Veeam Backup Integration for Microsoft 365 with Backblaze B2

Enable Backblaze B2

Before you begin: You must have a Backblaze B2 Cloud Storage account. If you already have a Backblaze account and the left navigation menu contains a B2 Cloud Storage section, your account is already enabled for Backblaze B2.

Sign in to the Backblaze web console.
In the user menu in the upper-right corner of the page, select My Settings.
Under Enabled Products, select the checkbox to enable B2 Cloud Storage.
Review the Terms and Conditions, and click OK to accept them.

Create a Bucket

Sign in to the Backblaze web console.
In the left navigation menu under B2 Cloud Storage, click Buckets.
Click Create a Bucket.
Enter a name for your bucket. Bucket names must be at least six characters and globally unique.
A message is displayed if your bucket name is already in use.
Select a privacy setting: Private or Public.
Note
You can change a bucket's privacy settings at any time.
Files that are in a private bucket require authentication to perform an action, for example, downloading.
Public buckets do not require authentication so you can easily share files. If this is your first time creating a public bucket, complete the following tasks to ensure that you have the correct permissions to create a public bucket:

1. Verify your email address.
2. Have a payment history on file, or use the credit card form to pay a small fee that is credited to your account balance.
If applicable, enable a Backblaze B2 server-side encryption key.
Enable Object Lock to restrict a file from being modified or deleted for a specified period of time.
Click Create a Bucket, and copy the value that is in the Endpoint field; you may need this value later.
Click Lifecycle Settings to control how long to keep the files in your new bucket.

Create an Application Key

Sign in to the Backblaze web console.
In the left navigation menu under B2 Cloud Storage, click Application Keys.
Click Add a New Application Key, and enter an app key name.
You cannot search an app key by this name; therefore, app key names are not required to be globally unique. Key names are limited to 100 characters and can contain letters, numbers, and "-", but not I18N characters, such as é, à, and ü.
Select All or select a specific bucket in the Allow Access to Bucket(s) menu.
Optionally, select your access type (Read and Write, Read Only, or Write Only).
Optionally, select Allow List All Bucket Names.
This option is required for the B2 Native API b2_list_buckets and the S3-Compatible API S3 List Buckets operations.
Optionally, enter a file name prefix to restrict application key access only to files with that prefix.
Depending on what you selected in step #4, this limits application key access to files with the specified prefix for all buckets or just the selected bucket.
Optionally, enter a positive integer to limit the time, in seconds, before the application key expires.
The value must be less than 1000 days (in seconds).
Click Create New Key, and note the resulting keyID and applicationKey values.

Note

When you create a new app key, the response contains the actual key string, for example N2Zug0evLcHDlh_L0Z0AJhiGGdY. You can always find the keyID on this page, but for security, the applicationKey appears only once. Make sure you copy and securely save this value elsewhere.

Restricted Keys and Object Lock

If you want Veeam to use a bucket-restricted application key on a bucket that has Object Lock enabled, the key must have the necessary permissions for Object Lock. You can accomplish this in one of two ways.

Add Object Lock to a New Bucket

Enable Object Lock on the bucket that you want to use.
Create a new bucket-restricted application key.
Configure Veeam to use the application key.
Set the bucket as a destination.

Add Object Lock to a Bucket Already Used by Veeam

Enable Object Lock on the bucket that is already used by Veeam.
Create a new bucket-restricted application key.
Configure Veeam to use the new application key on the bucket.

Configure Veeam Backup for Microsoft 365

Open Veeam Backup for Microsoft 365.

In the left navigation menu, click Backup Infrastructure.

Click Object Storage Repositories, and select Add Object Storage.

Enter a name for your object storage repository, and click Next.

Select S3 Compatible for the object storage type, and click Next.

Select S3 compatible storage system settings.

Enter the S3 service endpoint (for example, s3.us-west-002.backblazeb2.com).
Enter the data center region (for example, us-west-002).
Click Manage cloud accounts to add your credentials.
Click Add, enter your Backblaze B2 application key and key ID, and click OK.
Click OK, and click Next.

Select your desired bucket, create a folder inside of the bucket for your repository, and click Finish.

Note

Select Make backup copies immutable for the entire duration of their retention policy to ensure the protection of backup copies against accidental data deletions and malware activity. This setting is required for buckets that have versioning enabled (all Backblaze B2 buckets have versioning).