The Veeam Cookbook Series

A simple step by step no frills approach to achieving your goal

Recipe: Create a Protection Group to deploy and manage Veeam Cloud Agents.

Expected deliverables:

A Protection Group to deploy Veeam Cloud Agents to one or several Amazon EC2 instances or Microsoft Azure virtual machines, and add them to the inventory in the Veeam Backup & Replication console,.

Time to complete: 10 minutes

Ingredients:

• Make sure that all computers added to the protection group are powered on and may be accessed over the network.
• For Amazon EC2 instances, the SSM Agent must be installed and running.
• For Microsoft Azure virtual machines, the Microsoft Azure Virtual Machine Agent (Azure VM Agent) must be installed and running.
• A Microsoft Azure blob storage or Amazon S3 storage to be used by the Cloud Machines as a distribution repository.
• A cloud user with the required permissions.

Before you start:

• A protection group for cloud machines can include objects running only supported Microsoft Windows and Linux OSes.
• Adding computers to multiple protection groups with different computer discovery and Veeam Agent deployment settings will result in additional load on the backup server.

Assumptions:

It’s assumed that you already have a Veeam Backup Server fully working in your environment.

Method:

1. Open the Inventory view. Click the Physical Infrastructure node in the inventory pane and click Create Protection Group in the working area.
2. At the Name step, specify a name and description for the protection group. Click Next.
3. At the Type step select the Cloud machines option.
4. At the Cloud Account step, select the account from the Credentials list. Then specify additional information required to connect to the cloud:
   • For AWS select an AWS Region and a Data center.
   • For Microsoft Azure, select a Subscription and a Region.
   • Click Next
5. At the Cloud Machines step, you can select the Cloud Machines you want to add to the Protection Group:
   • Click Add > Machines
   • In the Selected Objects window, select the instances you want to include in the group and click in OK. As an option you can use the search field to look for an specific instance.
   • Click Next
6. At the Exclusions step, you can specify which objects you want to exclude from the protection group.
7. (Only for AWS EC2 instances) At the Cloud Permissions step, click in the Assign an IAM role with required permissions automatically check box to allow Veeam to create and assign the required IAM role. Click Next
8. At the Options step specify settings for protected computers discovery and Veeam Agent deployment.
   • In the Discovery section, define schedule for automatic computer discovery within the scope of the protection group.
   • In the Deployment section, from the Distribution repository list, select a Microsoft Azure blob storage or Amazon S3 storage repository that you plan to use as a distribution repository.
   • If you want Veeam to automatically deploy Veeam Agents on all discovered computers in the protection group, make sure that the Install backup agent automatically check box is selected.
   • If you want Veeam to automatically upgrade Veeam Agent on discovered computers when a new version of Veeam Agent appears on the distribution server, make sure that the Auto-update backup agent check box is selected
   • Select the Install changed block tracking driver on Windows Server OS check box if you want to install the advanced CBT driver on servers protected with Veeam Agent for Microsoft Windows.
9. At the Review step, click Apply. Then, at the Apply step, Veeam will create the configured protection group. Wait for the operation to complete and click Next to continue.
10. At the Summary step, complete the protection group configuration process. If you want to perform computer discovery later, you can clear the Run discovery when I click Finish check box. Click Finish to close the wizard

Links to Resources:

• Veeam Guides and Helpcenter
• Veeam Community Forums
• Veeam Best Practices

---