system file
ib
Lab 11.2: Restore a guest operating system file with disk publishing
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 11.1: Restore a guest operating system file

All the files in a folder were wrongly removed from the guest OS on a critical Windows machine. As the
backup administrator you have to restore these files without restoring the entire virtual machine or
inecessary data.
e
ut
- Identify the steps to perform a file-level recovery
ib
Task 1: Delete contents of the Important Files folder
tr
For this scenario, we are simulating the deletion of some guest operating system files.
is
1. From the Windows taskbar, launch the File Explorer.
Navigate to: \\CPH-DC01.vmce.lab\Storage\Important Files\Project Matheson .
D
2.
3. Select the invoice.docx file. or

4. Press the CTRL + A key combination on the keyboard to select all files.
5. Click the Home menu.
e
6. Click the Delete button.
at
7. In the newly opened Delete Multiple Items window, click the Yes button to permanently delete
these 3 items.
lic
8. DO NOT close the File Explorer window yet.

up
Task 2: Perform the restore using the File Level Restore Wizard for Microsoft Windows
With guest operating system file restore, you can recover individual guest operating system files and folders
D
from backups, replicas, storage snapshots, Nutanix AHV snapshots, etc. When restoring files or folders, you
do not need to extract the virtual machine image to a staging location or start the virtual machine prior to
ot
restore. You can restore files and folders directly from a regular image-level backup or replica to the
necessary point in time.
N
In the newly opened Veeam Backup & Replication 12 window, click the Connect button.
o
2.
In the Home view, in the Backups category, select Disk.

D
3.
4. In the main panel, expand the T1-CPH-ESX-APP-7D backup job.

5. Select the CPH-DC01 virtual machine.
6. On the Backup ribbon, click the Guest Files button.
7. Select Microsoft Windows….
8. In the newly opened File Level Restore window, on the Restore Point step, keep the default settings
and click the Next > button.
10. On the Summary step, click the Browse button.
e
11. Wait for the CPH-DC01… - Backup Browser window to open.
ut
12. Expand the C:\ drive.
ib
13. Expand the Storage folder.
14. Expand the Important Files folder.
tr
15. Select the Project Matheson folder.
is
16. Select the quote.docx file.
Press the CTRL + A key combination on the keyboard to select all files.
D
17.
18. On the File ribbon, click the Restore button. or

19. Select Overwrite.
Note: If you do not want to overwrite the existing files with the restored ones select Keep instead.
e
20. In the newly opened Credentials window, click the Credentials drop-down list.
at
21. Select the svcVeeam@vmce-mgmt.lab credentials.

lic

23. In the Restoring files to CPH-DC01 window, click the Show Details button.
up
24. Wait until the Restore completed text is displayed.

25. In the Restoring files to CPH-DC01 window, click the Close button.
D
26. Close the CPH-DC01… - Backup Browser window.

27. From the Windows taskbar, switch to the File Explorer window.
ot
28. Verify the previously deleted files in the Project Matheson folder have been restored.
N
o
D
Lab 11.2: Restore a guest operating system file with disk publishing
Some virtual machines are composed by multiple virtual disks, making the file-level restores to take more
time than expected. As the backup administrator you decided to use the Veeam Backup & Replication disk
publishing feature to mount only the affected disk from the backup on a virtual machine, and manually
e
restore the deleted files from the mounted disk into the production virtual machine.
ut
ib
- Identify the steps to perform a file-level recovery with disk publishing
tr
Task 1: Delete contents of the Important Files folder
is
For this scenario, we are simulating the deletion of some guest operating system files.
1. On the File Explorer window, navigate to: \\CPH-DC01.vmce.lab\Storage\Important
D
Files\Project Bermudez .
2. Select the Top secrets for the exam.pptx file.
or
e

at
6. In the newly opened Delete Multiple Items window, click the Yes button to permanently delete
these 3 items.
lic
7. DO NOT close the File Explorer window yet.

up
Task 2: Perform the restore using disk publishing

D
Disk publishing allows you to save time by getting backup content of one or multiple disks instead of all
disks from a backup. This technology gives read-only access to data and helps if you want to analyze data
ot
of your backup. For example, look for specific documents or usage patterns, or perform antivirus scan of
backed-up data.
N
You can publish a disk from different types of backups. The disk can have a Microsoft Windows file system
or Linux, Unix or other file system.
o
D

2. On the Backup ribbon, click the Publish Disk button.
3. In the newly opened Publish Disk window, on the Restore Point step, keep the default settings and
4. Click the Select All button.

6. Click the Target server drop-down list.
7. Select the cph-veeam-gip01.vmce.lab virtual machine.
e
On the Reason step, keep the default settings and click the Next > button.
ut
9.
ib
11. In the newly opened Restore Session window, wait until the Disks are mounted to cph-veeam-
gip01.vmce.lab… text is displayed.
tr
Note: Observe the path in which the disk is now mounted.
is
D
13. From the Windows taskbar, right click the File Explorer and open a new File Explorer window.
14. Navigate to \\CPH-VEEAM-GIP01.vmce.lab\c$ .
or
15. In the newly opened Windows Security window, enter:
a. Username: svcVeeam
e
at

lic
17. Back in the File Explorer window, double click the VeeamFLR folder.
18. Double click the CPH-DC01_##### folder (##### characters are randomly generated
up
alphanumeric characters).
19. Double click the Volume 1 folder.

