---
title: "Wasabi Covert Copy With Veeam v12 Scale-Out Backup Repository (SOBR)"
slug: "wasabis-covert-copy-feature-with-veeam-v12-sobr"
updated: 2026-06-08T17:39:40Z
published: 2026-06-08T17:39:40Z
canonical: "docs.wasabi.com/wasabis-covert-copy-feature-with-veeam-v12-sobr"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wasabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Wasabi Covert Copy With Veeam v12 Scale-Out Backup Repository (SOBR)

Wasabi is a member of Veeam's cloud partner ecosystem. Wasabi has worked with Veeam closely to offer both a seamless implementation and a smooth transition to cloud storage. For more information on how Veeam works with Wasabi, refer to the [Veeam and Wasabi Solution Brief](https://wasabi.com/partner/integrations/veeam).

This article describes the procedure to use Wasabi [Covert Copy](https://docs.wasabi.com/docs/covert-copy-buckets) to protect a “Golden Copy” of Veeam backups for use in case of a disaster that affects other copies of backups.

> Note that Covert Copy is a static, one-time copy, not an ongoing replication.

For ongoing replication of backups, refer to [Wasabi Object Replication With Veeam v12 SOBR](https://docs.wasabi.com/docs/how-do-i-use-wasabi-object-replication-with-veeam-v12-sobr).

This article covers only **Scale-Out Backup Repositories (SOBRs)**. Refer also to [Direct to Object Storage](http://wasabis-covert-copy-feature-with-veeam-v12-direct-to-object-storage) and [Backup Copy Jobs](https://docs.wasabi.com/docs/wasabis-covert-copy-feature-with-veeam-v12-backup-copy-job)**.**

> The data restoration process is handled by your specific backup software application. As there are many potential variables that will affect your unique environment, Wasabi strongly recommends that you seek the guidance of your backup software's technical support team in the event that you encounter difficulty or have application-specific inquiries.

## Requirements

- Veeam Backup and Replication (VBR) v12 is installed and licensed. This solution was tested with v12.3.
- You have an active Wasabi Hot Cloud Storage account.
- You have an active Veeam Scale-Out Backup Repository with the capacity tier pointing to a Wasabi bucket.
- Existing backups reside in a Wasabi object-locked (immutable) bucket. The Versioning and Object Lock features must have been previously enabled on the bucket.
- Multi-Factor Authentication is enabled for the Wasabi account root user. See [MFA (Multi-Factor Authentication)](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device) for details on how to enable and use MFA on your account.

## High-Level Steps

Follow the high-level steps below to implement [Covert Copy](https://docs.wasabi.com/docs/covert-copy-buckets) for your Veeam backups. These are detailed further in the sections below.

1. Enable Multi-User Authorization (MUA) on your account and configure Covert Copy activities that your security contacts approve.
2. Pause Veeam backup activities by disabling backup jobs pointing to Wasabi.
3. Enable Covert Copy on your bucket containing Veeam backups.
4. Wait for your Veeam backups to be copied to the Covert Copy bucket.
5. Resume Veeam backup activities by enabling backup jobs pointing to Wasabi.
6. In the case of a disaster, a Veeam repository pointing to the Covert Copy bucket may be created and a restore performed. This will require that a Wasabi Support ticket be created to place the Covert Copy bucket in Restore Mode and make it visible to Veeam.

## Enabling Multi-User Authorization (MUA) on Your Account

1. Log in to the [Wasabi Console](https://console.wasabisys.com/).
2. Click **Security** in the navigation panel. Then, click **MUA**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2026-02-26_at_2_02_07 PM.png)
3. If you have existing security contact(s), follow this step. If you do not have existing security contact(s), follow Step 4.
  1. Click the three vertical dots under **Action**. Then, click **Edit Activities**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2026-02-26_at_2_03_20 PM.png)
  2. Click the down arrow under **Activities**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-06_at_2_34_06 PM.png)
  3. Check to select the **Delete Covert Copy Bucket**and **Access Covert Copy Bucket**options.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_35_01 AM(1).png)
  4. Click **Continue**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-XDE90RA9.png)
  5. Enter your Multi-Factor Authentication (MFA) code. Then, click **Send**. This will send an invitation to your security contact, who must approve within 15 minutes for the changes to take effect.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_44_41 AM.png)
  6. Repeat Step 3 for your other security contact(s).
4. If you do not have any security contacts:
  1. Click **Add Security Contact**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2026-02-26_at_2_02_07 PM-2.png)
  2. Enter the security contact’s email address and select all activities.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-AO1KLE1P.png)
  3. Click **Continue**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_44_01 AM.png)
  4. Enter your Multi-Factor Authentication (MFA) code and click **Send**. This will send an invitation to your security contact, who must approve within 15 minutes for the changes to take effect.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_44_41 AM(1).png)
  5. Repeat Step 4 for your other security contact(s).

## Pausing Veeam Backup Activities

1. Log in to your Veeam console.
2. Disable the backup job(s) pointing to Wasabi. Go to **Home**> **Jobs**> **Backup**, and click on the backup job. Click **Disable**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_12_33_31 PM.png)
3. Wait for current backup jobs to complete.

