Adding Immutable Object Storage in Veeam Cloud Connect

Name: Adding Immutable Object Storage in Veeam Cloud Connect
Uploaded: 2026-10-12T13:37:26-04:00
Duration: 12 min 6 s
Description: Add immutable object storage to your backup service. This walkthrough covers connecting object storage to Veeam Backup & Replication, turning on object lock, and sizing your immutability window. A straightforward path to off-site, tamper-proof backups ...

Veeam

10/12/2026

0 (0%)

Report Like Favorite

Transcript

systems engineer at Veeam and in this video I will show you how to add immutable backup storage using object storage. We have different options for supported immutability. The first one being Veeam Hardware Repository based on x86 hardware servers with a bunch of drives. The second one being object storage which can be public cloud or S3 compatible on-prem and the third option being the duplicating storage appliances. With object storage we have integration with a bunch of different vendors. The first one being Veeam Data Cloud Vault which is either based on Microsoft Azure Blob or Amazon S3 with a lot of different regions available. It's very secure and easy to manage since it's always encrypted and always comes with immutability. There is no misconfiguration that you can do. It's always going to be encrypted and immutability will always be on so those backups will be protected and safe. Now comparing Veeam Data Cloud Vault with Amazon S3 and Microsoft Azure Blob direct integration. Those cost API and egress fees. With Veeam Data Cloud Vault those fees are included so you pay a flat price per terabyte which makes it a lot easier to calculate and predict how much each terabyte will cost you. We also integrate with S3 compatible that is generally on-prem. In this video I will demo and show you how to add Veeam Data Cloud Vault based on Microsoft Azure Blob and I will also show you how to add Wasabi Cloud object storage. With that we will move over to the demo and to Veeam Data Cloud. Here is the overview with different services. What we want to move over to is Vault. Then we want to select a tenant. I'm going to select myself. I've already created my tenant and when you create a tenant you always create a default vault or the first vault. But I want to create a second one so I can press add vault and give it a name. Then I'm going to select a country. I'm going to select Sweden and in the background now the vault is being created. What we're going to do next is move over to Veeam Cloud Connect and register the server and then add the vault because we have to register the server first. This has to be done only once so if you want to add multiple vaults to Veeam Cloud Connect server for example or your backup or replication you only have to register the server once and then you're free to assign and create more repositories based on different vaults or different regions for example. Now it's ready we don't have any assignments yet so we have to move over to Veeam Cloud Connect. All right so here we have the Veeam Cloud Connect server and console. We are on the home page. We want to move over to backup infrastructure and we go to backup repositories then we're going to add a new repository. Then we select the last option Veeam Data Cloud Vault. We give it a name. Let's reuse what we already have in Cloud Vault. Then we click next. Now I'm going to get this error because I have registered my server before and deregistered it so it's giving me this pop-up. That's okay, that's fine. We click okay. It's going to say your backup server is not authorized but for me it does say it but it's false. We click on authorize and then continue with Veeam. We're going to have to re-authorize this server. There we go so now it's authorized however we don't have any vaults and that's because we haven't done any assignments yet. Even though I have permissions to access all the vaults as you could see before I had a different tenants etc. My permissions are not wrong but I don't want to list all the vaults here. I want to make sure that I assign the correct vault. We're actually going to move back to vault again in Veeam Data Cloud. On here we go to storage vaults and then we press assignments. As you can see here we have a lot of different VBRs and servers. Here is the one I'm using so we're going to hit assign and continue. Once it's been assigned we can move back to the cloud connect server again. We should be able to to see it there so let's jump over. We're back and nothing here. I press the refresh button kind of getting the vaults and as you can see how-to videos are here. It's a foundation core so that's perfect. We click next and it's going to create some some stuff in the background to make this connection possible. When it's done we're going to select a folder and a mount server. That's generally the backup server but you can of course have a dedicated mount server. The folders are great in some ways. You can have the same vault with different folders if you like to. I generally want to use the vault as the segmentation so one vault, one folder, one repository but of course you can create multiple folders and create multiple repositories based on your vault. Let's just create a folder named backups. There we go. We select that one and then we go next and as you can see here we have make backups immutable. That's recommended but we cannot deselect it so there is no way to disable the immutability. We can also limit how much we want to use so let's say I only want to use one terabyte for any reason then I can set the limitation here. Otherwise I can just leave it unchecked and it can grow endlessly. The immutability period is by default for the entire duration of the retention so if you have different retention policies then this is great because it's always going to follow the retention but you can also set a minimum because if you have different retentions of 30 days, 60 days, 90 days for example but you just want immutability for the further days then you can select this and let the further days be and just press okay. Now it's going to be immutable for the further days. Moving over to the next page we select the mount server. In this case it's the backup server for me but like I said you can have a dedicated mount server if you like to and then we just hit next. We can review the settings. If this was an already existing vault and you're transporting this to a different server we can scan the vault for existing backups but this is a new vault so there's nothing in it. I'm just going to hit apply. Then I'm going to let it create everything for me and once it's done it's going to be ready and ready to go for new backups. There we go. Everything is done in green. Perfect. We hit finish and as you can see here's the VeeamData Cloud Vault how-to videos. Perfect. Now it's ready to use for my Veeam Cloud Connect server. Now I want to add a repository based on Wasabi Bucket. For that I go back to the backup repositories and add a repository. This time I select object storage and then additional providers because we have a direct integration with Wasabi. We select Wasabi as the option and then we give it a name. Click next. Then we want to provide the region. I have one bucket already set up in EU Central 1. Then we select the credentials. I've already created my credentials. This is something you have to do. You click add. You give the access key and the secret key. This is provided by Wasabi when you create the bucket or when you create the the user. That's something you have to keep track of because the secret key is only shown to you once. Then we hit next and it's going to show me all the different buckets. I have one here ready to go. How-to videos immutability. Select that one and just like with VeeamData Cloud Vault I have to create a folder. This one is going to be backups as well. It works the same way. You can have multiple folders for different repositories but just as before it's so easy to just create a second bucket, a second vault instead and using one repository, one vault, one bucket, one repository. Let's see if I can get my folder created. There we go. Then we have limit of your storage consumption yet again so you can set a limit if you like to but as you can see here now I have the option to enable backup with immutability or not. I'm going to select this one because I have enabled object object lock etc on the bucket in Wasabi so that's a prerequisite. Then we have the exact same option here for the entire duration of the retention policy or set a minimum immutability period only. I'm going to select that one for further days then we go next and again we have to provide a mount server so we can mount the backups for recovery and this is fine. I don't have any backups so I don't want to scan them. Just hit apply and then let it create a repository based on this Wasabi bucket for me. Now when this is done everything is ready to go I can start making backups to this Wasabi bucket. So both are really easy but when I back up to this Wasabi bucket yes I have enabled immutability but that was a choice on my side I had to enable it etc compared to Vault it's always on I cannot turn it off. Also when I back up to this Wasabi bucket I had to enable encryption and it's gonna it's gonna allow me to make unencrypted backups to this repository. So let's go ahead and do that. So key differences immutability always on encryption always on on Beam Data Cloud Vault on Wasabi you have more choices and it can be a good fit for different use cases etc but if you want to be exactly sure that you have really secure and protected backups then Beam Data Cloud Vault is a great service that you can easily rely on when it comes to configuration. You cannot go wrong more or less. So thank you for watching and I'll see you next time.