D
20. Double click the Storage folder.

21. Double click the Important Files folder.
ot
22. Double click the Project Bermudez folder.

N
23. Select the Top secrets for the exam.pptx file.

o
25. Right click on one of the selected files and select Copy.
D
26. From the Windows taskbar, switch to the CPH-DC01’s Project Bermudez folder.
27. Right click on the main area and select Paste
28. Close both File Explorer windows.
29. Back in the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and Replication console window, in
the Home view, select Instant Recovery (1).
30. In the main panel, select the CPH-DC01 disk.
30. On the Instant Recovery ribbon, click the Stop Publishing button.
31. In the newly opened Veeam Backup & Replication window, click the Yes button to stop publishing
the disk.
32. In the newly opened Unmounting… window, wait until the Finalizing restore text is displayed and
e
click the OK button.
ut
ib
Congratulations!
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 12: Full virtual machines recovery

e
ut
Lab 12.1: Recover a virtual machine with Instant Recovery
ib
Lab 12.2: Recover a virtual machine with full VM recovery and quick rollback
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 12.1: Recover a virtual machine with Instant Recovery

At Acoustic Intelligence Solutions is not frequent that backup administrators need to restore a virtual
machine, but some machines were accidentally deleted and they are concerned about the time it could
take to do a full restore of large virtual machines. As a backup administrator, you have to restore services
e
from failing virtual machines within a few minutes, no matter the size of its volumes.
ut
ib
- List the advantages of the Instant Recovery feature
- Identify the steps to execute an Instant Recovery
tr
- Describe the available options to finish the Instant Recovery
is
Task 1: Delete a virtual machine
D
For the scenario, we are simulating a virtual machine accidental deletion.
or
3. From the bottom left corner of the screen, navigate to the Inventory view.
e
4. In the Inventory view, in the Virtual Infrastructure category, select the kol-vc01.vmce-mgmt.lab
at
vCenter Server.
5. In the main panel verify the CPH-APP01 virtual machine is displayed.
lic
6. Minimize the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and Replication console window.

up
8. In the Scripts folder, right-click the Delete CPH-APP01 VM script.

D
10. In the newly opened Administrator: Windows PowerShell window, wait until the Virtual Machine
CPH-APP01 was successfully deleted. text is displayed and press any key on the keyboard.
ot
N
12. Press the F5 key on the keyboard to refresh the Inventory view.
o
13. In the main panel, verify the CPH-APP01 virtual machine is no longer displayed.
D
Note: DO NOT confuse the CPH-APP01 virtual machine with the CPH-APP01_replica virtual
machine.
Task 2: Perform an Instant Recovery on a virtual machine

With Instant Recovery, you can immediately recover different workloads (VMs, EC2 instances, physical
servers and so on) as virtual machines. Instant Recovery can be helpful, for example, if you want to migrate
e
your infrastructure from one environment to another, or you want to recover your infrastructure in a matter
ut
of minutes but with limited performance.
1. From the bottom left corner of the screen, navigate to the Home view.
ib
tr
3. In the main panel, expand the T1-CPH-ESX-TAG-7D backup job.
is
5. On the Backup ribbon, click the Instant Recovery button.
D
6. Select VMware vSphere…. or
7. In the newly opened Instant Recovery to VMware vSphere window, on the Machines step, keep the
default settings and click the Next > button.
8. On the Restore Mode step, keep the default settings to restore the virtual machine to its original
e
location and click the Next > button.

at
lic
10. On the Summary step, keep the default settings to power on and connect the restored virtual
machine to the network and click the Finish button.
In the newly opened Restore Session window, wait until the Waiting for user to start migration text
up
11.
is displayed.
D
13. In the Home view, select Instant Recovery (1).

In the main panel, verify the CPH-APP01 virtual machine shows Mounted in the Status column.
ot
14.
N
Task 3: Migrate a virtual machine to production

o
After a virtual machine has been successfully recovered with Instant Recovery, you must finalize the
process by either migrating the recovered virtual machine to the production storage or stopping publishing
D
the recovered virtual machine.