## Enabling Covert Copy

1. Log in to the [Wasabi Console](https://console.wasabisys.com/).
2. Click **Buckets**, then click the three vertical dots next to the bucket containing your Veeam backups.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_50_16 AM.png)
3. Click **Covert Copy**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_50_37 AM.png)
4. Enter the region for the Covert Copy bucket. For the other settings, it is recommended to keep the default values as shown in the screenshot below. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_53_42 AM(1).png)

> [!NOTE]
> This configuration example discusses the use of Wasabi's us-west-2 storage region for the Covert Copy bucket. For a list of regions, see [Available Storage Regions](https://docs.wasabi.com/docs/en/where-is-my-data-stored-and-how-are-wasabis-storage-regions-secured?highlight=regions#available-storage-regions). The region must be in the same continent as the primary bucket.
5. Enter your MFA code on the next screen. Then, click **Create Bucket**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-PMTUBBR2.png)
6. Move the slider to enable **Show Covert Copy Buckets**on your list of buckets. The Covert Copy Status will show “In Progress” until all objects in the source bucket have been copied to the Covert Copy bucket.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_11_57_01 AM.png)
7. There is no estimated time for how long the Covert Copy process will take, as there are many variables affecting it, such as how many objects are in the source bucket. It may take a significant amount of time. When the process is complete, the Covert Copy Status will show “Covert Copy Completed.”

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_12_59_01 PM.png)
8. (Optional) To see the data in the Covert Copy bucket, click the three vertical dots next to the bucket on the right side of the Wasabi console. Click **Request Access**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-MW87J5KC.png)
9. Click **Send Request** to request permission from your security contact(s) to view the Covert Copy bucket contents.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_04_29 PM.png)
10. The security contact(s) have 15 minutes to approve the request. After the security contacts approve the request, you may view the contents of the bucket for 24 hours. Go to **Buckets** and enable **Show Covert Copy Buckets**. Click on the name of the Covert Copy bucket.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot 2025-11-03 at 4.07.56 PM.png)

## Resuming Veeam Backup Activities

1. Log in to your Veeam console.
2. Enable the backup job(s) pointing to Wasabi. Go to **Home**> **Jobs**> **Backup**, and click on the backup job. Click **Disable**(there is no enable button).

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_12_40_14 PM.png)

## In Case of Disaster

1. In the case of a disaster, the root user may submit a Wasabi Support ticket by emailing [support@wasabi.com](mailto:support@wasabi.com). In the email, request Restore Mode and include the name of your Covert Copy bucket. After Support enables Restore Mode, the Covert Copy bucket will be visible to Veeam and will allow a restore to be performed from backups in the bucket.
2. In the Veeam console, go to the **Backup Infrastructure**tab, click **Backup Repositories**, and then click **Add Repository**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_09_02 PM.png)
3. Click **Object Storage**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_09_20 PM(2).png)
4. Click **Additional Providers**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_10_44 PM(1).png)
5. Click **Wasabi Cloud Storage**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_10_59 PM.png)
6. Name the repository and click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_11_25 PM.png)
7. Enter the region your Covert Copy bucket is in and select your Wasabi root user credentials (access and secret keys). You may add them if they do not appear in the drop-down menu by clicking **Add**. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_12_18 PM(1).png)
8. Click **Browse** next to the Bucket field.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_12_34 PM(1).png)
9. Select your Covert Copy bucket and click **OK**.
10. Click **Browse** next to the Folder field.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_13_51 PM.png)
11. Select your existing top-level folder (named Veeam in this example) and click **OK**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_14_14 PM.png)
12. Check the **Make recent backups immutable for** option, and set the value to 30 days. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_14_35 PM(1).png)
13. On the next screen, adjust the Mount server and/or Instant recovery write cache folder as needed (the defaults are shown in this example). Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_15_08 PM.png)
14. Select the two checkboxes on the Review screen to search the repository for existing backups. Click **Apply**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_15_30 PM.png)
15. Click **Next**on the following screen when the button becomes available (it may take a short time).

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_16_28 PM.png)
16. Click **Finish**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_16_54 PM.png)
17. Wait for the Status to show “Success” and then click **Close**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_18_41 PM.png)
18. Select the Covert Copy repository and click **Import Backups**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_35_47 AM.png)
19. Click **Yes**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_36_11 AM.png)
20. Select the **Import guest file system index**option. Click **OK**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_36_47 AM.png)
21. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_38_19 AM.png)
22. Click **Finish**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_38_42 AM.png)
23. Wait for the status to show “Success” and then click **Close**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_39_26 AM.png)
24. On the Home tab, click **Backups**, and then **Capacity Tier (Imported)**. Under the job that created the backup, select the virtual machine or other disks, files, and so on that you want to restore (a VM is selected in this example). Since a VM is being restored in this example, click **Entire VM**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_11_41_15 AM.png)
25. Click **Point**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_20_49 PM.png)
26. Select the appropriate restore point under your Covert Copy repository and click **OK**. Note that Veeam may not display the name of the repository. Do not select a restore point that lists the name of the SOBR as this will restore from the SOBR, not the Covert Copy import. See the example below for details.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-13_at_12_04_56 PM.png)
27. Click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_21_51 PM.png)
28. Select the appropriate option on the Restore Mode screen and click **Next**. In this example, the original location is being restored. If you restore to a new location, it is recommended (on a later screen) to disconnect it from the network to avoid IP address conflicts.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_22_48 PM.png)
29. Optionally, enter a restore reason and click **Next**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_23_19 PM.png)
30. Click **OK** on the message window. (Click **Show VMs**for more detail.)

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_24_25 PM.png)
31. Click **OK** on the next message window. (Click **Show VMs**for more detail.)

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_24_45 PM.png)
32. Review the settings and select **Power on target VM after restoring**. Click **Finish**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_25_06 PM.png)
33. Wait for the status to show “Success.” This can take significant time depending on the size of the VM, your Internet connection speed, Veeam server resources, and so on. Click **Close**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/Screenshot_2025-11-03_at_4_28_44 PM.png)
34. Email Wasabi Support at [support@wasabi.com](mailto:support@wasabi.com) to request that Restore Mode be disabled for your Covert Copy bucket.