---
title: "Wasabi Covert Copy With HYCU"
slug: "wasabi-covert-copy-with-hycu"
updated: 2026-06-02T16:11:06Z
published: 2026-06-02T16:11:06Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wasabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Wasabi Covert Copy With HYCU

Wasabi has been validated for use with [HYCU](https://www.hycu.com/), which is a leading multi-cloud backup as a service provider. To set up Wasabi with your HYCU application, follow the instructions below.

> Your specific backup software application handles the data restoration process. As many potential variables can affect your unique environment, it is strongly recommended that you seek guidance from your backup software's technical support team if you encounter difficulty or have application-specific inquiries.

This article describes the procedure to use Wasabi [Covert Copy](https://docs.wasabi.com/docs/covert-copy-buckets) to protect a Golden Copy of HYCU backups for use in case of a disaster that affects other copies of backups.

> Covert Copy is a static, one-time copy, not an ongoing replication.

## Prerequisites

- Active Wasabi Cloud Storage account
- Active HYCU backup account
- HYCU software configured and connected to the source data for protection
- Multi-factor authentication (MFA) is enabled for the Wasabi account root user. See [MFA (Multi-Factor Authentication)](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device) for details on how to enable and use MFA on your account.
- Multi-user authentication (MUA) is enabled for the Wasabi account root user. See [MUA (Multi-User Authentication)](https://docs.wasabi.com/docs/adding-security-contacts) for details on how to enable and use MUA.

## Configuring for Covert Copy

If your HYCU backup plans are not going to a Wasabi version-enabled bucket(s), you will need to create the bucket(s).

1. Log in to your Wasabi Console and create a new bucket.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-YGFDNUXY.png)
2. Toggle **Bucket Versioning** on and continue through the prompts until you create the bucket.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-CPU4NB3T.png)
3. Return to your HYCU console and add that bucket as one of your Targets.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-7I7022N3.png)
4. Click **Add**. Select **Amazon S3 / S3 Compatible**.
5. Click**Next.**

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-TELRD4QP.png)
6. Give the Target a unique **Name** and**Description**.
7. Toggle the**Enable Compression** option.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-OVXT1AZT.png)
8. Input the following information:

> This configuration example discusses the use of Wasabi's us-east-1 storage region. To use another Wasabi storage region, use the appropriate [Service URLs for Wasabi's Storage Regions](https://docs.wasabi.com/docs/what-are-the-service-urls-for-wasabis-different-storage-regions).

> The HYCU application REQUIRES the service endpoint to be prepended with a transport definition (https).
  - **Size:**Specify the maximum size for your bucket.
  - **Service Endpoint:** Enter the service URL for the region your bucket is in (for example, https://s3.us-east-1.wasabisys.com). For more information, review the notes below.
  - **Storage Class:** Leave this as Default.
  - **Bucket Name:** Input the name of the versioned bucket you created.
  - **Access Key ID:** Input your Wasabi access key.
  - **Secret Access Key:** Input your Wasabi secret key.
9. Click **Save**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-11-24 102903.png)

You will see your bucket listed in the Targets list.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-DYRNJQ0L.png)
10. You will want to create a specific policy for this new backup target. To assign the Wasabi target to a policy, navigate to **Policies** on the left side pane. Select either a desired pre-existing policy and click **Edit,** or click **New**to create a custom policy.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-RQ7VYZY8.png)
11. Once in the New Policy window, provide a unique **Name** and **Description** for the policy.
12. Set the **Backup**options, as needed (such as how often, recovery window, and retention period).
13. Set Backup Target Type as **Target**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-GZY8T7BU.png)

### Starting a New Backup Chain Setting

1. Continuing from the previous instructions, select when you want a new Backup Chain to be started by selecting **Threshold %**or **Chain Length**. If you select both options, a new chain will be started whenever the first value is exceeded.

> This setting can affect the size of your buckets and your storage usage.

Refer to [Backup Expirations](https://support.hycu.com/hc/en-us/articles/360000975460--TARGETS-When-do-HYCU-backups-expire) for more information.
  - **Backup Threshold:** A new backup chain is started when the percentage of the data changes since the last Full backup exceeds the specified value. The default value is 25%. This can lead to more Full backups during your specified retention period and increased storage.
  - **Backup Chain Length:** A new backup chain is started when the number of Full and subsequent incremental backups in a chain exceeds the specified value. The default value is 7. To keep the backup storage size to a minimum, set the Backup Chain length to the same value as the Retention.

The ideal Backup Chain Threshold or Chain Length setting can depend on multiple factors, such as Retention Policy, RTO, Storage Capacity, and Data Change Rate. Consult with HYCU Support to optimize these settings based on your environment variables. You can refer to [HYCU's Policy Explanation](https://support.hycu.com/hc/en-us/articles/360009412739-Anything-special-about-the-policies) for further insight. For details on the configuration elements, reference Setting up an AWS S3/Compatible target in the [HYCU User Guide](https://download.hycu.com/ec/v4.9.0/help/en/HYCU_UserGuide.pdf).