1. In the main panel, select the CPH-APP01 virtual machine.
2. On the Instant Recovery ribbon, click the Migrate to Production button.
3. In the newly opened Quick Migration window, on the Destination step, keep the default settings to
migrate the virtual machine to its original location and click the Next > button.
4. On the Transfer step, keep the default settings and click the Next > button.
5. On the Ready step, keep the default settings and click the Finish button.
6. In the newly opened Quick Migration Job window, wait until the Job Progress progress bar gets to
e
100% and click the OK button.
ut
7. In the Home view, verify the Instant Recovery category no longer appears.
ib
8. Navigate to the Inventory view.
9. Verify the kol-vc01.vmce-mgmt.lab vCenter server is still selected.
tr
10. Press the F5 key on the keyboard to refresh the Inventory view.
is
11. In the main panel, verify the CPH-APP01 virtual machine is displayed again.
D
or
e
at
lic
up
D
ot
N
o
D
Lab 12.2: Recover a virtual machine with full VM recovery and quick
rollback
After executing the upgrade process of an important application and rebboting a virtual machine, an AIS
intern is getting a critical error screen (BSoD). Unfortunately, the intern forgot to request a snapshot to the
e
VMware administrators, and now he wants to recover the service from the backup.
ut
As the problem seems to be at the operating system level and probably on a couple of files, the intern wants
to know if there is a way to restore only the changes made to the virtual machine since the last backup,
ib
since restoring the entire virtual machine could take too much time.
tr
- List the advantages of the quick rollback feature
is
- Identify the steps to execute a full VM recovery with quick rollback
- Describe the situations where full VM recovery with quick rollback is suitable
D
Task 1: Recover a virtual machine with full VM recovery and quick rollback
or
When you restore a full virtual machine or virtual machine hard disk to the original location, you can
instruct Veeam Backup & Replication to perform quick rollback — incremental data restore. Instead of
restoring an entire virtual machine or virtual machine disk from a backup file, Veeam Backup & Replication
e
will recover only those data blocks that are necessary to revert the virtual machine or virtual machine disk
at
to an earlier point in time. Quick rollback significantly reduces the recovery time and has little impact on
the production environment.
lic

2. In the Home view, in the Backups category, select Capacity Tier.
up
3. In the main panel, expand the T1-CPH-ESX-TAG-7D backup job.

4. Select the CPH-WEB02 virtual machine.
D
5. On the Backup ribbon, click the Entire VM button.

ot
6. In the newly opened Entire VM Recovery window, on the Virtual Machines step, keep the default
N
7. Tick the Quick rollback (restore changed blocks only) checkbox.

8. On the Restore Mode step, click the Next > button.
o
D
10. In the newly opened Veeam Backup & Replication window, click the OK button twice.
11. Back in the Entire VM Restore window, tick the Power on target VM after restoring checkbox.
13. In the newly opened Restoring VM window, wait until the Restore completed successfully text is
displayed.
16. Close the Scripts window.
e
ut
Congratulations!
ib
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 13: Restore a physical machine from an Agent

backup
e
The expected time to complete either lab is 40 minutes maximum.
ut
ib
Lab 13.1: Perform a bare metal recovery of a Windows physical machine from an Agent backup
tr
Lab 13.2: Perform an instant VM recovery of a Linux physical machine from an Agent backup
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 13.1: Perform a bare metal recovery of a Windows physical machine

from an Agent backup
After a particular incident, a physical Windows server from Acoustic Intelligence Solutions is having
e
hardware problems and needs to be replaced with a spare physical server. Infrastructure administrators
ut
asked if they have to deploy the operating system on the spare server before the restore process, or it is
possible to perform a bare metal restore of the entire computer.
ib
tr
- Identify the use of Veeam Recovery Media
- Describe the steps to perform a bare metal recovery of a Windows machine
is
Task 1: Prepare the resources for bare metal recovery
D
The recovery image is a “copy” of your OS with the limited functionality — it contains all data required to
run Microsoft Windows Recovery Environment (Windows RE) and provides an alternative way to boot your
or
computer. If the OS installed on the computer fails to start for some reason, you can boot the Windows RE
from the recovery image.
e
If you want to recover volumes or an entire computer protected with Veeam Agent, you can use the create
recovery token operation.
at
You can generate the recovery token on the Veeam Backup & Replication side. Then, on the computer side,
lic
with this recovery token get access to the backup and recover data that is stored in the backup.
up
D
4. In the main panel, expand the T1-CPH-PHY-WINDOWS-7D job.

5. Select the PHYSICAL-WIN.vmce.lab physical machine.
ot
6. On the Backup ribbon, click the Recovery Media button.

N
7. In the newly opened Create Recovery Media window, in the Recovery Media step, keep the default
settings to create an ISO image file and click the Next > button.
o
8. In the Specify local folder to create recovery media image in section, enter C:\Users\Rasmus-
user\Desktop\VeeamRecoveryMedia.iso .
D

10. On the Ready to Apply step, click the Next > button.
11. On the Progress step, wait until the Recovery media has been created text is displayed and click
the Finish button.
12. On the Backup ribbon, click the Create Recovery Token button.
13. Click the Copy to clipboard text link.
14. Click the Create button.
15. Minimize the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and Replication console window.
e
16. From the desktop, launch the Notepad application.
ut
17. In the newly opened Untitled - Notepad window, click the Edit drop-down list.
ib
18. Select Paste.
19. DO NOT close the Untitled - Notepad window.
tr
is
Task 2: Perform a bare metal recovery of a Windows physical machine
D
If the operating system on your computer fails to start, you can use Veeam Recovery Media to recover your
computer. Veeam Recovery Media will help you boot the computer in a limited mode. After booting, you can
or
use Veeam Agent for Microsoft Windows or standard Microsoft Windows tools to diagnose problems and
fix errors. You can also use a backup created with Veeam Agent for Microsoft Windows to restore the whole
e
system image of your computer or specific volumes on your computer.
at
2. In the Scripts folder, right-click the Shutdown PHYSICAL-WIN VM script.

lic

4. In the newly opened Windows PowerShell window, wait until the Virtual Machine PHYSICAL-WIN
up
was successfully shut down. text is displayed and press any key on the keyboard.
5. From the desktop, launch the BAREMETAL Windows application.
D
Note: This will open the VMware Remote Console application to a virtual machine with no
operating system installed.
ot
6. In the newly opened Connect to Server window, click the Connect button.
N
7. In the BAREMETAL-WIN - VMware Remote Console window, click the VMRC drop-down list.
8. Select Manage.
o
9. Select Virtual Machine Settings….

