> For the complete documentation index, see [llms.txt](https://docs.eazybackup.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.eazybackup.com/e3-object-storage/configuring-veeam-backup-and-replication-with-eazybackup-e3-object-storage.md).

# Configuring Veeam Backup & Replication with eazyBackup e3 Object Storage

This guide walks you through connecting Veeam Backup & Replication to your eazyBackup e3 S3-compatible object storage. By the end, you will have an immutable, S3-backed object storage repository that Veeam can use as a backup target or capacity tier in a scale-out backup repository (SOBR).

> **Important: Object Lock and retention:** When you create your bucket in the e3 dashboard, **do not** enable **"Set a default retention policy."** Veeam manages immutability and retention on its own objects through the S3 Object Lock API. Applying a bucket-level default retention policy on top of Veeam's per-object locks can cause conflicting locks, premature or extended retention you did not intend, and failed cleanup of old restore points. You **do** need Object Locking enabled on the bucket, however it's important leave the *default retention policy* turned off so Veeam maintains full control.

***

### Before you begin

Make sure you have the following:

* An active eazyBackup e3 account with available storage capacity (a free trial works for testing).
* Veeam Backup & Replication v11 or later. Object Lock / immutability support requires v11+, and the immutability options described here are best supported on v12.
* Administrative access to your Veeam Backup & Replication console.
* Your e3 **Service URL** (S3 endpoint), an **Access Key**, and the matching **Secret Key**.

***

### Part 1 — Create a bucket in the e3 dashboard

1. Sign in to your eazyBackup account and open the **e3 Object Storage** section from the left navigation, then select **Buckets**.
2. Click **Create Bucket**.
3. In the **Create Bucket** modal, enter a **Bucket Name** (for example, `veeambackup`). Use lowercase letters, numbers, and hyphens only.
4. Under **Select Bucket Owner**, choose the user that should own this bucket. Use **Root user** for a single-tenant setup, or select a dedicated storage user if you isolate workloads per client or department.
5. Set the protection options as follows:

   | Option                             | Setting | Why                                                                                |
   | ---------------------------------- | ------- | ---------------------------------------------------------------------------------- |
   | **Enable Versioning**              | **On**  | Object Lock requires versioning. Veeam also relies on versioning for immutability. |
   | **Enable Object Locking**          | **On**  | Lets Veeam write immutable (WORM) restore points via the S3 Object Lock API.       |
   | **Set a default retention policy** | **Off** | Leave this **off** so Veeam retains full control of object locks and retention.    |

{% hint style="info" %}
When you enable Object Locking, a **Set a default retention policy** panel appears. **Leave this toggle off.** Do not configure a Default Mode or Default Retention Period here — Veeam will apply its own retention to each object.
{% endhint %}

6. Click **Create Bucket**.

> **Tip:** If you only need a non-immutable repository (no ransomware protection), you can leave both Object Locking and the default retention policy off. For immutable backups, enable Object Locking but keep the default retention policy off, as shown above.

***

### Part 2 — Collect your connection details

You need three values to connect Veeam: the service endpoint, an access key, and a secret key.

1. In the **e3 Object Storage** section, open **Access Keys**.
2. Note the **Service URL** shown on the page, for example:

   ```
   s3.ca-central-1.eazybackup.com
   ```

   This is your S3 endpoint. Your data is hosted in Canada (`ca-central-1`).
3. Find the access key belonging to the bucket owner you selected in Part 1. If you need a new key pair, click **Create new key** and store the **Secret Key** somewhere safe — the secret is shown only once at creation time.

> Keep the access key and secret key confidential. Anyone with these credentials can read and write to your buckets.

***

### Part 3 — Add the object storage repository in Veeam

1. Open the **Veeam Backup & Replication** console.
2. In the bottom-left, click **Backup Infrastructure**.
3. Right-click **Backup Repositories** and choose **Add Backup Repository** (or click **Add Repository** in the ribbon).
4. In the **Add Backup Repository** wizard, select **Object Storage**.
5. Choose **S3 Compatible**.

