{"id":51087,"date":"2021-10-19T09:00:08","date_gmt":"2021-10-19T07:00:08","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=51087"},"modified":"2022-03-29T17:37:49","modified_gmt":"2022-03-29T15:37:49","slug":"veeam-v11-upgrade-the-hardened-repository","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/veeam-v11-upgrade-the-hardened-repository\/","title":{"rendered":"Veeam v11: upgrade the Hardened Repository"},"content":{"rendered":"

\"veeam-upgrade-hardened-repository-01\"<\/p>\n

With the introduction of the Immutability feature in Veeam Backup & Replication v11<\/a>, a Hardened Repository<\/a> requires a specific procedure to be upgraded.<\/p>\n

A normal upgrade of this type of repository cannot be performed in the \"classic\" way due to the restrictions applied<\/strong> during the configuration procedure of the repository itself.<\/p>\n

 <\/p>\n

How to upgrade a Hardened Repository<\/h2>\n

When a new version or patch is released by Veeam, when you try applying the update to the repository, it will fail.<\/p>\n

This is an expected behavior since Veeam doesn't have the credentials<\/strong> stored anywhere to access the Hardened Repository<\/a>. If the repository was configured by following the best practices, the Single-use credentials for hardened repository<\/strong> option was used to connect Veeam to the repository.<\/p>\n

\"veeam-upgrade-hardened-repository-02\"<\/p>\n

In addition, the account used by Veeam to connect the repository doesn't have any permission<\/strong> to do operations on the Linux machine since it is not a member of the sudo<\/em> group<\/strong>.<\/p>\n

To apply the update, the first step is to enable SSH service<\/strong> and add the used service account back to the sudo<\/em> group<\/strong>.<\/p>\n

Enable the remote access to your repository<\/strong> and login with the administrative account set during the installation of your Linux repository.<\/p>\n

\"veeam-upgrade-hardened-repository-03\"<\/p>\n

Enable the SSH service<\/strong> and\u00a0add the Veeam service account<\/strong> to the group sudo<\/em> with the command:<\/p>\n

# sudo systemctl start ssh.service
\n<\/span># sudo usermod -a -G sudo locveeam<\/span><\/p>\n

\"veeam-upgrade-hardened-repository-04\"<\/p>\n

Open the Veeam console and select from the menu the Settings > Upgrade<\/strong> option. During the upgrade of other Veeam components to apply version 11a<\/a>, the Hardened Repository was skipped.<\/p>\n

\"veeam-upgrade-hardened-repository-05\"<\/p>\n

Select the Hardened Repository to upgrade and click Apply<\/strong>.<\/p>\n

\"veeam-upgrade-hardened-repository-06\"<\/p>\n

Click Yes<\/strong> to continue.<\/p>\n

\"veeam-upgrade-hardened-repository-07\"<\/p>\n

Click Set User<\/strong> button and select Single-use credentials for hardened repository<\/strong> option.<\/p>\n

\"veeam-upgrade-hardened-repository-08\"<\/p>\n

Enter the Username<\/strong> of service account used and the Password<\/strong> then click OK<\/strong>.<\/p>\n

\"veeam-upgrade-hardened-repository-09\"<\/p>\n

Click OK<\/strong> to confirm.<\/p>\n

\"veeam-upgrade-hardened-repository-10\"<\/p>\n

This time the repository has been upgraded successfully. Click Finish<\/strong> to exit the wizard.<\/p>\n

\"veeam-upgrade-hardened-repository-11\"<\/p>\n

From the repository console, remove the service account<\/strong> used in Veeam from the sudo<\/em> group and disable the SSH service<\/strong>. Remember also to disconnect any remote system (iLO, iDRAC, etc.) from your repository.<\/p>\n

# sudo deluser locveeam sudo
\n# sudo systemctl stop ssh.service
\n<\/span><\/p>\n

\"veeam-upgrade-hardened-repository-12\"<\/p>\n

The Hardened Repository is now upgraded to the current installed version<\/strong> of your Veeam Server.<\/p>\n

Veeam Backup & Replication v11a is available to download as 30-day free trial<\/a>.<\/p>\n

\"signature\"<\/p>\n","protected":false},"excerpt":{"rendered":"

With the introduction of the Immutability feature in Veeam Backup & Replication v11, a Hardened Repository requires a specific procedure to be upgraded. A normal upgrade of this type of repository cannot be performed in the \"classic\" way due to the restrictions applied during the configuration procedure of the repository itself.<\/p>\n","protected":false},"author":3,"featured_media":51088,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[2138,933],"tags":[579,2330,2400],"class_list":["post-51087","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backup-en","category-veeam-en","tag-backup-en","tag-hardened-repository","tag-upgarde","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/51087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=51087"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/51087\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/51088"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=51087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=51087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=51087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}