Check SSD Life on Mac

 Each SSD came with TBW life spend. Today we are going to explore on free tool to check your SSD TBW.

To do so,

1. Download smartmoontools from https://www.smartmontools.org/wiki/Download

Click on Install the OSX/Darwin package. Download and install on your mac devices

2. Check which disk using "diskutil list" command. Execute from your Terminal app

My disk is disk0

3. Navigate to tool path

cd /usr/local/sbin

4. Execute command ./smartctl -a /dev/disk0

To identify current TBW (Terabytes written) usage, read

• Data unit Read
• Data Unit Written

My result is

• Data unit Read -34.1 TB
• Data Unit Written - 13.5 TB
• Available Spare Threshold: 99%

This unit is M1 Mac Mini with 256GB SSD. TBW is 150 TBW,

Therefore my SSD is still healthy. 

To avoid internal SSD from dying too fast (especially M1 or later model which cannot replace SSD), advise using an external SSD to keep those data that are frequent changes (delete, read, write, etc).

Hope this guide help!

Covid 19 + Experience on 2022

Came back from Vietnam on a business trip on 9 Dec 2022. 

On 10 Dec 2022 - No symptoms and healthy

On 11 Dec 2022 - Feeling unwell, blurred mind, and having a headache. In the afternoon, run a body temperature test and covid test.

Hit a jackpot!. Tested positive for covid 19. No choice needs to cancel the Indonesia business trip which is scheduled on Monday. Here is my record of the symptoms

11 Dec 2022 

Tired, nose blocking, fever reaches 38.8 Celcius

End up in bed sleeping the whole day. However, it is reckless sleep

Took medicine - Panadol for fever, Lian Hua, Qing Wen capsule, Vitamin C 

12 Dec 2022

Same on 11 Dec. But with headache

Reckless sleep

13 Dec 2022

Start to have a sore throat, and cough, fever on and off. The temperature within 37.5 C

Reckless sleep continues. 

Midnight sore throat is worse. so encouraged to take a Strepsil when it hurt during sleep.

14 Dec 2022

Fever, sore throat, coughing, flu

15 Dec 2022

Feeling much better however still got a slight fever, sore throat, and coughing.

Ran a covid test on day 4.

Tested negative. Now just need some extra time to fully recover. Guess what? I have lost 4kg of weight during this sickness.

16 Dec 2022

Able to start work. Can do light work but not those heavy-duty activities.

Cough, Sore throat still exist. Should be able to recover in the next few days

That's all on my journey on Covid+

Cannot Run Nested Virtualization on Windows 11 | "Virtualized AMD-V/RVI is not supported on this platform"

Recently I use upgraded both my mini pc to Windows 11. Everything running smoothly including Vmware Workstation with a few VMs running. However, I found an issue when want to run nested virtualization - Hyper-V.

Error message:

"Virtualized AMD-V/RVI is not supported on this platform"

Here is my tweak to make it work:

1. Uninstall Windows Hypervisor Platform

Go to Control Panel | Programs and Features | Click Turn Windows features on or off

Uncheck the Windows Hypervisor Platform

2. Edit Local Group Policy

Type mmc | Add Group Policy Object | Local Computer

Go to Computer Configuration | Administrative Templates | System | Device Guard | Click on Turn on virtualization Based security | Set to Disable 

Then restart your machine and test run nested virtualization.

That should do the trick!

How to Reduce Memory Usage on Windows 11?

I just upgraded my both machines from Windows 10 to Windows 11. I find out that initial memory after boot up has used around 6GB memory. You can view it from Task Manager.

Here is my fine-tuning and success to reduce around 3GB of memory.

1. Disable start-up program. Microsoft runs a few applications in the background.

-> Use Task Manager | Start up | Disable unwanted programs such as Cortana, MS Team, Onedrive

2. Go to System Properties | Advanced Tab | Settings

-> Under Visual Effect, set Adjust for best performance

3. Modify the registry key

-> Type Regedit

-> Navigate to Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management

Set ClearPageFileAtShutDown to 1

Restart the machine

Check again the memory usage using Task Manager. Do you get from 6GB to around 3GB? 

Hope this trick helps to reduce your memory usage when upgrading to Windows 11.

Note: These settings are applicable after the upgrade to Windows 11 or the initial setup. Not apply when you install more program and run more on start up application.