D
10. In the newly opened Virtual Machine Settings window, select the CD/DVD drive 1 device.
11. In the Device status section, tick the Connect at power on checkbox.
12. In the Connection section, select the Use ISO image file radio button.
13. In the Use ISO image file section, enter:
C:\Users\Rasmus-user\Desktop\VeeamRecoveryMedia.iso .
15. Back in the BAREMETAL-WIN - VMware Remote Console, click the play (green triangle) icon.
16. Wait until the Veeam Recovery Media menu is displayed and double click the Bare Metal
e
Recovery option.
ut
17. In the newly opened Volume Level Restore window, select the Network storage radio button.
ib
19. Select the Veeam backup repository radio button.
tr
is
21. In the Veeam backup server name or IP address: section, enter kol-veeam-vbr.vmce-mgmt.lab.
Select the Recovery token radio button.
D
22.
23. Organize the BAREMETAL-WIN - VMware Remote Console and Untitled - Notepad windows in a
or
way that you can see the recovery token from the Untitled - Notepad window while having the
BAREMETAL-WIN - VMware Remote Console window fully visible and active.
24. In the Token: section, type the token displayed in the Untitled - Notepad window.
e

at
26. If a Security Alert window is opened, click the Continue button.

lic
27. On the Backup step, keep the default settings and click the Next > button.
28. On the Restore Point step, keep the default settings and click the Next > button.
up
29. On the Restore Mode step, keep the default settings to restore the entire machine and click the
Next > button.
D
30. On the Summary step, click the Restore button.

31. Wait until the Restore process finished at… text is displayed and click the Finish button.
ot
32. In the newly opened Veeam Agent for Microsoft Windows window, click the Yes button to reboot
the computer.
N
33. Wait until the Windows operating system has completely booted and close the BAREMETAL-WIN -
VMware Remote Console window.
o
34. In the newly opened VMware Remote Console window, click Yes to disconnect the
D
VeeamRecoveryMedia.iso file from the CD/DVD drive.

35. Close the Untitled - Notepad window.
36. In the newly opened Notepad window, click the Don’t Save button to discard the document
changes.
Lab 13.2: Perform an instant VM recovery of a Linux physical machine

from an Agent backup
Infrastructure administrators are now worried because they do not have enough spare physical servers to
e
replace all the failing devices. Some of these servers are elegible to be virtualized, and they want to know if
ut
it is possible to restore the entire computer to a virtual machine. Understanding the criticity of these
services, as the backup administrator of AIS, you must perform an instant VM recovery of the Agent
ib
backups made to the physical servers.
tr
is
- Identify the use of instant VM recovery of Agent backups
- Describe the steps to perform an instant VM recovery of Agent backups
D
Task 1: Perform an instant VM recovery of an Agent backup or
With Instant VM Recovery, you can immediately recover different workloads (VMs, EC2 instances, physical
servers and so on) as virtual machines. Instant VM Recovery can be helpful, for example, if you want to
migrate your infrastructure from one environment to another, or you want to recover your infrastructure in
e
a matter of minutes but with limited performance.
at
1. From the Windows taskbar, switch to the Scripts window.

2. In the Scripts folder, right-click the Shutdown PHYSICAL-LIN VM script.
lic

In the newly opened Windows PowerShell window, wait until it shows the Virtual Machine
up
4.
PHYSICAL-LIN was successfully shut down. message and press any key on the keyboard.
D

6. In the main panel, expand the T1-CPH-PHY-LINUX-7D job.
ot
7. Select the PHYSICAL-LIN.vmce.lab machine.

N

o
10. In the newly opened Instant Recovery to VMware vSphere window, on the Machines step, keep the
D

11. In the Restored VM name section, replace the default PHYSICAL-LIN.vmce.lab name with
VM-LIN.vmce.lab .
13. In the newly opened Select Host window, expand the kol-vc01.vmce-mgmt.lab vCenter.

