Veeam v13: Upgrading from v12 on Windows

Veeam v13 Series Platform: Windows Applies to: VBR v12.3.1 (build 12.3.1.1139) or later upgrading to v13.0.1
Upgrade VBR v13 Windows In-Place Upgrade PostgreSQL Migration

Veeam Backup and Replication v13 is a significant release. The jump from v12.3 is straightforward if your environment is clean, but the installer runs a hard configuration check before it allows the upgrade to proceed -- and it stops cold if it finds any of several specific conditions. Some of those conditions have been sitting in environments for years: legacy backup copy job formats, old per-machine metadata, older agent installs with LocalDB, jobs using a removed retention option. You have to fix them first.

This article covers the complete upgrade process on Windows from v12.3.1 to v13.0.1: what the hard blockers actually are (sourced directly from the official Veeam upgrade checklist), what is deprecated vs. discontinued, platform changes, disk space requirements, component upgrade order, the wizard walkthrough, and post-upgrade validation. The known issues section covers the real problems that surface immediately after upgrade and how to resolve them.

Scope This guide covers the in-place upgrade of Veeam Backup and Replication on Windows from v12.3.1 to v13.0.1. Moving from a Windows install to the Veeam Software Appliance is a migration -- a separate process requiring a configuration backup restore to a new Linux appliance.

1. Upgrade vs. Migration: Know the Difference

Veeam uses these two terms with specific meanings for v13.

TermWhat It MeansResult
Upgrade VBR v12.3.x on Windows to VBR v13 on Windows Same server, same OS, in-place
Migration VBR on Windows to the Veeam Software Appliance (Linux) New platform -- requires config backup restore to a new appliance

If your goal is the Linux Software Appliance, you cannot in-place upgrade to it. You must do a fresh appliance install and restore a configuration backup. That process is covered separately. This guide is the Windows-to-Windows path only.

2. Supported Upgrade Paths

A direct in-place upgrade to v13.0.1 requires v12.3.1 build 12.3.1.1139 or later as the source. This is confirmed by the official Veeam upgrade documentation and Veeam KB4763. If you are below that build, you must reach it first.

Hard Requirement Minimum source version for a direct upgrade to v13.0.1 is v12.3.1 build 12.3.1.1139. The installer blocks anything older. See Veeam KB4763 for the upgrade path reference.
Current VersionDirect to v13?Required Action
v12.3.1 (build >= 12.3.1.1139) or v12.3.2 Yes Ready to upgrade
v12.3.0 or earlier v12.3.x builds Patch First Update to v12.3.1 build 1139 or later (see KB4696)
v12.2.x or v12.1.x No Upgrade to v12.3.1 first, then to v13
v12.0.x No Upgrade to v12.3.1 first, then to v13
v11.x or older No Upgrade through supported intermediate per KB2053, then to v13

3. Upgrade Blockers: Hard Stops

Step 6 of the upgrade wizard -- the Configuration Check -- scans for these conditions. Any hard blocker shows as a red item and the wizard will not continue. Exit, fix the condition, and relaunch the installer. The following list comes directly from the official Veeam upgrade checklist.

BlockerHow to Fix
Jobs with backup metadata not yet upgraded to v12 format (legacy per-machine single metadata file) Console: Home > Backups, right-click the job's backup entry, select "Upgrade backup chain." Repeat for every flagged job. The primary job is disabled during upgrade -- re-enable it after.
Backup Copy jobs still in legacy mode Legacy interval-based jobs must be recreated. Legacy mirror-mode jobs with v11 per-machine format can be upgraded via right-click "Upgrade backup file format." Check with PowerShell: Get-VBRBackupCopyJob | Where-Object { $_.IsLegacy -eq $true }
Full Veeam Agent for Windows installs prior to v6 with LocalDB configuration database Upgrade those agents to v6 or later. Managed agents can be pushed from the console under Protection Groups.
Nested repository paths (one repository folder located inside another) Reconfigure repositories so no repository path is a subfolder of another. This topology is no longer supported.
UNC path configured in the Export VBK wizard Remove the UNC path configuration from the export wizard settings.
File Copy jobs with the backup server configured as the destination The backup server can no longer be the destination for File Copy jobs. Update these jobs to target a different server or repository.
Jobs using the "Transform previous backup chains into rollbacks" option This option is completely removed. Edit affected jobs and change the backup mode before upgrading. The job will be broken post-upgrade if left unaddressed.