Unable to Connect to Google Cloud SQL

 You've just created a MySQL on Google Cloud. However, was not able to access it via MySQL Workbench.

Tried to enable Private IP and use VPC and Public IP, but still failed.

Workaround is

1. Go to Connections > Networking > Public IP

2. Add Network | Put a name

3. Put CIDR of your public network. Example: 34.124.242.59.

Enter:

34.124.242.0/24

4. Save

5. Try accessing again using MySQL Workbench.

Another trick.

1. Go to Connection > Security

2. Check Allow only SSL Connection

Wait for changes to apply

3. Set again root password

Wait for changes to apply

4. Uncheck Allow only SSL Connection

Wait for changes to apply

5. Test access again

Unboxing Minisforum HM80 and Assembling Parts

 My new lab machine setup. Enjoy

Parts:

• 2 TB SSD from Crucial
• 512 GB SSD from Kingston
• 1 ADATA NVME 1 TB
• 2 X 32GB RAM ADATA PC3200 SODIMM (JEDEC, 1.2v, CL22)
• Acasis External Casing for SSD - Support RAID configuration.

Damage control on this purchase:

• HM80 - USD 300 ( RM1425 - with conversion 4.75.Initial price USD 339, minus refund on customs charges)
• 2 TB SSD - RM535
• 64GB RAM - RM750
• Acasis External SSD casing - RM 69
• The rest components is reuse from old machine

Total = RM2779

How to Apply Sirim Import Permit?

Recently I bought a mini pc from a trusted seller: Minisforum. I bought HX90 in 2021, love the beast, and still running strong. 

My two old machines running AMD 2400G and 2200GB (both 64GB RAM) had problems and the motherboard is finally faulty.

Then I saw Minisforum has a Halloween Sale on Oct 2022 & I decided to order HM80 as a replacement. 

Here is my UPS tracking status:

12/11/2022 7:38 A.M.	On the Way Import C.O.D. (ICOD) charges have been paid or billed.
12/11/2022 4:20 A.M.	UPS has received the information needed to submit your parcel for clearance.
12/11/2022 4:19 A.M.	UPS has received the information needed to submit your parcel for clearance.
12/11/2022 3:54 A.M.	Import charges are due for this parcel. Select Pay Now (where available) or pay at delivery.
12/11/2022 3:54 A.M.	UPS initiated contact with receiver or importer for clearance information. Once received, UPS will submit for clearance.
11/11/2022 10:40 P.M.	Warehouse Scan Sepang, Malaysia
10/11/2022 10:37 P.M.	Warehouse Scan Sepang, Malaysia
10/11/2022 10:26 A.M.	UPS initiated contact with receiver or importer for clearance information. Once received, UPS will submit for clearance. Sepang, Malaysia
09/11/2022 10:40 P.M.	Warehouse Scan Sepang, Malaysia
09/11/2022 10:15 A.M.	UPS initiated contact with the sender to obtain clearance information. Once received, UPS will submit for clearance. Sepang, Malaysia
08/11/2022 10:38 P.M.	Warehouse Scan Sepang, Malaysia
08/11/2022 10:30 A.M.	Import Scan Sepang, Malaysia
08/11/2022 9:52 A.M.	Arrived at Facility Sepang, Malaysia
08/11/2022 8:00 A.M.	Departed from Facility Ho Chi Minh, Viet Nam
08/11/2022 7:46 A.M.	Your parcel is pending release from a Government Agency. Once they release it, your parcel will be on its way. / The package is at the clearing agency awaiting final release.
08/11/2022 7:46 A.M.	The package is at the clearing agency awaiting final release.
08/11/2022 6:44 A.M.	Departed from Facility Ho Chi Minh, Viet Nam
08/11/2022 5:47 A.M.	Arrived at Facility Ho Chi Minh, Viet Nam
08/11/2022 4:15 A.M.	Departed from Facility Shenzhen, China
08/11/2022 1:55 A.M.	Arrived at Facility Shenzhen, China
07/11/2022 10:40 P.M.	Departed from Facility Changi, Singapore
06/11/2022 11:33 P.M.	Arrived at Facility Changi, Singapore
06/11/2022 8:08 P.M.	Departed from Facility Chek Lap Kok, Hong Kong
06/11/2022 6:05 P.M.	Package is delayed in transit. Delivery will be rescheduled. Check back or signup for UPS My Choice® to receive updates. Chek Lap Kok, Hong Kong
05/11/2022 7:01 P.M.	Export Scan Chek Lap Kok, Hong Kong
05/11/2022 7:01 P.M.	Origin Scan Chek Lap Kok, Hong Kong
29/10/2022 4:56 A.M.	Label Created Shipper created a label, UPS has not received the package yet. Hong Kong

When the mini pc arrived on 8 Nov 2022, it was held by Malaysia Customs and required an import permit.

