{"id":607,"date":"2026-02-08T10:18:14","date_gmt":"2026-02-08T10:18:14","guid":{"rendered":"https:\/\/www.lighthouse-program.com\/?p=607"},"modified":"2026-02-08T10:18:14","modified_gmt":"2026-02-08T10:18:14","slug":"lessi-learned-week-7-2026","status":"publish","type":"post","link":"https:\/\/www.lighthouse-program.com\/?p=607","title":{"rendered":"Lessi learned \u2013 week 7\/2026"},"content":{"rendered":"\n<p class=\"has-white-color has-text-color has-link-color wp-elements-643e563ba84db2cad9f62cad97a8e0b3 wp-block-paragraph\"><strong>Welcome to the \u201cLessi Learned\u201d Newsletter!<\/strong><\/p>\n\n\n\n<div style=\"height:28px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"261\" height=\"168\" src=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ransom.png\" alt=\"\" class=\"wp-image-697\" srcset=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ransom.png 261w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ransom-210x135.png 210w\" sizes=\"auto, (max-width: 261px) 100vw, 261px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">At the <a href=\"https:\/\/www.coveware.com\/blog\/2026\/2\/2\/nitrogen-ransomware-esxi-malware-has-a-bug\" target=\"_blank\" rel=\"noreferrer noopener\">Coveware blog<\/a>, a few days ago, an interesting post was published. It covers the Nitrogen ransomware targeting VMware ESXi servers, but with an unexpected twist: the malware has a critical bug that makes decryption impossible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even paying the ransom won\u2019t restore access, because the encryption keys are broken. This unusual case highlights just how crucial it is to have valid, tested backups. At the end of the day, this is a stark reminder: backups are your last line of defense, and without them, no ransom can save your data.<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\">\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-media-text is-stacked-on-mobile\" style=\"grid-template-columns:17% auto\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"1024\" src=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/bulb.png\" alt=\"\" class=\"wp-image-300 size-full\" srcset=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/bulb.png 1024w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/bulb-300x300.png 300w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/bulb-150x150.png 150w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/bulb-768x768.png 768w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/bulb-210x210.png 210w\" sizes=\"auto, (max-width: 980px) 100vw, 980px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<h1 class=\"wp-block-heading\"><strong>Lessons learned<\/strong><\/h1>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div style=\"height:27px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color has-link-color wp-elements-6c8aca5e454dd1662abdfa1879b67f94 wp-block-paragraph\"><strong>Veeam Backup &amp; Replication Essentials &amp; Veeam Software Appliance<\/strong><\/p>\n\n\n\n<div style=\"height:16px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">One detail that is easy to overlook &#8211; but still relevant in practice &#8211; concerns the use of the <strong>Veeam Backup &amp; Replication Essentials<\/strong> license.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When this license is in place, it is indeed possible to deploy the <strong>Veeam Software Appliance<\/strong>, which can be a convenient and efficient option for many environments. However, there is an important limitation to be aware of: <strong>at least at the moment, the Veeam Software Appliance may not be deployed on physical hardware when using the Essentials license<\/strong>. Its use is supported to <strong>virtual deployments only<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Read more here: <a href=\"https:\/\/forums.veeam.com\/post552308.html#p552308\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/forums.veeam.com\/post552308.html#p552308<\/a><\/p>\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div style=\"height:23px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color has-link-color wp-elements-21bedc34da3fe6226af37ddea3539ef5 wp-block-paragraph\"><strong>Upgrade path Hardened Repo ISO 2 to V13 appliance<\/strong><\/p>\n\n\n\n<div style=\"height:16px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">If you have a Veeam Hardened Repository based on the ISO 2 in place, you might be interested in the available upgrade path to the V13 Infrastructure Appliance Hardened Repository:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/helpcenter.veeam.com\/docs\/vbr\/userguide\/upgrading_hr_iso_v2.html?ver=13\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/helpcenter.veeam.com\/docs\/vbr\/userguide\/upgrading_hr_iso_v2.html?ver=13<\/a><\/p>\n\n\n\n<div style=\"height:23px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div style=\"height:39px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color has-link-color wp-elements-293ad2369b174aebed5ed09cf1e27b20 wp-block-paragraph\"><strong>Veeam HA Monitoring and Automated Failove<\/strong>r<\/p>\n\n\n\n<div style=\"height:16px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"307\" height=\"205\" src=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ha-monitoring.png\" alt=\"\" class=\"wp-image-692\" style=\"aspect-ratio:1.4976698066435299;width:277px;height:auto\" srcset=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ha-monitoring.png 307w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ha-monitoring-300x200.png 300w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/ha-monitoring-210x140.png 210w\" sizes=\"auto, (max-width: 307px) 100vw, 307px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">With the release of <strong>Veeam Backup &amp; Replication 13<\/strong>, <strong>High Availability for the Veeam Software Appliance (Veeam HA)<\/strong> was introduced, enabling failover of the primary backup server node.