Configure Veeam Data Domain Retention Lock


Latest Veeam v12.1 supports the Data Domain Retention Lock feature to manage immutable backups directly from Veeam Backup & Replication.

Although the Data Domain is not always a good choice to store primary backups (random read is not so good), it is a widely used device and fully compatible with Veeam 12.1.

To leverage the Data Domain Retention Lock feature using Veeam Backup & Replication 12.1, you need to meet the following prerequisites:

  • DDBoost protocol enabled.
  • Data Domain Retention Lock in Compliance mode.


Configure the Data Domain Retention Lock

Before configuring the Veeam Backup Job using the Dell Data Domain as target repository, it is required to configure the Data Domain Retention Lock in Compliance mode.


Enable the Compliance mode

Using your favorite browser, enter the address https://<IP_data_domain> to access the DD System Manager. Enter the sysadmin credentials and click Log in.


Go to Administration > Compliance and check the compliance status. By default the Retention Lock Compliance status is Disabled.


To enable the Retention Lock Compliance you need to run some commands from the Data Domain CLI. Using a tool like PuTTY, SSH the Data Domain using the security user credentials. Run the following command:

# authorization policy set security-officier enabled


Logoff from the console and login once again using the sysadmin account. Run the following command and specify the security user credentials when requested:

# system retention-lock compliance configure


This article has been written for StarWind blog and can be found in this page. It covers the full procedure to configure Veeam Data Domain Retention Lock.


Test the backup immutability

Once the backup has been processed, it's time to test if the backup is immutable.

Go to Backups >Disk section and right click a VM in the processed backup. Select Delete from disk.


Click Yes to confirm.


As expected, the backup cannot be deleted since it's immutable.


Finally is possible to leverage the Data Domain Retention Lock when this storage device is used as Veeam Backup Repository protecting backups against deletion, overwriting and changes.

Read the full article on StarWind blog.


Leave a Reply