Below is my experience on how to apply for Sirim Import Permit and hopefully can help those individuals who would like to apply themselves rather than go through 3rd party agent.

Here are my final charges to import the computer

• Import Permit = RM40
• sales tax charges RM81.61 
• disbursement fee RM50.00
• Import declaration Surcharges RM43.00.
• Total RM214.61 [Malaysia Ringgit]

Configure DR for Your Container Using Kasten

To ensure high availability and low RTO for virtual machines, we will use VM Replication.

How about a container?

Even if containers can easily be re-deploy, we still need to configure disaster recovery. View below video on how to do so using Kasten

Video:- Recover Your Container Using Kasten v5

 The next video is to perform recovery for your container when the disaster happened.

Video - Backup Kubernetes Container Using Kasten v5

In a previous post, we talked about the basic configuration for Kasten.

It is time to start looking at the backup of the Kubernetes container.

My Best App for Apple Watch SE 2022

 Here is a compilation of the Apple Watch that I'm using:

To download, open Apple Store

a) Strava

to record workout activity

b) Mobile-Pocket

to create a card for payment. Only suitable for those using bar code. Once you have created a card with a scan bar code, you can use it on an apple watch.

c) Sleep ++

good to track your sleeping pattern.

d) WatchChat

to use whatsapp on AppleWatch

e) Awwallet

to use grab e-wallet for payment. You can use apple watch to make payments or receive money.

Guide:- https://awwallet.vercel.app/grabpay/setup

f) Microsoft Authenticator

MFA support. You can approve/reject from apple watch

g) WatchTube

watch youtube on an apple watch with Bluetooth earphones. Best use during commuting public transport.

h) Setel

Pay petrol on one tap features. It only works for Petronas petrol station in Malaysia

Video: Recover Kubernetes Container Using Kasten

 In the below video, you will learn how to recover Kubernetes container by using Kasten

New Gadget: Apple Watch SE 2022 44mm

Today I just received my new Apple Watch SE 2022 - 44mm from Apple Store. Ordered online and took 4 days to ship from Singapore to Malaysia.

 Let's do some unboxing.

1st step: Charging first before doing a sync with iPhone.

2nds step: Sync with iPhone & update with the latest firmware 9.0.2

3rd step: Installed Spigen screen protector, tough armor, and Nike Sport Loop Band to protect Apple Watch

4th step: Configure Apple Wallet.

Currently, Malaysia only support 3 banks: Maybank (Credit and debit card), Ambank (credit card), and Standard Chartered (credit card)

Tested working!

5th step: Configure Grab Ewallet

Tested working!

6th step: Configure Bluetooth to pair with my earphone & test watching Youtube on my tiny watch.

7th step: Configure unlock the device with Apple Watch

Tested supported :

a) Mac Mini - M1

b) Macbook Pro

Tested unsupported:

a) Ipad Air 4

b) iPhone SE 2022

Most likely due to these devices using Touch ID. No option to enable unlock with Apple Watch.

How about my accessories? 

Overall love my new gadget. :)

Video : Backup Container Using Kasten

 In this post, we will explore on how to back up kubernetes container using Kasten.

Please view the below video:

Video:- Basic Configuration on Kasten to Protect Container

We have completed the installation of Kasten. If you missed the previous step, please click here.

The next step is to do basic configuration on Kasten, to do so please feel free to view below video

Video - Install Kasten v5

In this video, we look into how to check your Kubernetes environment first before installing Kasten K10 ver5.09. Installation still remained the same since ver2.

Do check out the below video

Feb Oct -Dec 2022 Courses: Public Cloud

 Would like to expand your skill in the public cloud?

You can get these courses free from A Cloud Guru

• AWS Certified Cloud Practitioner
• AZ-900 Microsoft Azure Fundamental
• Google Cloud Digital Leader

#CloudHappy

Click here:- https://www.pluralsight.com/offer/cloud-certification

Free Oct 2022 Courses: Kubernetes

 Hi visitor,

If you're interested to learn about Kubernetes, this month (Oct 2022), Pluralsight is giving away 5 free courses. You can try them at no cost.

