How do I create a Backup to Wasabi on Veeam Backup for Microsoft 365 v7?
Veeam Backup for Microsoft 365 v7 empowers customers to securely back up Office 365 to on-premises or cloud object storage. Wasabi has been validated to work with Veeam Backup for Microsoft 365 v7.
This article details the procedure to create a Backup job to backup a Microsoft 365 organization to Wasabi. For more details about specific features please refer to Veeam's Documentation.
Note: The data restoration process is handled by your specific backup software application. As there are many potential variables that will affect your unique environment, it is strongly recommended that you seek the guidance of your backup software's technical support team in the event that you encounter difficulty, or have application-specific inquiries.
Please Note Veeam Backup for M365 supports immutability only for backup copies. Refer to Backup Copy for Veeam Microsoft 365 v7 article for more details.
- Pre-requisites
- Add Organization
- Add Wasabi Cloud Storage
- Add Object Storage Repository
- Create a Backup job
1. Pre-requisites
- Veeam Backup for Microsoft 365 v7 installed and licensed.
- Active Microsoft 365 account with two-step authentication turned On.
- Active Wasabi Cloud Storage account.
- A standard Wasabi bucket created with access keys.
2. Add Organization
2.1 Navigate to the "Organizations" tab, click on Organizations, then click "Add Org".
2.2 Choose "Microsoft 365" from the dropdown, check the boxes to select the services you want, then click "Next".
2.3 Choose the "Default" region from the dropdown menu, choose "Basic Authentication" or "Modern Authentication", depending on your configuration, then click "Next".
Note: For this scenario we are using "Modern Authentication", with no legacy authentication protocols.
2.4 Choose "Register a new Azure AD application automatically", then click "Next".
Note: We are going to let Veeam register a new Azure AD user with required permissions in this example.
2.5 Type in a name for Veeam to register with Azure AD, then click "Install".
2.6 Select your certificate type, then click "Next".
Note: We are generating a new self-signed certificate here, but it is recommended to select/import your own SSL certificates. Please refer to Installing SSL Certificates (Veeam Docs).
2.7 Leave the default certificate name (or update it), then click "Finish".
2.8 The registration information is now complete, click "Next".
Note:You can optionally check "Allow this application to enable export mode for Sharepoint Web Parts..." if you want Veeam to back up customized SharePoint Online sites.
2.9 Authenticate with Microsoft 365, click "Copy Code", then click the url provided.
Once you click the url https://microsoft.com/devicelogin, a browser window will pop up, you must complete the authentication with Microsoft 365 via the browser window.
2.10 Enter the code you had copied previously, then click "Next".
2.11 This screen shows that you have completed the authentication process. You may now close the window.
Note: If you have not previously set up two-factor authentication to your AD account, you may have to go through the process of setting up two-factor authentication. Once you finish setting up two-factor authentication, you should see a successful sign-in to the Command Line Interface Application, and can close the window.
If you have multiple Microsoft accounts signed-in, you will need to select the one that you need add to Veeam for backup. You can select it by clicking on the account name.
2.12 Return to the Veeam Organization Setup, then click "Next".
Note: You should see a green checkbox which says you are now authenticated to Microsoft 365. If not, please work with your Veeam Support Team, and Microsoft Support Team to resolve the issue.
2.13 Verify connection and organization parameters, then click "Finish".
Note: All of these steps should complete successfully. If not, please work with your Veeam Support Team, and Microsoft Support Team to resolve the issue.
2.14 You will now see your newly created Organization in the list.
3. Add Wasabi Hot Cloud Storage
3.1 Navigate to the "Backup Infrastructure" tab, Click on "Object Storage", then click "Add object storage".
3.2 Input a name, and description, then click "Next".
3.3 Select "Wasabi Cloud Storage", then click "Next".
3.3.Input your Service URL & the region to be used, click "Add" to add your Wasabi Access & Secret Keys, then click "Next".
Note: This configuration example discusses the use of Wasabi's us-east-1 storage region. To use other Wasabi storage regions, please use the appropriate Wasabi service URL as described in our Wasabi Service URLs article.
3.5 Input the Access key and Secret key for your Wasabi bucket, and click "Ok".
Note: Please review create a sub-user with access keys to create access keys for a user on Wasabi console.
3.6 Once the credentials are added, click "Next".
3.7 Select your bucket from the dropdown, click "Browse" to select a folder.
Note: Veeam Backup for Microsoft 365 introduces Object Lock functionality for backup copies only. If "Make backup copies immutable" setting is checked to enable immutability for this object storage then the object storage cannot be used for a backup job. To make immutable backup copy job refer to Backup Copy for Veeam Microsoft 365 v7 article.
3.8 Select a folder from the list or create a new folder. Then click "OK".
3.9 Click "Finish" to complete adding Wasabi Storage.
3.7 You should now see your newly created Wasabi Object Storage.
4. Add Object Storage Repository
4.1 Click on "Backup Repositories" in the Backup Infrastructure tab, then click "Add Repository".
4.2 Input a name and description, then click "Next".
4.3 Select "Backup to object storage" and click "Next".
4.4 Leave the default backup proxy (or select an alternative if you are using one), then click "Browse" to select local cache path.
4.4 Create a new folder, or select an existing one to be used as a local cache directory. Click "OK", then click "Next".
4.5 Select the previously created Wasabi Object Storage, then click "Next".
Note: You can optionally choose to encrypt the data which Veeam uploads to Wasabi. This will be 3rd party encryption provided by Veeam. Please refer to Veeam's documentation on Data encryption.
4.6 Select the retention period and retention type as needed. Click "Finish" to create the repository.
- Snapshot-based retention- Select this type if you want to keep an item until the restore point of an item's version is within the retention coverage.
- Item-level retention- Select this type if you want to keep an item until its creation time or last modification time is within the retention coverage.
Advanced settings for retention policy can be configured by clicking on "Advanced". For more details please refer to Veeam's documentation on Retention policy settings.
4.8 You will see your newly created Object Storage Repository.
5. Create a Backup Job
5.1 Click on the "Organizations" tab, then click on your organization and click on "Backup Jobs". This will open up the ?New Backup Job" wizard.
5.2 Input a name and description for your backup job, then click "Next".
5.3 Select what you want to backup, then click "Next".
Note: Veeam allows you to backup your entire organization, or alternatively, select specific objects in your organization. In this example we are backing up the entire organization, however you may want to only back up certain groups, depending on your needs. This is handy in specific use cases, where different groups may have different retention periods. You can create multiple jobs, each backing up specific groups, and apply different retention policies to each.
5.4 If any data needs to be excluded, select it here, then click "Next".
Note: Veeam allows you to exclude specific objects from a backup. For instance, you may want to exclude specific internal users or groups from being backed up.
5.5 Select the Wasabi Object Repository which was previously created, then click "Next".
Note: You can choose a different backup proxy if you are using this feature, otherwise, leave the default.
5.6 Select the scheduling for the job, then click "Create".
Optionally select "Terminate the job if it exceeds allowed backup window" and specify allowed and prohibited hours for the backup job by clicking on "Window". Please review Veeam documentation for more details.
Note: In this example we have also chosen to start the backup job when the "Create" button is clicked. This will kick off the new job immediately.
5.7 You will see the backup job created when you select your organization.
5.8 You can click on the "Running" tab, then click on the Backup job to view the statistics of your newly created job.
5.9 Verify your data is being backed up to Wasabi by logging into the console, maneuvering to the bucket used for Veeam Backups for Microsoft 365, and looking for data.