Configuring Veeam Backup & Replication with eazyBackup e3 Object Storage
This guide walks you through connecting Veeam Backup & Replication to your eazyBackup e3 S3-compatible object storage. By the end, you will have an immutable, S3-backed object storage repository that Veeam can use as a backup target or capacity tier in a scale-out backup repository (SOBR).
Important: Object Lock and retention: When you create your bucket in the e3 dashboard, do not enable "Set a default retention policy." Veeam manages immutability and retention on its own objects through the S3 Object Lock API. Applying a bucket-level default retention policy on top of Veeam's per-object locks can cause conflicting locks, premature or extended retention you did not intend, and failed cleanup of old restore points. You do need Object Locking enabled on the bucket, however it's important leave the default retention policy turned off so Veeam maintains full control.
Before you begin
Make sure you have the following:
An active eazyBackup e3 account with available storage capacity (a free trial works for testing).
Veeam Backup & Replication v11 or later. Object Lock / immutability support requires v11+, and the immutability options described here are best supported on v12.
Administrative access to your Veeam Backup & Replication console.
Your e3 Service URL (S3 endpoint), an Access Key, and the matching Secret Key.
Part 1 — Create a bucket in the e3 dashboard
Sign in to your eazyBackup account and open the e3 Object Storage section from the left navigation, then select Buckets.
Click Create Bucket.
In the Create Bucket modal, enter a Bucket Name (for example,
veeambackup). Use lowercase letters, numbers, and hyphens only.Under Select Bucket Owner, choose the user that should own this bucket. Use Root user for a single-tenant setup, or select a dedicated storage user if you isolate workloads per client or department.
Set the protection options as follows:
OptionSettingWhyEnable Versioning
On
Object Lock requires versioning. Veeam also relies on versioning for immutability.
Enable Object Locking
On
Lets Veeam write immutable (WORM) restore points via the S3 Object Lock API.
Set a default retention policy
Off
Leave this off so Veeam retains full control of object locks and retention.
When you enable Object Locking, a Set a default retention policy panel appears. Leave this toggle off. Do not configure a Default Mode or Default Retention Period here — Veeam will apply its own retention to each object.
Click Create Bucket.
Tip: If you only need a non-immutable repository (no ransomware protection), you can leave both Object Locking and the default retention policy off. For immutable backups, enable Object Locking but keep the default retention policy off, as shown above.
Part 2 — Collect your connection details
You need three values to connect Veeam: the service endpoint, an access key, and a secret key.
In the e3 Object Storage section, open Access Keys.
Note the Service URL shown on the page, for example:
This is your S3 endpoint. Your data is hosted in Canada (
ca-central-1).Find the access key belonging to the bucket owner you selected in Part 1. If you need a new key pair, click Create new key and store the Secret Key somewhere safe — the secret is shown only once at creation time.
Keep the access key and secret key confidential. Anyone with these credentials can read and write to your buckets.
Part 3 — Add the object storage repository in Veeam
Open the Veeam Backup & Replication console.
In the bottom-left, click Backup Infrastructure.
Right-click Backup Repositories and choose Add Backup Repository (or click Add Repository in the ribbon).
In the Add Backup Repository wizard, select Object Storage.
Choose S3 Compatible.
Name
Enter a Name (for example,
eazyBackup e3 - veeambackup) and an optional description. Click Next.
Account
In the Service point field, enter the e3 endpoint, prefixed with
https://:In the Region field, enter:
Next to Credentials, click Add and enter:
Access key: your e3 access key
Secret key: your e3 secret key
An optional description
Click OK, then Next. Veeam will validate the credentials and connect to the endpoint.
If validation fails, confirm the endpoint includes
https://, the region isca-central-1, and the access/secret keys are correct and belong to the bucket owner.
Bucket
From the Bucket drop down, select the bucket you created in Part 1 (for example,
veeambackup).Under Folder, click Browse and either select an existing folder or create a new one (for example,
veeam-repo). This folder is where Veeam stores its backup data within the bucket.To enable immutability (recommended for ransomware protection):
Select Make recent backups immutable for and set the number of days you want restore points to remain locked (for example,
30).This works because Object Locking is enabled on the bucket. Veeam applies its own per-object retention — which is exactly why you left the bucket's default retention policy off in Part 1.
Click Next.
Mount server / review
Choose a mount server and the helper appliance settings, or accept the defaults, then click Next.
Review the Summary, then click Finish.
Your eazyBackup e3 bucket is now registered as a Veeam object storage repository.
Part 4 — Use the repository
You can use the new repository in two common ways:
Direct backup target: Point a backup job at the object storage repository directly (supported for many job types in v12+).
Capacity tier in a Scale-Out Backup Repository (SOBR): Add the e3 repository as the Capacity Tier of a SOBR to offload or copy backups to Canadian object storage. This is the most common pattern and lets you keep recent restore points on local performance storage while tiering older or copied data to e3.
To add it as a capacity tier:
Go to Backup Infrastructure > Scale-out Repositories.
Create or edit a SOBR.
On the Capacity Tier step, select your eazyBackup e3 object storage repository.
Choose to copy and/or move backups to the capacity tier, and confirm the immutability period if you enabled it.
Troubleshooting
Credential validation fails
Endpoint missing https://, wrong region, or bad keys
Use https://s3.ca-central-1.eazybackup.com, region ca-central-1, and verify the access/secret keys.
Immutability option is greyed out
Object Locking was not enabled when the bucket was created
Object Lock must be enabled at bucket creation. Create a new bucket with Enable Object Locking turned on.
Restore points are not cleaned up / retention seems wrong
A bucket-level default retention policy is conflicting with Veeam
Confirm Set a default retention policy was left off. Recreate the bucket without a default retention policy if needed.
Cannot see the bucket in the drop-down
Credentials belong to a different user than the bucket owner
Use the access key for the user who owns the bucket.
Summary
Create an e3 bucket with Versioning and Object Locking enabled.
Leave "Set a default retention policy" off so Veeam controls object locks.
Use endpoint
https://s3.ca-central-1.eazybackup.comand regionca-central-1.Add the bucket as an S3 Compatible object storage repository in Veeam, enabling "Make recent backups immutable for" to get WORM protection.
Use the repository directly or as a SOBR capacity tier.
Last updated