{"id":60058,"date":"2024-03-13T09:00:41","date_gmt":"2024-03-13T08:00:41","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=60058"},"modified":"2024-04-19T13:50:11","modified_gmt":"2024-04-19T11:50:11","slug":"configure-veeam-data-domain-retention-lock","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/configure-veeam-data-domain-retention-lock\/","title":{"rendered":"Configure Veeam Data Domain Retention Lock"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter wp-image-61048 size-full\" title=\"configure-veeam-data-domain-retention-lock-01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-01.jpg\" alt=\"configure-veeam-data-domain-retention-lock-01\" width=\"602\" height=\"202\" \/><\/p>\n<p>Latest <a href=\"https:\/\/nolabnoparty.com\/en\/upgrade-veeam-backup-replication-to-v12-1\/\">Veeam v12.1<\/a> supports the <a href=\"https:\/\/nolabnoparty.com\/en\/emc-data-domain-as-veeam-backup-repository\/\">Data Domain<\/a> Retention Lock feature to <strong>manage immutable backups<\/strong>\u00a0directly from Veeam Backup &amp; Replication.<\/p>\n<p>Although the Data Domain is <strong>not always a good choice<\/strong> to store primary backups (random read is not so good), it is a widely used device and fully compatible with Veeam 12.1.<!--more--><\/p>\n<p>To leverage the Data Domain Retention Lock feature using <a href=\"https:\/\/nolabnoparty.com\/en\/veeam-v12-1-whats-new-pt-1\/\">Veeam Backup &amp; Replication 12.1<\/a>, you need to <strong>meet the following prerequisites<\/strong>:<\/p>\n<ul>\n<li><strong>DDBoost<\/strong> protocol enabled.<\/li>\n<li>Data Domain Retention Lock in <strong>Compliance mode<\/strong>.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>Configure the Data Domain Retention Lock<\/h2>\n<p>Before configuring the Veeam Backup Job using the <a href=\"https:\/\/www.dell.com\/en-us\/dt\/data-protection\/powerprotect-backup-dd-appliances\/powerprotect-dd-backup-appliances.htm\" target=\"_blank\" rel=\"noopener\">Dell Data Domain<\/a> as target repository, it is required to configure the Data Domain <strong>Retention Lock in Compliance mode<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h4>Enable the Compliance mode<\/h4>\n<p>Using your favorite browser, enter the address <em><span style=\"color: #0000ff;\">https:\/\/&lt;IP_data_domain&gt;<\/span><\/em> to access the <strong>DD System Manager<\/strong>. Enter the <em>sysadmin<\/em> credentials and click <strong>Log in<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61050 size-full\" title=\"configure-veeam-data-domain-retention-lock-02\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-02.jpg\" alt=\"configure-veeam-data-domain-retention-lock-02\" width=\"496\" height=\"525\" \/><\/p>\n<p>Go to <strong>Administration &gt; Compliance<\/strong> and check the compliance status. By default the <strong>Retention Lock Compliance <\/strong>status is <strong>Disabled<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61052 size-large\" title=\"configure-veeam-data-domain-retention-lock-03\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-03-600x318.jpg\" alt=\"configure-veeam-data-domain-retention-lock-03\" width=\"600\" height=\"318\" \/><\/p>\n<p>To enable the Retention Lock Compliance you need to <strong>run some commands from the Data Domain CLI<\/strong>. Using a tool like PuTTY, SSH the Data Domain using the <em>security <\/em>user credentials. Run the following command:<\/p>\n<p><span style=\"color: #0000ff;\"># authorization policy set security-officer enabled<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61054 size-full\" title=\"configure-veeam-data-domain-retention-lock-04\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-04.jpg\" alt=\"configure-veeam-data-domain-retention-lock-04\" width=\"600\" height=\"181\" \/><\/p>\n<p>Logoff from the console and login once again using the <em>sysadmin <\/em>account.\u00a0Run the following command and specify the <em>security <\/em>user credentials when requested:<\/p>\n<p><span style=\"color: #0000ff;\"># system retention-lock compliance configure<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61056 size-full\" title=\"configure-veeam-data-domain-retention-lock-05\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-05.jpg\" alt=\"configure-veeam-data-domain-retention-lock-05\" width=\"600\" height=\"350\" \/><\/p>\n<p>This article has been written for\u00a0<a href=\"https:\/\/www.starwindsoftware.com\/blog\/\" target=\"_blank\" rel=\"noopener noreferrer\">StarWind blog<\/a>\u00a0and can be found in\u00a0<a href=\"https:\/\/www.starwindsoftware.com\/blog\/configure-veeam-data-domain-retention-lock\" target=\"_blank\" rel=\"noopener\">this page<\/a>. It covers the full procedure to\u00a0<strong>configure Veeam Data Domain Retention Lock<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h2>Test the backup immutability<\/h2>\n<p>Once the backup has been processed, it's time to test if the backup is immutable.<\/p>\n<p>Go to <strong>Backups &gt;Disk<\/strong> section and right click a VM in the processed backup. Select <strong>Delete from disk<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61058 size-large\" title=\"configure-veeam-data-domain-retention-lock-06\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-06-600x411.jpg\" alt=\"configure-veeam-data-domain-retention-lock-06\" width=\"600\" height=\"411\" \/><\/p>\n<p>Click <strong>Yes<\/strong> to confirm.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61060 size-full\" title=\"configure-veeam-data-domain-retention-lock-07\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-07.jpg\" alt=\"configure-veeam-data-domain-retention-lock-07\" width=\"300\" height=\"123\" \/><\/p>\n<p>As expected, the backup cannot be deleted since <strong>it's immutable<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-61062 size-full\" title=\"configure-veeam-data-domain-retention-lock-08\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2024\/03\/configure-veeam-data-domain-retention-lock-08.jpg\" alt=\"configure-veeam-data-domain-retention-lock-08\" width=\"589\" height=\"469\" \/><\/p>\n<p>Finally is possible to <strong>leverage the Data Domain Retention Lock<\/strong> when this storage device is used as Veeam Backup Repository protecting backups against <strong>deletion, overwriting and changes<\/strong>.<\/p>\n<p>Read the\u00a0<a href=\"https:\/\/www.starwindsoftware.com\/blog\/configure-veeam-data-domain-retention-lock\" target=\"_blank\" rel=\"noopener\">full article<\/a>\u00a0on StarWind blog.<\/p>\n<p><img decoding=\"async\" title=\"signature\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"signature\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Latest Veeam v12.1 supports the Data Domain Retention Lock feature to manage immutable backups\u00a0directly from Veeam Backup &amp; Replication. Although the Data Domain is not always a good choice to store primary backups (random read is not so good), it is a widely used device and fully compatible with Veeam 12.1.<\/p>\n","protected":false},"author":3,"featured_media":61048,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"yes","rop_publish_now_accounts":{"facebook_2879994398731222_234218296615646":"","twitter_113568041_113568041":"","linkedin_93tdZWzMZc_93tdZWzMZc":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[2138,933],"tags":[2818,1959,2297,2790],"class_list":["post-60058","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backup-en","category-veeam-en","tag-compliance-mode-en","tag-data-domain","tag-immutability-en","tag-retention-lock","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/60058","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=60058"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/60058\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/61048"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=60058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=60058"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=60058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}