Using Read-Write Access Keys for Object Storage

In most scenarios, an access key with read-only permissions to your object storage is required.

In certain situations where Veeam does not support a read-only key, you can open a support ticket to have your account configured to allow for read-write keys. Examples are:

  • Repositories with Automatic Bucket creation enabled
  • Veeam Data Vault Repositories
  • Object Storage backups with Agent Based Backups through a Cloud Connect provider

Each time you run a recovery with a read-write key, the Cloud IBR VBR will “take over management” of the repository causing your backups to temporarily fail while the recovery is running. We automatically release Management of the S3 repository at the end of the recovery.

If your backups are failing with this error:

  • “Failed : Failed to preprocess target Error: The object storage repository is managed by the different backup server server_name

Two options to fix the error:

  • Option 1: If this is a one time issue, you can follow this option. Through the Veeam UI, simply open the properties of the repository and click next through all the pages and it will ask you if you’d like to take over ownership.
  • Option 2: If this happens more than once, follow the steps below using the command for S3 compatible storage. If you are using Veeam Vault, you must perform below to run properly after each recovery test to ensure that your backups run successfully:

Schedule the below script to run on your production VBR to take over management of your Repository. For simplicity, you can schedule the script to run daily, either every morning or just before your daily backup window starts.
  1. Using an Admin Account that does not have MFA Enabled on Veeam, open a the PowerShell console that is a part of Veeam.
  2. Create a PowerShell script on your VBR, i.e. “repomanagement.ps1”, with one of the following PowerShell commands, depending on if you’re using Veeam Vault or any S3 compatible object storage:
    • For Vault repositories:
      • Set-VBRDataCloudVaultRepository -Repository “Your Repository Name”
    • For S3 Compatible repositories:
      • Set-VBRAmazonS3CompatibleRepository -Repository “Your Repository Name”
    • Replace “Your Repository Name” with the actual name of your repository as shown in your VBR.
  3. Create a daily scheduled task:
    • Program/script: powershell.exe
    • Add arguments: “C:\location_of_script\repomanagement.ps1”
    • Select SYSTEM account for “When running the task, use the following user account:”
    • Select the radio option “Run whether user is logged on or not”
  4. Run the scheduled task to make sure it runs successfully.