16. Select the cph-esx01.vmce-mgmt.lab host.
e
18. Back in the Instant Recovery to VMware vSphere window, in the Networks section, click the
ut
Choose… button.
ib
19. In the newly opened Select Network window, expand the cph-esx01.vmce-mgmt.lab host.
tr
is
22. Back in the Instant Recovery to VMware vSphere window, on the Destination step, click the Next >
button.
D
or
25. On the Summary step, keep the default settings to power on and connect the virtual machine to the
network and click the Finish button.
e
26. In the newly opened Restore Session window, wait until the Waiting for user to start migration text
at
is displayed and click the Close button.

lic

up
Task 2: Stop publishing the recovered virtual machine

After the VMs have been successfully recovered, you must finalize the process. For this, test the recovered
D
VMs and decide whether to migrate them to production environment or stop publishing.
Open the Main Menu by clicking it’s icon (≡) in the top left corner.
ot
1.
2. Select Console.
N
3. Select PuTTY.
4. In the newly opened PuTTY Configuration window, enter host name: PHYSICAL-LIN.vmce.lab
o
D
Note: Even by using VM-LIN.vmce.lab as the new virtual machine name, the fully qualified domain
name of this machine is still PHYSICAL-LIN.vmce.lab.
6. In the newly opened PuTTY Security Alert window, click the Accept button.
7. In the newly opened PuTTY window, enter login as: administrator .

9. Enter password (no input will be visible while typing): Pa%%w0rd .
11. Verify there is a successful login on the Linux operating system.
e
12. Enter command: exit .
ut
ib
14. In the main panel, select the VM-LIN.vmce.lab virtual machine.
tr
15. On the Instant Recovery ribbon, click the Stop Publishing button.
is
Note: Even though the machine is working correctly and could be migrated to production, to save
D
storage resources we will not perform the migration.
the virtual machine.
or
17. In the newly opened Unmounting… window, wait until the VM-LIN.vmce.lab has been unmounted
successfully text is displayed and click the OK button.
e
at
lic
Congratulations!
up

D
ot
N
o
D
Lab 14: Restore from a replica

e
ut
Lab 14.1: Disaster failover to a VMware vSphere replica and failback to production
ib
Lab 14.2: Working with replica failover plans
tr
Lab 14.3: Planned failover to a Microsoft Hyper-V replica
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 14.1: Disaster failover to a VMware vSphere replica and failback to

production
After a masive hardware issue on the Production site, Acoustic Intelligence Solutions infrastructure
e
administrators require to immediately restore the services on the DR site by powering on the replica virtual
ut
machines hosted there from the vSphere client. As the backup administrator of AIS, you advice them not to
proceed that way, because doing so will make returning the operation back to the Production site very
complicated. You should then use the Veeam backup console to failover, failback, and commit failback the
ib
affected virtual machines.
tr
is
- Identify the steps to perform a failover operation
- Identify the steps to perform a failback operation
D
- Identify the steps to perform a commit failback operation
or
Task 1: Perform a failover
Failover is a process when Veeam Backup & Replication switches processes from the source VM in the
production site to its VM replica in the disaster recovery site. During failover, Veeam Backup & Replication
e
recovers the VM replica to the required restore point and shifts all I/O processes from the source VM to its
at
replica. As a result, you have a fully functional VM within a couple of seconds, and your users can access
services and applications with minimum disruption.
lic

2. In the Scripts folder, right-click the Shutdown CPH-APP02 VM script.
up

D
CPH-APP02 was successfully shut down. text is displayed and press any key on the keyboard.
ot
Important: When performing a failover, Veeam Backup & Replication will not shut down any
production virtual machine as a part of the failover process. Leaving production VMs powered on
N
during failover will cause issues such as name/IP conflicts.

o
D
7. In the Home view, in the Replicas category, select Ready.

8. In the main panel, select CPH-APP02.
9. On the Replica ribbon, click the Failover Now button.
10. In the newly opened VMware Failover window, on the Virtual Machines step, keep the default

13. In the newly opened Restore Session, wait until the Failover completed successfully text is
e
displayed and click the Close button.
ut
Note: The active virtual machine is now the CPH-APP02_replica virtual machine on the DR site.
ib
tr
Task 2: Perform a failback and commit the failback
is
Failback is one of the ways to finalize failover. When you perform failback, you switch back to the
production VM from a VM replica, shift I/O processes from the disaster recovery site to the production site.
D
Veeam Backup & Replication also sends all change made to the VM replica while it was in the Failover state
to the production VM. or
Failback commit is one of the ways to finalize failback. When you commit failback, you confirm that the VM
to which you failed back (the production VM) and also changes sent to it during failback work as expected.
After the commit operation, Veeam Backup & Replication resumes replication activities for the production
e
VM.
at
1. In the Home view, in the Replicas category, select Active (1).

In the main panel, select CPH-APP02.
lic
2.
3. On the Replica ribbon, click the Failback to Production button.

up
4. In the newly opened Faiback window, on the Replica step, keep the default settings and click the
Next > button.
5. On the Destination step, keep the default settings to failback to the original VM and click the Next
D
> button.
6. On the Failback Mode step, keep the default settings to automatically failback to the production
ot
site and click the Next > button.

