Feature request - include SQL express 2017 in Windows agent package

[vbrouwer]

Hi,

we're starting to use the Veeam agent package as created by Veeam 11:
- console / inventory /add protection group / type: "Computers with pre-installed agents"
We need this procedure because we're not allowed to use service accounts due to security constraints. Anyway this package is working smoothly.

However, we notice this will install some SQL express 2012 SP4 components, while still supported by Microsoft (https://docs.microsoft.com/en-us/troubl ... r-versions) even on Windows 2019 servers we still need to have this updated to SQL express 2017 or even better SQL express 2019. Our organization (Financial) is extremely keen on security and we must use updated versions as much as possible.
According to the MS website (https://docs.microsoft.com/en-us/lifecy ... erver-2012) the current SP4 SQL 2012 dates from 2017 which is 4 years old by now. The end of mainstream support was in 2017, the end of extended support is next year.

We will have to install 1000+ physical servers with the agent, which makes it more adament we can use a modern version right from the start.

We had support Case #04764449 in which they request us to open a feature request on the forum.

Kind regards,
Vincent

[HannesK]

Hello,
thanks for your request. Yes we have plans to improve the SQL "situation" for the agents.

Best regards,
Hannes

[Dima P.]

Hello Vincent,

Thank you for your feedback! Veeam Agent for Windows stores nothing but it's own job settings in the database (well, some backup ids too), is there any particular data you are worried to be somehow compromised on the client side? Cheers!

[vbrouwer]

Hello Dima,

There is no concern for the data stored by the Veeam agent. But we do worry about possible vulnerabilities in the used SQL express components installed. Even though we're not currently aware of any such vulnerabilities, these might show up. Since SQL 2012 is on extended support - the last update dates 2017 - we don't expect a fix from Microsoft if any weakness is detected. We would rather work with more recent software.

Kind regard,
Vincent

[Dima P.]

Hello Vincent,

Thanks for sharing the updates. We will keep it in mind for next version improvements!