Checking Legacy Jobs via PowerShell

# Connect and find legacy backup copy jobs Connect-VBRServer -Server localhost Get-VBRBackupCopyJob | Where-Object { $_.IsLegacy -eq $true } | Select-Object Name, IsLegacy # Find primary job backup chains still in legacy (non-per-machine) format Get-VBRBackup | Where-Object { $_.IsPerMachineBackup -eq $false } | Select-Object Name, JobType
Non-Blocking Warnings The configuration check also surfaces yellow warnings for deprecated features and unsupported OS versions on managed servers. The upgrade proceeds past these, but jobs using managed servers on unsupported OS versions will fail afterward. Review every warning -- do not click through them without reading.

4. Deprecated Features

These features continue to function on existing jobs that already use them. They cannot be selected for new jobs. All will be fully removed in v14.

FeatureStatus in v13Replacement
Reversed incremental backup mode Deprecated Forward incremental with synthetic or active full
Restore-point-based job retention Deprecated Day-based retention for all jobs
Non per-machine backup chains (single-storage format) Deprecated Per-machine chains only for new jobs and new repositories
AD-based authentication for Cloud Connect tenants Deprecated Local users, MFA, or provider-managed auth. Existing AD-based tenants continue to work; new tenants cannot use AD auth.
VBK/VBM double-click restore from Windows Explorer Deprecated Initiate all restores from the Veeam console
Sequential tape processing option Deprecated Parallel processing is the default. Automatic fallback to sequential when only a single drive is available.
Managed Hardened Repository v2 Deprecated Upgrade to the current Infrastructure Appliance-based Hardened Repository to continue receiving security updates. Existing v2 repos continue working but will not receive updates.
Recovery Media burned to CD/DVD Deprecated ISO or USB bootable media
Agent job retention by restore point count Deprecated Day-based retention for agent jobs
Import/export of agent configuration to/from XML Deprecated Use configuration backup instead

5. Platform and OS Changes

v13 drops support for several platforms. Managed servers running on unsupported OS versions are non-blocking warnings during the upgrade but cause immediate job failures afterward.

PlatformMinimum in v13Dropped
VMware vSphere (ESXi and vCenter) vSphere 7.0 vSphere 6.x entirely
VMware vCloud Director vCD 10.4 Versions through 10.3
Microsoft Hyper-V Windows Server 2016 2012 and 2012 R2
Guest OS (application-aware processing) 64-bit OS only All 32-bit guest OS. Crash-consistent host-level backup remains possible for 32-bit guests.
Microsoft SQL Server (configuration DB) SQL Server 2016 SQL Server 2012 and 2014
Linux (agent and infrastructure roles) RHEL 8.4, Rocky/Alma 8.10 or 9.4+, SLES 12 SP5 or 15 SP3+, Ubuntu 16.04 LTS+ RHEL 7, RHEL 8.0-8.3, Rocky/Alma 9.0-9.3, older SLES, Fedora (fully dropped), Debian 10
Nutanix AHV AHV 6.8 AHV prior to 6.8

Database: PostgreSQL and SQL Server

PostgreSQL 17.6 is bundled and is the default for new v13 installations. SQL Server 2016 through 2025 remains supported. If you are upgrading from v12 with an existing SQL Server configuration database, the installer connects to it and upgrades it in place -- you do not need to migrate to PostgreSQL as part of this upgrade. That migration is optional and documented separately. Note that Veeam has stated SQL Server support will eventually be discontinued post-v13.

If your v12 install used the bundled PostgreSQL 15 instance, v13 installs PostgreSQL 17.6 alongside it and redirects the configuration database to the new instance. PostgreSQL 15 is left installed but unused and can be removed after confirming v13 is healthy.