On the Summary step, tick the Power on target VM after restoring checkbox.
N
7.

o
9. In the newly opened Restore Session, wait until the Replica VM will be switch over to production
immediately text is displayed and click the Close button.
D
10. Wait until the Status column of the CPH-APP02 virtual machine in the main panel, changes from
Processing to Failback.
Note: The active virtual machine is now the CPH-APP02 virtual machine on the Production site.
11. On the Replica ribbon, click the Commit Failback button.
Note: You might need to select the CPH-APP02 virtual machine in the main panel again for the
Replica ribbon to be displayed.
e
ut
12. In the newly opened Veeam Backup and Replication window, click the Yes button to confirm the
commit failback operation.
ib
13. In the newly opened Restore Session, wait until the Failback commit operation stopped at… text is
displayed and click the close button.
tr
Note: The active virtual machine is still the CPH-APP02 virtual machine on the Production site, but it
is
does not have snapshots anymore.
D
or
e
at
lic
up
D
ot
N
o
D
Lab 14.2: Working with replica failover plans

Doing the failover process of several virtual machines after a major incident can take some time and it is
possible that services dependencies are not correctly observed. As the backup administrator of AIS you
decided to create a failover plan to simplify the failover process while ensuring the dependencies between
e
services.
ut
ib
- List the advantages of failover plans
- Identify the steps to create a failover plan
tr
- Describe the power on order for a multi-tier application
is
Task 1: Create a failover plan
D
A failover plan helps you perform failover for dependent VMs one by one, as a group. To do this
automatically, you can prepare a failover plan. or
In the failover plan, you define the order in which VMs must be processed and an interval of time for which
Veeam Backup & Replication must wait before starting the failover operation for the next VM in the list. The
failover plan helps ensure that some VMs, such as a DNS server, are already running at the time the
e
dependent VMs start.
at
1. In the Home view, on the Home ribbon, click the Failover plan button.
lic
3. In the newly opened New Failover Plan window, enter:

a. Name: Web server app 02
up
b. Description: Failover plan: CPH-APP02 starts first and CPH-WEB02 starts

after 60 seconds
D

Click the Add VM button.
ot
5.
6. Select From replicas…

N
7. In the newly opened Select Replica window, expand the Job name column so the object names are
fully visible.
o
8. Expand the T2-KOL-ESX-APP-14R replica job.

D

10. While holding the CTRL key on the keyboard, select the CPH-WEB02 virtual machine.
Important: A total of two virtual machines are now selected: CPH-APP02 and CPH-WEB02.
11. In the Select Replica window, click the Add button.
12. Back in the New Failover Plan window, on the Virtual Machines step, select the CPH-APP02 virtual
machine.
13. Click the Set Delay… button.
14. In the newly opened Boot Delay window, change the Set boot delay to: value from the default to 0
e
seconds.
ut
15. In the Boot Delay window, click the OK button.
16. Back in the New Failover Plan window, on the Virtual Machines step, click the Apply button.
ib
tr
is
Task 2: Perform a failover through the failover plan
D
In case the primary VM group goes offline, you can start the failover plan manually. When you start the
plan, you can choose to fail over to the latest state or select the point in time to which VM replicas must be
started. Veeam Backup & Replication will look for the closest restore points to this point in time and use
or
them to start VM replicas. The source VMs will not be powered off.
1. From the Windows taskbar, select the Scripts folder.
e
2. Right click the Shutdown CPH-APP02 VM.ps1 script.

at

lic
CPH-APP02 was successfully shut down. text is displayed and press any key on the keyboard.
Right click the Shutdown CPH-WEB02 VM.ps1 script.
up
5.

D
CPH-WEB02 was successfully shut down. text is displayed and press any key on the keyboard.
From the Windows taskbar, select the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and
ot
8.
N
9. In the Home view, in the Replicas category, select Failover Plans.

10. In the main panel, select the Web server app 02 failover plan.
o
11. On the Failover Plan ribbon, click the Start button.

D
12. In the newly opened Executing failover plan: Web server app 02 window, wait until the Job
finished at… text is displayed and click the Close button.
Task 3: Undo a failover through the failover plan

You can undo failover for all VMs added to the failover plan at once. When you undo failover, you switch
the workload back to source VMs and discard all changes that were made to VM replicas during failover. If
e
some of the VMs were already failed back, for example manually by the user, they are skipped from
ut
processing.
1. On the Failover Plan ribbon, click the Undo button.
ib
2. In the newly Veeam Backup and Replication window, click the Yes button to accept reseting the
tr
replica VMs to the latest state.
3. In the newly opened Executing undo failover plan: Web server app 02 window, wait until the Job
is
finished at… text is displayed and click the Close button.
D
Important: Virtual machines CPH-APP02 and CPH-WEB02 will not be automatically powered on
after undoing the failover.
or
e
at
lic
up
D
ot
N
o
D
Lab 14.3: Planned failover to a Microsoft Hyper-V replica

As the backup administrator of AIS you realized not all replica recoveries are done after an incident,
sometimes, the replica recovery has to be performed in anticipation to an incident, for example, before an
intrusive network maintenance operation. On these situations, is possible to take advantage of the planned
e
failover operation to eliminate the data loss that comes with the failover.
ut
ib
- List the advantages of planned failover over regular failover
- Identify the steps to perform a planned failover
tr
Task 1: Perform a replica planned failover
is
Planned failover is a process when you manually launch switching from a primary VM to its replica with
D
minimum interrupting in operation. Planned failover is helpful when you know that your primary VMs are
about to go offline and you need to proactively switch the workload from source VMs to their replicas. You
can use the planned failover, for example, if you plan to perform datacenter migration, maintenance or
or
software upgrade of the primary VMs. You can also perform planned failover if you have noticed some
signs of the approaching disaster.
e
As the procedure is designed to transfer the current workload to the replica, it does not suggest selecting a
restore point to switch.
at
1. In the Home view, in the Replica category, select Ready.

lic
2. In the main panel, select the CPH-GIT01 virtual machine.