These are the 5 courses:

• Getting started with Kubernetes
• Kubernetes Installation and Configuration Fundamental
• Kubernetes for Developers: Core Concept
• Managing the Kubernetes API Server and POD
• Leveraging Advanced Features on the Google Cloud Kubernetes Engine

Hurry, just click this link:

https://learn.pluralsight.com/resource/free-course/free-monthly-courses 

Enjoy and Happy Learning!

How to Calculate Tape Consumption on Veeam?

 In this post, we will look at how to calculate the tape required on veeam.

Before we proceed, let's understand the tape LTO size

For example LTO9, one tape size should be 18 TB. Always refer to native raw when doing tape calculations. Veeam has compression & dedupe when backup, so when storing data into a tape you should refer to native raw.

Next is using the calculator here:- https://calculator.veeam.com/vbr/

It is the same calculator that we use to calculate the backup repository. We just need to do some tweaks when calculating tape consumption.

• Put source size: 100 TB [our example]
• scope of work - set to 1
• Turn off refs

Example: 7 day, 4 week, 12 month, 3 years

Retention, put

• daily - 7
• weekly -3
• monthly - 1
• yearly - 1

End result

Put into a table and start to divide according to LTO 9. Example for daily - 31/18 = 2 [round up]

The total tape required for 3 years is 82 tapes.

I did a video explaining how I came out with the above tape. Please watch the video below:

How to Sync Huawei Health Workout Record to Apple Health and Strava?

This post will explore how to sync Huawei health workout records to the Apple Health app and Strava App.

On Huawei Health App

1. Click on ME

2. Click Privacy Management

3. Click on Data sharing and authorization

4. Select Strava and link it

Note: this setting allows the app to send data to Strava app

To view latest data, make sure you perform sync manually

On Strava App

1. Click on Settings

2. Select Application, Services, and Devices

3. Select Health Services and enable

• Send to Health
• Notification for new workout

Note: this setting allows the app to send data to Apple Health

On Apple Health

1. On the Summary page, scroll to top, and click your picture - to access settings.

2. Scroll to Privacy, go to Apps

You able to view Huawei Health and Strava

Go to Huawei Health and turn on all

Go to Strava and turn on all

That should do the trick and you able to view data from Apple Health

How to Pull Workout Activity from Strava?

During the past few weeks, I have been exercising " Walking workout" as part of my company well fitness program. I'd be required to do 80km a month starting Aug 22 - Sept 19, 2022.

• An application used - Strava app.
• Smart Watch - Huawei Watch

When I viewed on status from the Strava app, it did a great job of listing my workout. Sample example:

Since I did not subscribe and use it as free, it is hard for me to pull a selective report based on date & activity.

It did provide a list of activity and distance but I cannot generate a report based on the date

To resolve this, I have used another program called StatsHunters : statshunters.com

This website was able to connect to Strava to pull your workout information.

After connecting and pulling the activities on Strava, you can do filtering

Go to Left and click on the hamburger menu (3-line bar) and select Activity

Then go to the right side to do the filtering

Type:- Walk

Date: Start date and end date

You will get the result that you want and export it to excel

Excel report

Hope this guide help you to pull workout activity from Strava

Video: Bare Metal Recovery Using Veeam

 In the below video, you will learn how to create recovery media & perform bare metal recovery

Error "This device can't use a Trusted Platform Module"

Error message encountered when enabling Bitlocker encryption for C Drive [Fixed Drive]

To solve this error, you need to configure local security. Open Local Group Policy Editor [gpedit.msc]

Navigate to Windows Components > BitLocker Drive Encryption > Operating System Drives

Enable "Require additional authentication at startup

Tick Allow Bitlocker without a compatible TPM and set all parameters to Allow.

Once done, restart the server/workstation.