#### Name

6. Enter a **Name** (for example, `eazyBackup e3 - veeambackup`) and an optional description. Click **Next**.

#### Account

7. In the **Service point** field, enter the e3 endpoint, prefixed with `https://`:

   ```
   https://s3.ca-central-1.eazybackup.com
   ```
8. In the **Region** field, enter:

   ```
   ca-central-1
   ```
9. Next to **Credentials**, click **Add** and enter:

   * **Access key:** your e3 access key
   * **Secret key:** your e3 secret key
   * An optional description

   Click **OK**, then **Next**. Veeam will validate the credentials and connect to the endpoint.

> If validation fails, confirm the endpoint includes `https://`, the region is `ca-central-1`, and the access/secret keys are correct and belong to the bucket owner.

#### Bucket

10. From the **Bucket** drop down, select the bucket you created in Part 1 (for example, `veeambackup`).
11. Under **Folder**, click **Browse** and either select an existing folder or create a new one (for example, `veeam-repo`). This folder is where Veeam stores its backup data within the bucket.
12. **To enable immutability (recommended for ransomware protection):**
    * Select **Make recent backups immutable for** and set the number of days you want restore points to remain locked (for example, `30`).
    * This works because Object Locking is enabled on the bucket. Veeam applies its own per-object retention — which is exactly why you left the bucket's default retention policy off in Part 1.
13. Click **Next**.

#### Mount server / review

14. Choose a **mount server** and the helper appliance settings, or accept the defaults, then click **Next**.
15. Review the **Summary**, then click **Finish**.

Your eazyBackup e3 bucket is now registered as a Veeam object storage repository.

***

### Part 4 — Use the repository

You can use the new repository in two common ways:

* **Direct backup target:** Point a backup job at the object storage repository directly (supported for many job types in v12+).
* **Capacity tier in a Scale-Out Backup Repository (SOBR):** Add the e3 repository as the **Capacity Tier** of a SOBR to offload or copy backups to Canadian object storage. This is the most common pattern and lets you keep recent restore points on local performance storage while tiering older or copied data to e3.

To add it as a capacity tier:

1. Go to **Backup Infrastructure > Scale-out Repositories**.
2. Create or edit a SOBR.
3. On the **Capacity Tier** step, select your eazyBackup e3 object storage repository.
4. Choose to **copy** and/or **move** backups to the capacity tier, and confirm the immutability period if you enabled it.

***

### Troubleshooting

| Symptom                                                   | Likely cause                                                      | Fix                                                                                                                            |
| --------------------------------------------------------- | ----------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| Credential validation fails                               | Endpoint missing `https://`, wrong region, or bad keys            | Use `https://s3.ca-central-1.eazybackup.com`, region `ca-central-1`, and verify the access/secret keys.                        |
| Immutability option is greyed out                         | Object Locking was not enabled when the bucket was created        | Object Lock must be enabled at bucket creation. Create a new bucket with **Enable Object Locking** turned on.                  |
| Restore points are not cleaned up / retention seems wrong | A bucket-level default retention policy is conflicting with Veeam | Confirm **Set a default retention policy** was left **off**. Recreate the bucket without a default retention policy if needed. |
| Cannot see the bucket in the drop-down                    | Credentials belong to a different user than the bucket owner      | Use the access key for the user who owns the bucket.                                                                           |

***

### Summary

* Create an e3 bucket with **Versioning** and **Object Locking** enabled.
* Leave **"Set a default retention policy" off** so Veeam controls object locks.
* Use endpoint `https://s3.ca-central-1.eazybackup.com` and region `ca-central-1`.
* Add the bucket as an **S3 Compatible** object storage repository in Veeam, enabling **"Make recent backups immutable for"** to get WORM protection.
* Use the repository directly or as a SOBR capacity tier.