3. On the Replica ribbon, click the Planned Failover button.
up
4. In the newly opened Hyper-V Planned Failover window, on the Virtual Machines step, keep the
D
ot
7. In the newly opened Restore Session window, wait until the Failover completed successfully text is
displayed and click the Close button.
N

o
Note: You should see two Performing incremental replication pass messages displayed in the log
D
tab. The first pass is made when the CPH-GIT01 VM is still powered on (Hot), and the second pass
when the CPH-GIT01 VM is powered off (Cold).
Task 2: Perform a permanent failover

Permanent failover is one of the ways to finalize failover. When you perform permanent failover, you
permanently switch from the source VM to its replica. As a result of permanent failover, the VM replica
e
stops acting as a replica and starts acting as the production VM.
ut
1. In the Home view, in the Replicas category, select Active (1).
ib
2. In the main panel, select the CPH-GIT01 virtual machine.
3. On the Replica ribbon, click the Permanent Failover button.
tr
4. In the newly Veeam Backup and Replication window, click the Yes button to proceed with the
is
permanent failover operation.
5. In the newly opened Restore Session window, wait until the Permanent failover completed at… text
D
is displayed and click the Close button.
or
Note: The active virtual machine is now the CPH-GIT01_replica virtual machine on the DR site. This
operation cannot be undone.
e
at
Congratulations!
lic

up
D
ot
N
o
D
Lab 15: Restore from a file share backup

Expected time to complete all labs is 30 minutes maximum
e
ut
Lab 15.1: Recover a file share folder from backup
ib
Lab 15.2: Recover an entire file share with instant file share recovery
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 15.1: Recover a file share folder from backup

Another incident occurred at Acoustic Intelligence Solutions, this time with the Windows SMB file share.
The folder containing all the files from a user was completely removed from the server and he cannnot
access his files anymore. As the backup administrator of AIS you need to quickly restore the missed folder
e
to allow the users resume their work.
ut
ib
- Identify the steps to perform file share folder recovery
tr
Task 1: Delete a folder from the file share
is
For the scenario, we are simulating the deletion of a file share folder.
1. From the Windows taskbar, launch the File Explorer.
D
2. Navigate to: \\nas.vmce.lab\storage\ .
Select the Project Haslund folder.
3.
or
e
In the newly opened Delete Folder window, click the Yes button to confirm permanently deleting the
at
6.
folder.
lic
7. Minimize the File Explorer window.

up
Task 2: Restore the deleted folder back to the file share

You can restore specific files and folders to the original or a new location. This option can be useful, for
D
example, if you need to get an older version of some files and folders from the backup.
ot
N

4. In the main panel, expand the T1-CPH-NAS-FILES-31D backup job.
o
5. Select the \\nas.vmce.lab\storage\ file share.

D
6. On the Backup ribbon, click the Files and Folders button.

7. In the newly opened \\nas.vmce.lab\storage\ - Backup Browser window, in the main panel, select
the Project Haslund folder.
8. On the File ribbon, click the Restore button.
9. Select Overwrite.
10. In the newly opened Restoring files to \\nas.vmce.lab\storage\ window, click the Show Details
button.
11. Wait until the Restore completed successfully text is displayed.
e
ut
13. Close the \\nas.vmce.lab\storage\ - Backup Browser window.
ib
15. Verify the previously deleted Project Haslund folder has been restored.
tr
is
D
or
e
at
lic
up
D
ot
N
o
D
Lab 15.2: Recover an entire file share with instant file share recovery
At Acoustic Intelligence Solutions, managers are worried about the possibility of lossing the entire file
share with thousands of files, because restoring all that data could take several hours, making the users
unable to do their work. As the backup administrator of AIS you should be able to restore the entire file
e
share very fast, so users have access to their files again and can continue with their work.
ut
ib
- Describe the instant file share feature
- Identify the steps to perform an entire file share recovery with instant file share recovery
tr
Task 1: Restore the file share access with instant file share restore
is
The instant file share recovery feature works in 2 modes depending on the type of the file share: - For NFS
D
file shares, you can use this feature to publish a point-in-time file share state to enable users to instantly
access all protected files in the read-only mode. - For SMB file shares, you can use this feature to publish a
point-in-time file share state to enable users to add, update, remove files in the mounted file share. The
or
updated file share may be then migrated to the production server.
e
Replication window.
at
2. In the main panel, verify the \\nas.vmce.lab\storage\ file share is selected.

lic
4. In the newly opened Instant File Share Recovery window, on the File Shares step, keep the default
up
5. On the Mount Servers step, keep the default settings to automatically select a mount server and
D
6. Click the Set Owner… button.