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Less widely noted is that the <strong>Veeam ONE 13.0.1 update<\/strong> adds monitoring and alerts specifically for this feature.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A broad set of alerts now covers failures and health degradations in the HA environment:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Veeam Backup &amp; Replication HA cluster created<\/li>\n\n\n\n<li>Veeam Backup &amp; Replication HA cluster disassembled<\/li>\n\n\n\n<li>Veeam Backup &amp; Replication HA cluster primary node state<\/li>\n\n\n\n<li>Veeam Backup &amp; Replication HA cluster secondary node state<\/li>\n\n\n\n<li>Veeam Backup &amp; Replication HA cluster failover state<\/li>\n\n\n\n<li>Veeam Backup &amp; Replication HA cluster switchover state<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In addition, <strong>remediation actions<\/strong> can be configured to initiate a semi\u2011automated failover if the primary node becomes unavailable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Detailed instructions on setting this up are available here: <a href=\"https:\/\/community.veeam.com\/blogs-and-podcasts-57\/veeam-vsa-ha-cluster-monitoring-with-veeam-one-and-failover-automation-12512?utm_source=lighthouse-program.com\" target=\"_blank\" rel=\"noreferrer noopener\">Veeam Community Blogs<\/a><\/p>\n\n\n\n<div style=\"height:39px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div style=\"height:27px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color has-link-color wp-elements-08dafcf5c9b7bd7afd1208d2428a96ba wp-block-paragraph\"><strong>Community Tool for Veeam M365 Backup Migration<\/strong><\/p>\n\n\n\n<div style=\"height:16px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">If your organisation is using <strong>Veeam Backup for Microsoft 365<\/strong> and still stores backups on <strong>Block Storage<\/strong>, it may be time to consider migrating to <strong>Object Storage\u2011based repositories<\/strong>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"307\" height=\"205\" src=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/m365-migration.png\" alt=\"\" class=\"wp-image-702\" srcset=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/m365-migration.png 307w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/m365-migration-300x200.png 300w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2026\/02\/m365-migration-210x140.png 210w\" sizes=\"auto, (max-width: 307px) 100vw, 307px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Object Storage offers better compression &#8211; often up to ~50% depending on the objects &#8211; and allows enabling features like <strong>Immutability, Backup Copy Jobs, and encryption<\/strong>. It also provides improved performance, as Block Storage relies on JetDB databases, which can slow down as they grow.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Currently, transferring data from Block Storage to Object Storage repositories requires PowerShell cmdlets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For those who prefer not to script manually, the <strong><a href=\"https:\/\/foonet.be\/2019\/10\/04\/veeam-backup-for-microsoft-office-365-data-manager-tool-update\/\" target=\"_blank\" rel=\"noreferrer noopener\">Veeam Backup for Microsoft Office 365 Data Manager Tool<\/a><\/strong> (community project, <strong>not an official Veeam tool &#8211; use at your own risk!<\/strong>) helps automate the migration and management of backup data between repositories.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can find the tool and a short blog article about it here: <a href=\"https:\/\/foonet.be\/2019\/10\/04\/veeam-backup-for-microsoft-office-365-data-manager-tool-update\/\" target=\"_blank\" rel=\"noreferrer noopener\">M365 Migration Tool<\/a><\/p>\n\n\n\n<div style=\"height:27px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div style=\"height:27px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\">\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-media-text is-stacked-on-mobile\" style=\"grid-template-columns:17% auto\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"1024\" src=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/Pin.png\" alt=\"\" class=\"wp-image-298 size-full\" srcset=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/Pin.png 1024w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/Pin-300x300.png 