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-1758317430676.png)
2. Click **Save**.
3. Assign the policy to the virtual machines that must be protected. To do so, navigate to **Virtual Machines** on the left pane. Select the required **Virtual Machines**. Click **Set Policy.**

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-11-24 104518.png)

The backup process will begin automatically.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-O86NC9JU.png)

## Creating a Covert Copy

Once the backup has completed, depending on how often your backups are set to run and/or how big your dataset size is, you may want to pause your backup plans during this time to run the Covert Copy job without new data being placed into the bucket during replication.

1. After you have done that, open your Wasabi Console and log in.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-IQ7MQONX.png)
2. Go to the **Buckets list**and search for your HYCU version-enabled bucket.
3. Click the **Actions** option (three dots) to the right of the bucket name.
4. Select **Covert Copy.**

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-XSEUAGZJ.png)

If you did not enable MUA, MFA, or Versioning, an error will result for the option that needs to be enabled. In this example, Versioning was not enabled and this must be fixed before you continue:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-47Q3B9YY.png)
5. Select the **Region** in which you want to create your Covert Copy bucket.
6. Because this is a new Full backup, select **All versions** and **All objects**.
7. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-E5DUCMXZ.png)
8. Input your MFA code. Click **Create Bucket**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-8LAGNFWB.png)
9. Monitor the status of the copy job. Click **Actions**(three dots) and select **Settings**to view the job progress.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-NUE3MOBH.png)
10. Once the job is complete, the status will update to Covert Copy Completed.

Your Golden Copy of data is protected and ready to be restored in the event of a disaster.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-W21RGEIY.png)
11. Viewing inside the bucket will require MUA approval. If you click on the bucket name, you will see the following prompt. To proceed, click **Send Request** and wait for the request to be approved.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-FKVLXAH7.png)

> Standard Bucket access approved by the MUA request provides the ability to view the data inside the bucket and retrieve data if necessary but just not in high quantities or viewable by the backup provider. If you need to restore datasets, you will need to open a Support ticket to enable Restore Mode so that the bucket can be seen by the backup provider.

## Restore Mode

> To restore your data from a Covert Copy bucket with HYCU, you will need to spin up another HYCU Backup Controller instance that is running in Recovery Mode. For instructions on how to do that, refer to the [HYCU User Guide](chrome-extension://efaidnbmnnnibpcajpcglclefindmkaj/https://download.hycu.com/ec/v5.1.0-2980/help/en/HYCU_UserGuide.pdf) under the section describing how to deploying a recovery HYCU backup controller. You will also need to make sure your previous Hypervisor or Source was added so that the data can be restored to its original location.

To restore your data from the Covert Copy bucket:

1. Contact [Wasabi Support](mailto:support@wasabi.com) so they can set your Covert Copy into a Restore Mode-only capacity.
2. Once they have notified you that the bucket is in Restore Mode, you will need to go to the HYCU Backup Controller running in Recovery Mode and import the Target Wasabi Covert Copy Bucket.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-3R8JT0RB.png)
3. Click **Import**.
4. Fill in the following information:
  - **Type:** From the drop-down, select **Amazon S3 / S3 Compatible**.
  - **Service Endpoint:** Specify the Wasabi URL where your Covert Copy bucket is located.
  - **Bucket Name:** Get the Covert Copy bucket name from your Wasabi Console.
  - **Access Key ID:** Input your Wasabi access key.
  - **Secret Access Key:** Input your Wasabi secret key.
5. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-4XAMQ29M.png)
6. Verify the imported information. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-4OLX2J08.png)
7. Click **Import**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-11-24 134410.png)
8. Click **Yes**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-L66VHNRO.png)
9. You can monitor the status of the job and wait for it to complete.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-TBJBRV08.png)
10. After the import has completed, you can check your virtual machines that were a part of your backup and verify that the Restore points are listed.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-GHV64TTC.png)
11. Click **Restore**and choose the options you want to restore.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-6CX7JIYU.png)
12. After you complete all Restore steps for your data, delete the policy and target from the HYCU Backup Controller environment.
13. Once you have deleted the Covert Copy references in HYCU, contact [Wasabi Support](mailto:support@wasabi.com) to turn off Restore Mode on your bucket so that it is hidden again.

## Refreshing Your Covert Copy

By default, your Covert Copy bucket will auto-renew its Object Lock retention period every 30 days. To keep your Golden Copy of data in line with your most recent backups, it is recommended to perform a new Covert Copy job every 30 days.

If you want to replace your old Covert Copy bucket with your new bucket, you will need to turn off Auto Renewal.

1. Log in to your Wasabi Console.
2. Navigate to your buckets and turn on the toggle for **Show Covert Copy Buckets**.
3. Click **Actions**(three dots) and select **Settings**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-W3YZJ9T4.png)
4. Click **Manage Retention**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-AIKV0RC5.png)
5. Toggle off **Auto-Renewal**.
6. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-9SDQMTMU.png)
7. Input your MFA code. Click **Save Settings**.
8. You will see the Auto-Renewal set to Disable and the Retention Countdown timer start.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-8KGQZHL0.png)
9. You can take a new Covert Copy snapshot of your HYCU buckets and have the latest Golden Copy of data from which to restore.
10. If you wish to delete a previous Covert Copy bucket once it is counted down as expired, follow the instructions in [Deleting a Covert Copy](https://docs.wasabi.com/docs/covert-copy-deleting-and-restoring-a-covert-copy#deleting-a-covert-copy).