TL;DR

Veeam supports three immutability options: hardware repositories, object storage (public cloud or S3-compatible), and deduplicating storage appliances — this video focuses on object storage.
Veeam Data Cloud Vault always enforces immutability and encryption with no way to disable either, making it the lowest-risk configuration option for MSPs managing tenant backups.
Wasabi Cloud object storage integrates directly with Veeam Cloud Connect but requires the administrator to manually enable object lock and encryption, introducing the possibility of misconfiguration.
The immutability period can be set to match the full retention policy duration or a defined minimum number of days, giving administrators flexibility in how long backups remain tamper-proof.

Immutable Storage Options in Veeam

This MSP how-to video, presented by Markus Rundlöw, a cloud systems engineer at Veeam, walks through the process of adding immutable backup storage using object storage in Veeam Backup & Replication and Veeam Cloud Connect. The video opens by outlining the three supported immutability options: hardware repositories based on x86 servers, object storage (public cloud or S3-compatible on-premises), and deduplicating storage appliances. Within the object storage category, Veeam integrates with several providers, including its own Veeam Data Cloud Vault — built on Microsoft Azure Blob or Amazon S3 — as well as direct integrations with providers like Wasabi. Veeam Data Cloud Vault is positioned as the most secure and operationally simple option because immutability and encryption are always enabled with no possibility of misconfiguration. It also offers a flat per-terabyte pricing model that eliminates the unpredictable API and egress fees associated with direct Azure Blob or Amazon S3 integrations.