7. In the newly opened Specify Account window, in the Account section, enter: svcVeeam@vmce-
ot
mgmt.lab .
8. In the Specify Account window, click the OK button.
N
9. Back in the Instant File Share Recovery window, click the Permissions… button.
o
10. In the newly opened Access Permissions window, select the Allow the following accounts or
groups only radio button.
D
11. Click the Add button.

12. In the newly opened Specify Account or Group window, in the Account or group section, enter:
Rasmus-user@vmce-mgmt.lab .
13. In the Specify Account or Group window, click the OK button.
14. Back in the Access Permissions window, click the OK button.

15. Back in the Instant File Share Recovery window, click the Next > button.
e
18. In the newly opened Restore Session window, wait until the File share \\KOL-VEEAM-VBR\storage
ut
has been published successfully text is displayed.
ib
Note: It uses the Veeam backup server as the mount server by default.
Click the Close button.
tr
19.
is
21. Navigate to: \\KOL-VEEAM-VBR\storage .
D
22. Verify the users’ project folders are available and can be opened.
23. Close the File Explorer window.
or
e
25. In the main panel, select the \\nas.vmce.lab\storage\ file share.

at
26. On the Backup ribbon, click the Stop Publishing button.

lic
Note: In a production environment, if changes to the folders or files were possible, the migrate to
production option should be selected.
up
the file share.
In the newly opened Unmounting… window, wait until the File share \\KOL-VEEAM-VBR\storage
D
28.
has been unpublished successfully text is displayed and click the Close button.
Close the kol-veeam-vbr.vmce-mgmt.lab - Veeam Backup and Replication console window.
ot
29.
N
Congratulations!
o

D

VBRCMRv12_1___Lab_Guide-u (1)

Uploaded by

Copyright:

Available Formats

VBRCMRv12_1___Lab_Guide-u (1)

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

VBRCMRv12_1___Lab_Guide-u (1)

Uploaded by

Copyright:

Available Formats

e

© 2024 Veeam Software. Confidential information. All rights reserved.

Lab 6.2: Create a Scale-out Backup Repository (SOBR) ....................................................................................................... 47

Lab 6.4: Migrate virtual machine backups to another job ................................................................................................... 51

Lab 7.2: Working with replication jobs ................................................................................................................................ 56

Lab 8.1: Create a SureBackup job to verify backups ............................................................................................................ 65

Lab 9: Working with Veeam Backup Enterprise Manager ................................................................................76

Lab 9.3: Create a restore operator user ............................................................................................................................... 81

Lab 11: Recovering a guest OS file ...................................................................................................................90

Lab 1: Secure Veeam backup server

Lab 1.1: Secure the Veeam backup server

2. In the newly opened window, in the Server section, enter: kol-veeam-vbr.vmce-mgmt.lab .

3. Click the Connect button.

6. On the Home ribbon, select Security & Compliance.

management domain not to the vmce.lab production domain.

10. In the Edit Note window, click the OK button.

5. Tick the Enable multi-factor authentication (MFA) checkbox.

7. Click the Edit… button.

9. In the Edit User window, click the OK button.

24. In the newly opened Warning window, click the OK button.

Task 3: Configure configuration backup

to the following repository: checkbox.

5. To add a new encryption password, click the Add… button.

6. In the newly opened Password window, enter:

7. From the Windows taskbar, launch the Microsoft Edge browser.

12. Back in the Options window, click the OK button.

You have completed this lab.

Lab 2: Protect virtual machines

2. Click the Connect button.

3. On the Server ribbon, click the Add Server button.

4. In the newly opened Add Server window, select VMware vSphere.

a. DNS name: kol-vc01.vmce-mgmt.lab

b. Description: VMware vCenter Server located in DR site

8. On the Credentials step, click the Add… button.

9. In the newly opened Credentials window, enter:

10. In the Credentials window, click the OK button.

Important: An expected alert about an untrusted certificate will appear. In a production

b. Description: Microsoft Hyper-V host placed in the Production site

4. On the Name step, click the Next > button.

5. Select the Microsoft Hyper-V server (standalone) radio button.

7. Click the Credentials drop-down list.

9. On the Credentials step, click the Next > button.

Note: This process will take a few minutes. Please, be patient.

Note: The cph-hv01.vmce-mgmt.lab host is now added as a managed server as well.

Lab 2.2: Protect virtual workloads

Task 1: Prepare secure authentication for Windows-based workloads

1. In the bottom left corner, select the Backup Infrastructure view.

3. In the newly opened Add Server window, select Microsoft Windows.

a. DNS name or IP address: cph-veeam-gip01.vmce.lab

b. Description: Veeam guest interaction proxy placed in the production site

6. Click the Credentials drop-down list.

Select Virtual machine.

4. Select Microsoft Hyper-V….

5. In the newly opened New Backup Job window, enter:

b. Description: Backup: Tier 1, Copenhagen, Hyper-V, Application servers, 7

6. On the Name step, click the Next > button.

9. Select the CPH-GIT01 virtual machine.

24. Tick the Run the job automatically checkbox.

25. On the Schedule step, click the Apply button.

27. On the Summary step, click the Finish button.