Veeam 12.1 and DataDomain retention lock

[gmajestix]

Hello,
looking at the document for Dell DataDomain supported features https://helpcenter.veeam.com/docs/backu ... ntion-lock it says that I can now enable retention lock on DataDomain repositories. My question is if there is anything that needs to be done on the DataDomain side for the mtree? Also can the retention lock be enabled on an existing repository or do I need to create new one?

[veremin]

Correct, you need to enable retention lock in your storage unit settings. Plus, you will need to define minimum and maximum immutability periods there.

Then, you can enable immutability in the settings of an existing repository (a new repository is not required) - make sure to set a value between minimum and maximum intervals previously specified in the storage unit settings.

Thanks!

[gmajestix]

Will there be a KB or an article from Veeam on what to configure on DataDomain or we need to wait for a KB from Dell?

[veremin]

As I've mentioned, you need to configure the following settings:

On DataDomain:
- Enable retention lock (System Manager - Data Management - Mtree - DD Retention Lock)
- Configure minimum and maximum retention periods

On VBR:
- Enable immutability (Repository options - Repository)
- Configure immutability period that is between minimum and maximum retention periods defined previously

If necessary, we might additionally create a KB article that describes the same steps.

Thanks!

[gmajestix]

I understand the steps however its missing some details. When you enable retention lock on a mtree you need to select Use: manual or automatic. I'm guessing its manual?

[foggy]

Yes, it is Manual. Automatic RL is not supported (which is mentioned in the user guide) and is even not recommended by the vendor itself if working with backup applications (you should see the message in yellow right in the storage management UI). Thanks!

[gmajestix]

My mistake I missed the recommended settings in user guide https://helpcenter.veeam.com/docs/backu ... ml?ver=120.

[veremin]

No worries, hope now everything is clear and you can proceed with configuring immutability. Thanks!

[stevekarra]

Also be sure you configure the Data Domain MTree being used for the Storage Unit as Compliance mode.

I'm not sure if Governance will be supported at a future time, but for now it's Compliance mode only.

[willv]

***Just a note, do not use the DD Gui to enable retention lock. The gui sets it to governance mode. Use the cli and make sure it is set to compliance mode. Once in governance mode there is no way to change it.

mtree retention-lock enable mode compliance mtree /data/col1/Veeam

As I've mentioned, you need to configure the following settings:

On DataDomain:
- Enable retention lock (System Manager - Data Management - Mtree - DD Retention Lock)
- Configure minimum and maximum retention periods

On VBR:
- Enable immutability (Repository options - Repository)
- Configure immutability period that is between minimum and maximum retention periods defined previously

If necessary, we might additionally create a KB article that describes the same steps.

Thanks!

[gmajestix]

Also check the FAQ on Dell regarding retention lock https://www.dell.com/support/kbdoc/en-s ... stions-faq

[mpm@aramark]

How does Veeam know if the Data Domain retention lock is set to Compliance or Governance mode?

[Andreas Neufert]

We check in the API for it.

[Archy]

Hi all!
I'm new to Veeam, and I was digging through this, but I have one question:
The VBK and incremental files are locked, but what happens to the VBM (metadata)? Can anyone delete or modify the data and make the backup useless?

Thanks for your help!

[veremin]

Immutability does not apply to metadata files so that we can continue to update and overwrite them regularly. Deleting metadata will not corrupt any backup chains. Firstly, you can always import the chain via the .vbk file. Secondly, in the absence of metadata, they should be recreated during the next job pass. Thanks!