Feature request - Veeam Managed Servers - Option to skip update check

[petesteven]

When adding a new Veeam Infrastructure Appliance as a managed server in V13, each appliance checks if updates are available for it and if the update server can be reached. This is not possible in dark sites or if FW rules are missing.

The timeout is quite long.

It would be good if there were an option to select “skip update check.” Otherwise, the waiting time when adding many components is very long.

[Dima P.]

Hello Peter,

I'd argue that we must allow to skip it but the time out needs to be fixed for sure. Thank you!

[pma]

Hi Peter,

One possible approach would be to add a key to the VSA configuration and the Windows registry for VBR that allows to bypass the update check.
For VSA, implementing this change would require approval from the security officer before applying the new configuration.

Would this solution be sufficient?

[petesteven]

Hi Maskim,

I'm not a big fan of registry keys (they get carried over during migration, and no one knows what was added, etc.).

It's okay as a workaround, but for the future, it might be a good idea to add a “Skip Updates” button when adding servers. Would that be possible?

[PTide]

Hi Peter

I would like to clarify something about your request.

Do you plan to set up a local repo that is available from your backup infrastructure network later (after adding all VIAs/VHRs) or you are not intending to do that whatsoever?

Even with a local repo on a dark site it is possible to deliver update packages (e.g. by using and ISO file, or by manually uploading packages obtained from elsewhere)

Thanks!

[petesteven]

Hello PTide,

Of course, updates are either downloaded online (though the internet connection may not yet be available because proxy settings aren’t rolled out via your policies until after they’re added, or a firewall rule is still missing) or via a local update server.
(Anything else would completely miss the point of security and updates.)

However, the question from you has nothing to do with the request itself. The request simply asks if the step can be skipped if the connection to the repo (local or online) isn’t available yet. I don't want to skip updates in general, but I just want to be able to skip the check when adding them because of the long timeout values

[pma]

Hi Peter,

Following up here with good news: the workaround we discussed will be shipped with 13.1, so you can bypass the appliance update check by setting the corresponding registry value on the VBR server. The key itself will be provided in a KB article.

With the key in place, adding an appliance as a managed server no longer waits on the update/reachability check — which should resolve the timeouts you were hitting in dark sites and firewall-restricted environments.

I also fully take your point that a registry key isn't the most transparent mechanism, and we will evaluate more appropriate long-term options. For now, though, the key unblocks you.

[petesteven]

hi @pma

Now that version 13.1 is out, what would the registry key be to disable the check?

Thanks!

[MatzeB]

I think i have a very similar issue - we have Veeam 13.1, and added a new VIA 13.1. The process for adding is horrible slow, over 1 hour in total!
Also opened case 08206542 for this.




Regards
Matze

[pma]

Hi Peter, Matze,

the KB is published now: https://www.veeam.com/kb4916
On a Windows VBR server, create SkipInfrastructureApplianceUpdateCheck (DWORD, value 1) under HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup and Replication.
On a Veeam Software Appliance, add SkipInfrastructureApplianceUpdateCheck=1 to the [root] section of /etc/veeam/veeam_backup_and_replication.conf with Host Management Console. No service restart is required in either case.

Please note: the setting suppresses both the update check and the automatic installation of security updates while an appliance
is being added. So it removes the timeout you were hitting, but you will want to make sure updates get applied separately afterwards, either through the Veeam Updater or your centralized mirror.