Now you will able to configure BitLocker Drive Encryption on C Drive

 

Note Taking Veeam v12 Capabilities for Service Providers

 This blog post is note-taking for Veeam v12 Capabilities for Service Providers

1. Support for Postgres for VBR and Enterprise Manager

• Open Source Database
• Performance & Scalability
• Microsoft SQL Server is still available to use
• Upgrade path 
• a) EM to v12-> VBR to v12 -> Migrate EM to Postgres -> Migrate VBR to Postgres
• The backup server & Enterprise Manager must have the same database type
• Reduce licensing cost

2. CDP proxy on Linux

3. Linux Gateway & Proxies

to proxy access object storage

3. Move Machines between backup job

4. Retry one machine instead of whole job

5. Trigger active full for one VM

6. Separate health check schedule

7. VeeaMover

• move back up to a different repository
• Migrate Refs to XFS, NTFS-> Refs
• Rebalance SOBR
• Copy backup to a different repository

8. Security

• gMSA and Keberos support
• Multi-Factor Authentication (MFA) for Veeam Console
• Protect IaaS environment
• Protect cloud connect environment
• Protect MSP environments
• Auto log off after X minutes
• Classified data marking

9. Object storage & SOBR

• Direct to Object Storage
• End-to-End Storage for SOBR
• New object storage format
• reduce transactional overheads and streamlines IO
• SOBR rebalance

10. Self Service Portal Enhancement

• Instant VM Recovery capability on EM by tenant
• Available on vSphere and Vmware Cloud Director

11. Automation & API

• Powershell 

12. Continuous Data Protection for Cloud Cloud with Vmware Cloud Director

• CDP for IaaS (vcloud director) or CDP via Cloud Connect (vcloud director)
• Replication
• Failover vApps between virtual datacenter
• Different vcloud director server are supported

13. Restore from Cloud Connect as the Service Provider Restore

14. VSPC v7 Integration

a)Self Service FLR for VSPC managed agent

• self service portal for users
• delegated restore (by a service provider or reseller)
• Support for Windows/Linux/Mac

b) VBR patching and updating

c) CDP Policies support

d) Veeam Backup Appliance (public cloud) -orchestrate VB appliance creation

Note Taking Veeam v12 Object Storage Enhancement

This is a note-taking on Veeam v12 Object Storage Enhancement

1. Direct-to-object storage support

• suitable for the customer that has no local storage edge/branch office
• Direct from performance to an archive tier
• Not supported - Enterprise Plug-in, AIX & Oracle Solaris, Restore from tape
• VBR, Agent for Windows/Linux/MAC, NAS Backup

2. End. to end object storage for SOBR

3. New object storage format

• reduce transactional overhead and streamlines IO

4. Multiple buckets

• increase performance and improves consumption tracking
• Performance issues if all put into 1 single bucket
• 50TB per buckets
• S3 = S3
• Azure = Azure
• S3 compatible = S3 Compatible
• Same provider

5. SOBR rebalance

• rebalance all extent
• supported for performance tier, capacity tier, archive tier

6. Standalone immutability

• S3
• S3 Glacier
• S3 Glacier Deep Archive

7. Multi-Region support

• Copy from 1 region to another region 
• Move from S3 to S3 Glacier Deep Archive

Use case

• BJ -> Object storage -> Tape
• BJ ->Object Storage -> Object storage
• BJ -> Object storage
• BJ -> On-prem repo -> BCJ -> Object storage

BJ= Backup Job

BCJ = Backup Copy Job

Note Taking : Veeam Backup for Google Cloud Best Practice

 This is note-taking for Veeam Backup for Google Cloud (GCP Best Practice)

1. Configure Role-Based Access Control (RBAC) to manage portal users

• Portal Admin - full access (including configuration)
• Portal Operator - access management/infrastructure only
• Restore Operator - perform workload restore

2. Lower storage costs using archive class

• minimum retention 365 days
• automatic archiving to low-cost, long-term storage

3. Protect VB appliance with configuration backup

4. Monitoring Appliance Memory

• overconsumption due to high usage.
• Solution - reconfigure the appliance machine type to have more memory - n1 standard (4cpu, 15GB Memory)

Note Taking: Veeam v12 Enterprise Plug-In Enhancement

 This blog post is note-taking for Veeam v12 Enterprise Plug-in Enhancement

1. Central deployment and management for Veeam Plug-in for Oracle RMAN, SAP Hana and BR Tool (SAP on Oracle)

• Plug-in deployment via protection group
• same as Veeam agent deployment
• Policy configuration - Backup Job
• database
• transaction log backup
• compression
• channel
• scheduling