300w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/Pin-150x150.png 150w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/Pin-768x768.png 768w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/10\/Pin-210x210.png 210w\" sizes=\"auto, (max-width: 980px) 100vw, 980px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<h1 class=\"wp-block-heading\"><strong>Feature of the day<\/strong><\/h1>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color has-link-color wp-elements-48b9b5a85fc9aec3e35ae39fed533e07 wp-block-paragraph\"><strong>Encryption Password Verification (Version 13)<\/strong><br><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"307\" height=\"205\" src=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/12\/password-verification.png\" alt=\"\" class=\"wp-image-608\" srcset=\"https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/12\/password-verification.png 307w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/12\/password-verification-300x200.png 300w, https:\/\/www.lighthouse-program.com\/wp-content\/uploads\/2025\/12\/password-verification-210x140.png 210w\" sizes=\"auto, (max-width: 307px) 100vw, 307px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Imagine a long-serving administrator leaving the company. The successor\u2014or perhaps the CISO\u2014now faces a familiar question: <em>Do the documented encryption passwords actually match reality?<\/em> And yes, let\u2019s hope that documentation exists at all.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Veeam Backup &amp; Replication (starting with Version 13) provides a secure way to answer this question. Encryption passwords can be verified <strong>exclusively via the Password Manager UI<\/strong>, ensuring a controlled and auditable process. This allows organizations to carefully cross-check password documentation against the system\u2014without risking accidental changes or exposure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security is built in by design. A <strong>hard-coded brute-force protection mechanism<\/strong> blocks further verification attempts for <strong>15 minutes<\/strong> after repeated failures. This effectively prevents misuse while still enabling legitimate validation when it matters most.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Learn more here: <a href=\"https:\/\/helpcenter.veeam.com\/docs\/vbr\/userguide\/password_manager_verify.html?ver=13\" target=\"_blank\" rel=\"noreferrer noopener\">Veeam Helpcenter<\/a><\/p>\n\n\n\n<div style=\"height:39px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div style=\"height:39px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Thanks for reading<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">I hope you enjoyed this edition of my Lessi-Learned Newsletter. Thank you for reading!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Got feedback or something you want to see in the next edition? Leave a comment, write me on X (<a href=\"https:\/\/x.com\/lessi001\" data-type=\"link\" data-id=\"https:\/\/x.com\/lessi001\" target=\"_blank\" rel=\"noreferrer noopener\">@lessi001<\/a>) or connect at <a href=\"https:\/\/www.linkedin.com\/in\/andreas-lesslhumer-2bb2725b\/\" target=\"_blank\" rel=\"noreferrer noopener\">LinkedIn<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Want to get the newsletter hot off the press? Sign up for my mailing list and I\u2019ll drop a note in your inbox as soon as the latest issue is ready:<\/p>\n\n\n\n<div class=\"wp-block-noptin-email-optin is-style-noptin-flex has-black-background-color has-background has-small-font-size\"><form><div class=\"noptin-block-form-header\">\n<h2 class=\"wp-block-heading noptin_form_title\">Subscribe to the Newsletter:<\/h2>\n<\/div><div class=\"noptin-block-form-footer\"><input type=\"email\" class=\"noptin_form_input_email\" placeholder=\"Email Address\" name=\"noptin_fields[email]\" required\/><input value=\"SUBSCRIBE\" type=\"submit\" class=\"noptin_form_submit wp-element-button\"\/><\/div><div class=\"noptin-form-notice noptin-response\" role=\"alert\"><\/div><input type=\"hidden\" name=\"source\" value=\"block\"\/><\/form><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to the \u201cLessi Learned\u201d Newsletter! At the Coveware blog, a few days ago, an interesting post was published. It covers the Nitrogen ransomware targeting VMware ESXi servers, but with an unexpected twist: the malware has a critical bug that makes decryption impossible. Even paying the ransom won\u2019t restore access, because the encryption keys are [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-607","post","type-post","status-publish","format-standard","hentry","category-newsletter"],"_links":{"self":[{"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=\/wp\/v2\/posts\/607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=607"}],"version-history":[{"count":17,"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=\/wp\/v2\/posts\/607\/revisions"}],"predecessor-version":[{"id":706,"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=\/wp\/v2\/posts\/607\/revisions\/706"}],"wp:attachment":[{"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lighthouse-program.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}