PowerShell: v7 Now Required

The Veeam PowerShell module in v13 requires PowerShell 7. Windows PowerShell 5.x will no longer load the Veeam module. If you have automation scripts, scheduled tasks, or monitoring integrations using Veeam PowerShell cmdlets under Windows PowerShell 5.x, they will fail after upgrade. Install PowerShell 7 on the backup server and update your script launchers to use pwsh.exe instead of powershell.exe before upgrading.

6. Pre-Upgrade Checklist

Before You Mount the ISO Work through this list completely. Most post-upgrade problems trace back to a skipped step here.
  • Confirm installed version is v12.3.1 build 12.3.1.1139 or later (Help > About)
  • Run a Veeam Configuration Backup and store the .bco file off the backup server
  • Take a snapshot of the backup server VM if virtualized -- your rollback option
  • Stop all running backup jobs, restore sessions, and SureBackup sessions
  • Disable all scheduled jobs to prevent them starting during the upgrade window
  • Resolve all hard blockers from Section 3: legacy metadata, legacy copy jobs, old agents with LocalDB, nested repos, UNC export path, File Copy job destinations, rollback-mode jobs
  • Identify jobs still using restore-point-based retention and convert to day-based
  • Check managed servers and proxies for unsupported OS versions
  • Verify vSphere is at 7.0 or later if backing up VMware workloads
  • Verify SQL Server is 2016 or later if using SQL Server for the configuration database
  • Check all SOBR performance extents have matching immutability settings
  • If Veeam Backup for Microsoft 365 is co-installed, upgrade it first
  • Install PowerShell 7 on the backup server if you use Veeam PowerShell automation
  • Verify disk space: at minimum 55.5 GB -- approximately 50.5 GB (3x ISO size) in the install path, plus 5 GB on the system volume for database operations. The installer calculates the exact minimum dynamically during the configuration check.
  • Check for any application already bound to port 443 on the backup server -- v13's REST service requires it
  • Download the v13.0.1 ISO: VeeamBackup&Replication_13.0.1.180_20251101.iso (~16 GB). Check for patch releases newer than the base 13.0.1.180 build.

7. Component Upgrade Order

If your environment includes components beyond the backup server, upgrade in this sequence.

Veeam Backup for M365
Veeam ONE
Enterprise Manager
VBR Server
Remote Components
OrderComponentNotes
1 Veeam Backup for Microsoft 365 Only if co-installed on the VBR server. Must go first.
2 Veeam ONE Upgrade before VBR. v13 of Veeam ONE supports monitoring v12 environments so you can upgrade it ahead of the VBR maintenance window. Use the 13.0.1 ISO -- 13.0.0 has a known upgrade failure bug fixed in build 13.0.1.5860.
3 Veeam Backup Enterprise Manager Must be upgraded before VBR. If both are on the same machine, upgrade EM first, then immediately upgrade VBR.
4 VBR Server The main upgrade. All components above must be updated first.
5 Remote components (proxies, repositories, agents) Enable "Update remote components automatically" in the wizard to push updates to managed servers as part of the upgrade. Can also be done manually from Backup Infrastructure afterward.

8. Running the In-Place Upgrade

1
Mount the ISO and launch Setup

Mount VeeamBackup&Replication_13.0.1.180_20251101.iso and run Setup.exe from the root of the mounted drive.

2
Select "Upgrade Veeam Backup and Replication"

The installer detects the existing installation and presents the upgrade option. Select it -- do not use the fresh install path.

3
Accept the EULA and verify license

Click "I Accept." The existing license is automatically detected and carried forward. If not found, browse to the .lic file. The license file format has been unchanged since v10.

4
Install Missing Software

The installer automatically installs any missing prerequisites. Usually fast unless new .NET or VC++ redistributable versions are required.

5
Perform the Configuration Check

The critical gate. Red items are hard blockers -- exit, fix, relaunch. Yellow items are warnings -- review each one carefully. Pay particular attention to managed servers on unsupported OS versions: the upgrade passes this point, but jobs routed through those servers will fail immediately after.

6
Review Components and Enable Automatic Remote Update

Review the components list. Check "Update remote components automatically" to push updated data mover components to managed proxies and repositories. Click Upgrade.

7
Wait for the six-step upgrade process to complete

The installer stops all Veeam services, updates binaries, upgrades the configuration database, and restarts services. Do not interrupt -- especially during the database upgrade. Total duration is typically 20 to 40 minutes depending on database size and hardware. Services may take longer than expected on first start; this is a known issue covered in Section 10.