2. Veeam Plug-in for Microsoft SQL Server

• DBA-driven native backup to Veeam Repository
• Manual deployment to source SQL Server
• Able to run the backup from SQL Management Studio
• Backup data transfer to Veeam Repository
• Can do configuration, backup & recovery from this plug-in
• Supported environment
• OS: Windows Server 2012 R2 onward
• SQL : SQL 2014 SP3 - 2019 (x64 only)
• Enterprise, Standard, Web, Developer
• Cluster: Always on group including cluster less, Windows Server Failover Cluster with shared volume or shared disk

3. PostgreSQL backup and Restore

• Agentless for Linux VM
• Veeam Agent for Linux
• Log shipping
• Veeam Explorer for PostgreSQL

4. General improvement

• Hardened Linux Repo Support
• Kerberos support
• ipv6 support
• Certificate based authentication
• Linux group enhancement for plug in configuration access control

Note Taking : Veeam v12 NAS Enhancement

 This is a blog post on note-taking for Veeam V12 NAS Enhancement

1. Backup to object storage directly

2. NAS Backup - Copy mode

• copy recent data to the archive repository

3. Immutability for NAS backup

4. Storage Integration - Nutanix Files support on Veeam

• NAS Filer
• Automated snapshot creation
• Changed File Tracking

5. NAS to tape - File to Tape with new improved engine

• NAS backup to tape does not support GFS
• Tape job always writes latest restore point to tape

6. Instant File Share Restore

1. SMB shares - no longer read only and can migrate to production
2. NFS shares - can be published as read only SMB

7. Health Check available for NAS

8. Rotated Drives - with limitation

• only for backup
• Not for archive repository, backup copy

Note Taking : Veeam v12 Tape Enhancement

This is a blog post taking for Veeam v12 Tape Enhancement

LTO 9 Support

Tape Server on Linux

• Not recommended running on hardened linux repository
• Put on a separate Linux machine
• Linux uses SCSI drivers used
• Tested on IBM
• Support x64 system only. Same as VBR repository/proxy in v12

New File to tape job

• Require to license - VUL
• 1 instance = 500GB
• Allow to backup directly to tape using file to tape job
• Better performance & optimization (parallel tape drive support, database optimization, backup and enumeration run at same time, asynchronous read)
• Retain permission like NAS Backup
• Cross ACL restore is not supported (Windows to Windows/Linux to Linux)
• Path exclusion supported
• Console display for file to tape job (file share). Able to restore file to tape job
• V12 last backup time is stored in UTC format

NAS Backup to Tape

• Avoid load on production NAS storage
• Fulfill 3-2-1
• Source -> NAS backup to Disk -> File to Tape
• NAS backup/and or NAS backup copy as source
• Tape job always writes latest restore point to tape
• NAS backup to tape does not support GFS
• A periodic full backup is available for file to tape/NAS to tape
• Files are store in native format. Restore files as files
• Does not consume license for NAS to tape

Other tape enhancement

• Support backup object storage to tape
• Daily GFS & Monthly media set
• Display current activity on tape drives
• Eject after inventory or catalog
• Audit for tapes
• Windows event
• File from tape restore audit
• General options > security > audit logs location
• Default to C:\ProgramData\Veeam\Backup\Audit

Note Taking: Veeam v12 Security Enhancement

This is a blog post on note-taking for Veeam V12 Security Enhancement

Your responsibility

1. Secure your infrastructure

2. Secure your data

3. Secure your session

4. Secure your application

5. Secure your visibility

Base security

• Support ipv6
• All supported except
• Veeam Backup for Nutanix and RHEV
• Plug in for AWS, Azure and GCP
• Unmanaged Veeam Agent
• Kasten - not tested

Data Security

• Any repository with immutability
• Hardened repository
• Object lock for object storage
• Storeonce catalyst
• Primary Backup and archive
• NAS backup immutability
• Enterprise Plug-in backup immutability

Authentication

• Group managed service account for Application-Aware Image processing
• Backup Server does not store password 
• Backup Server gets password on-demand from Active Directory
• Recovery Token for bare metal recovery on Veeam Agent

Application Security (Session)

• MFA for Veeam Console
• Auto Log off after X minutes

Visibility

• Classified data marking- by use tag/label. Required for security certification.
• New column in inventory: last backup. To identify who perform the action 

Security update subscription

• https://veeam.com/knowledge-base.html
• Select security advisory
• Enter your email address