Back up your data with Wasabi
Data backup is a crucial step in information system management, enabling the protection of data against potential loss or corruption. Veeam is a backup and recovery solution that offers great flexibility and compatibility with various platforms and environments.
In this context, Veeam also allows data to be backed up to a Wasabi bucket (also called a “bucket”). This combination provides an efficient and cost-effective way to back up company data to reliable and secure cloud storage.
Below, we will explore the steps required to implement this backup solution.
Backups to a Wasabi Bucket via Veeam
Veeam Service Account
First of all, it is essential to create a dedicated Wasabi service account. This account helps secure the data and better manage access permissions to Wasabi resources.
Service accounts are specifically designed to be used by third-party applications or services and allow permissions to be limited to only what is necessary for the intended use, thereby reducing security risks.
To do this, access the “Users” section from the Wasabi console, then the “Users” tab (directly accessible via the following link) as shown in the figure below:
Simply click on the “Create user” button to begin creating the service account.
In the first section, you must define the service account name, for example “Veeam_Service_Account”.
Since the service account is intended to be used only with Veeam, it is also important to check the “Programmatic (create API key)” box before moving to the next section.
In this section, it is not necessary to define a group for the service account; you can proceed directly to the next step.
This part is dedicated to applying access policies to the service account. For the service account, only the “AmazonS3FullAccess” policy is required. Simply enter it in the available field and select it before proceeding to the next section.
The final section allows you to review all the service account information before confirming its creation by clicking “Create User”.
A final window will then display the service account’s access key and secret key.
You can click on the “Show” link to display the secret key or on the “Download CSV” button to download both the access key and its associated secret key.
This key pair must be stored securely, for example in a password manager, as it will be used later (the secret access key will no longer be visible).
Creating a Bucket
A bucket is an object storage container that allows you to store, retrieve, and manage data reliably and securely. Creating a bucket tailored to the company’s needs enables efficient data management and ensures the resilience and durability of stored data. In addition, a properly configured Wasabi bucket offers advanced features such as versioning and access and permission management.
To begin creating a Wasabi bucket, access the Wasabi console, then the “Buckets” section (directly accessible via the following link) as shown in the figure below.
Then click on the “Create Bucket” button to start creating a bucket.
The first information to provide is the bucket name, which must be unique, for example “-backup-veeam”, and the region to select, namely “Paris eu-west-2 (s3.eu-west-2.wasabisys.com)”.
Next, you must enable bucket versioning and object lock by checking the appropriate boxes as illustrated above, in order to make future backups immutable. You may also enable event logging to track all actions on the bucket by checking the “Bucket Logging” box.
The final section allows you to review all bucket information before confirming its creation by clicking “Create Bucket”.
It may take several dozen minutes before the bucket can be used within the Veeam solution, as described below.
Backups to a Wasabi Bucket via Veeam
Once the service account and the Wasabi bucket have been created, you can configure a new Veeam backup job to automate the backup of information system data and systems to the Wasabi Cloud.
Before creating this job, it is essential to create a Wasabi backup repository from the Veeam administration console.
Creating a Backup Repository
A backup repository linked to the Wasabi bucket must be created from the Veeam tool.
From the “Backup Infrastructure” interface in Veeam, select “Backup Repositories” and click “Add Repository”.
Then select the repository type “Object Storage”.
The cloud repository type to select is “Wasabi Cloud Storage”.
A new window opens, marking the start of the Wasabi backup repository configuration.
After defining the name and description, click “Next” to proceed.
The region to select must match the previously created bucket (see above), namely “eu-west-2”.
You must then add the Wasabi service account credentials. Click “Add…”, then enter the previously retrieved access and secret keys (see above), as shown in the figure below.
If a proxy is required from the backed-up machines, it can be configured by clicking “Choose”.
Once these steps are completed, click “Next” to continue configuring the backup repository.
This step consists of configuring the Wasabi bucket. Click the “Browse” buttons to select the previously created Wasabi bucket and a folder within the bucket (create one if necessary).
Finally, select the following 3 options:
Limit object storage consumption to: 50 TB (adjust depending on the amount of backed-up data);
Make recent backups immutable for: 5 days (minimum daily backup retention period).
Once the Wasabi bucket is configured, click “Next” to proceed.
At this stage, you must specify the mount server and its write cache folder, which will be used during restoration, using the “Add New…” and “Browse…” buttons respectively. A helper appliance is already configured; it corresponds to the Veeam backup server. It can be changed by clicking “Configure” if necessary.
When using VMware, it is recommended to check the box “Enable vPower NFS service on the mount server” before moving to the next step.
Click “Apply” to create the backup repository.
It may take a few minutes to create the repository before you can click “Next”.
The backup repository is now created, and a summary of its information is displayed.
Creating a Backup Copy Job
This section is dedicated to creating a backup job to the backup repository. In most cases, on-premise backup jobs and repositories already exist, which is why it is possible to create a backup copy job instead of creating a new backup job from scratch, as described below.
To do so, from the “Home” interface in Veeam, click “Backup Copy”.
The first step is to specify the job name and select the copy mode, as shown in the figure below.
It is recommended to choose the “Periodic copy” mode in order to retrieve only the latest restore points before proceeding to the next step.
At this stage, you must choose whether to copy from an existing repository (“From repositories…”) or from an existing job (“From jobs…”).
In the example above, a copy from a backup repository — specifically a Windows server — is selected.
First, select the backup repository associated with the previously created Wasabi bucket, then specify a minimum retention period of 5 days for daily backups.
It is also possible to configure additional backups (weekly, monthly, yearly) for greater security by checking “Keep certain full backups longer for archival purposes” and clicking “Configure”.
Finally, it is recommended to enable backup health checks at least monthly to prevent data corruption. To do so, click “Advanced”, then check the box “Perform backup files health check (detects and auto-heals corruption) on:” and modify the verification time and date via the “Configure…” button if necessary, under the “Maintenance” tab.
The next section is dedicated to data transfer.
It is recommended to choose the “Direct” data transfer mode if the Internet connection is adequate before proceeding to the next section.
It is recommended to perform daily backups by checking “Run the job automatically” and selecting the most appropriate time.
It is also advisable to configure the job to retry failed backup attempts automatically by checking “Retry failed items processing”, retrying 3 times with a 10-minute interval between attempts.
Once configured, proceed to the next section.
To complete the creation of the backup copy job, simply click “Finish” after checking “Enable the job when I click Finish” to immediately trigger a copy to the previously configured Wasabi backup repository.
Last updated
Was this helpful?