Step-by-Step Configuration Walkthrough

The demo covers two distinct workflows. First, Markus demonstrates adding a Veeam Data Cloud Vault repository: creating a new vault in the Veeam Data Cloud portal, assigning it to the Cloud Connect server, authorizing the server, and completing repository setup within the Veeam Cloud Connect console. Key configuration points include folder structure (one vault, one folder, one repository is the recommended approach), storage consumption limits, and the immutability period — which defaults to the full retention duration but can be set to a minimum number of days. Immutability cannot be disabled for Veeam Data Cloud Vault repositories. The second workflow covers adding a Wasabi Cloud object storage bucket, requiring the user to supply access and secret keys, select the pre-configured bucket, enable object lock (a prerequisite configured in Wasabi), and optionally enable encryption. Unlike Vault, both immutability and encryption are opt-in choices when using Wasabi, meaning misconfiguration is possible. The video concludes by contrasting the two approaches: Vault offers guaranteed security with no configuration risk, while Wasabi provides more flexibility suited to specific use cases.

Chapters

0:00 - Introduction & Immutability Options
1:05 - Veeam Data Cloud Vault vs. Direct Cloud Storage
1:54 - Creating a Vault in Veeam Data Cloud
3:07 - Adding Vault Repository in Cloud Connect
7:55 - Adding Wasabi Object Storage Repository
11:21 - Key Differences & Wrap-Up

Key Quotes

0:52 "There is no misconfiguration that you can do. It's always going to be encrypted and immutability will always be on so those backups will be protected and safe."
1:12 "Those cost API and egress fees. With Veeam Data Cloud Vault those fees are included so you pay a flat price per terabyte which makes it a lot easier to calculate and predict how much each terabyte will cost you."
6:08 "Make backups immutable. That's recommended but we cannot deselect it so there is no way to disable the immutability."
11:21 "Key differences — immutability always on, encryption always on on Veeam Data Cloud Vault. On Wasabi you have more choices and it can be a good fit for different use cases."

FAQ

Do I need to register the Veeam Data Cloud server every time I add a new vault?

No. Server registration is a one-time step. Once registered, you can assign and create additional repositories from multiple vaults or regions without re-registering the server.

What is the key difference between Veeam Data Cloud Vault and Wasabi for immutable backups?

With Veeam Data Cloud Vault, immutability and encryption are always on and cannot be disabled, eliminating misconfiguration risk. With Wasabi, both features are optional and must be manually enabled — object lock must be configured in Wasabi before adding the repository in Veeam, and encryption is a separate opt-in setting.

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

10/13/2026

01:00 PM

10/13/2026

Ensuring Compliance: Audit Evidence from CJIS to FERPA

https://www.truthinit.com/index.php/channel/2159/ensuring-compliance-audit-evidence-from-cjis-to-ferpa/
10/15/2026

11:00 AM

10/15/2026

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
10/20/2026

11:00 AM

10/20/2026

Harnessing Data Governance for AI with Cyera and Snowflake

https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
10/27/2026

11:00 AM

10/27/2026

Maximize Your Microsoft Investment for Security and Growth

https://www.truthinit.com/index.php/channel/2178/maximize-your-microsoft-investment-for-security-and-growth/
10/27/2026

01:00 PM

10/27/2026

The HUMAN Experience: Real-Time Insights into Page Intelligence

https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
10/28/2026

01:00 AM

10/28/2026

[APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era

https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
10/28/2026

06:00 AM

10/28/2026

[EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era

https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
10/28/2026

01:00 PM

10/28/2026

[AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era

https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
10/28/2026

01:00 PM

10/28/2026

EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
11/04/2026

11:00 AM

11/04/2026

Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape

https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
11/04/2026

11:00 AM

11/04/2026

Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions

https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
11/05/2026

02:00 PM

11/05/2026

HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
11/05/2026

02:00 PM

11/05/2026

Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption

https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
11/19/2026

01:00 PM

11/19/2026

360View: Govern, Secure & Recover Your Microsoft 365 Environment

https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
11/19/2026

01:00 PM

11/19/2026

Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/