8
Finish and Connect

Click Finish. Open the Veeam Console. On first connect, accept the updated certificate thumbprint. The version in Help > About should show 13.0.1.180 or higher.

9. Post-Upgrade Validation

  • Console connects and Help > About shows 13.0.1.x
  • All existing backup jobs are listed with correct last-run status
  • Run at least one backup job end to end and confirm it completes successfully
  • Backup Infrastructure: all repositories show correct status and capacity
  • Re-trust managed servers flagged as untrusted: right-click each and select Trust
  • Verify managed proxies show updated component versions
  • Verify hypervisor connections are intact and current inventory is visible
  • Confirm all credentials are present in the Credentials Manager
  • Perform a test restore to validate recovery capability
  • If Veeam ONE is in use, confirm it connects to the v13 server and generates reports
  • Run the Security and Compliance Analyzer under Configuration in the console
  • Test any PowerShell automation scripts under PowerShell 7

Re-Trust Managed Servers

After upgrade, proxies, repositories, and mount servers may show as untrusted on first connect. This is expected behavior. Go to Backup Infrastructure, right-click each server with a warning icon, and select Trust. Jobs routing through untrusted servers will fail until this is done.

10. Known Issues and Fixes

VeeamBackupRESTSvc Times Out on First Start

The most widely reported post-upgrade issue. VeeamBackupRESTSvc times out on first start due to heavy initialization load. Windows kills the service before it finishes loading. Other dependent Veeam services may also fail to start as a result. The fix is to increase the Windows service startup timeout:

# Increase Windows service start timeout to 5 minutes (300000ms) # Default is 30000ms (30 seconds) Set-ItemProperty ` -Path "HKLM:\SYSTEM\CurrentControlSet\Control" ` -Name "ServicesPipeTimeout" ` -Value 300000 ` -Type DWord # Reboot the server after applying Restart-Computer -Force
Note Apply this registry change before or immediately after upgrade if services fail to start. After first-boot initialization completes, Veeam services start normally within this window on subsequent reboots.

Console Cannot Connect After Upgrade

If the console fails to connect immediately after upgrade, wait 5 to 10 minutes and retry -- services may still be completing initialization. If the error persists past 10 minutes, check Windows Services and confirm all Veeam services are Running. Apply the ServicesPipeTimeout fix above if services are still stuck in Starting.

A separate registry access error has also been reported: "Access to the registry key 'HKLM\SOFTWARE\Veeam\...\Console' is denied." This indicates a version mismatch between the remote console and the upgraded server. Update the remote console to v13.0.1.

Port 443 Conflict Blocks the REST Service

v13's REST API and Web UI require port 443. If another application is already bound to that port on the backup server, VeeamBackupRESTSvc will fail to bind and will not start. Check for conflicts before upgrading:

# Check what process is bound to port 443 Get-NetTCPConnection -LocalPort 443 | Select-Object LocalPort, State, OwningProcess | ForEach-Object { $_ | Add-Member -NotePropertyName ProcessName -NotePropertyValue (Get-Process -Id $_.OwningProcess).Name -PassThru }

File Copy Jobs Fail with NIC Selection Bug

A confirmed bug in v13.0.1 affects File Copy jobs on backup servers with multiple NICs. v13 changed the internal data mover connection model and the service may attempt to use a secondary NIC instead of the primary production interface, causing File Copy jobs to fail with a "Connection forwarder not registered" error -- even when Backup Copy jobs to the same target succeed. The fix is to either disconnect the unused secondary NIC or configure a preferred network under Configuration > Network Traffic Rules in the console.

PowerShell Automation Breaks Under Windows PowerShell 5.x

The Veeam PowerShell module requires PowerShell 7 in v13. Scripts, scheduled tasks, and monitoring integrations running under powershell.exe (Windows PowerShell 5.x) will fail with a module load error after upgrade. Update launchers to use pwsh.exe (PowerShell 7).

PostgreSQL 15 Left Installed After Upgrade

If v12 was using the bundled PostgreSQL 15 instance, v13 installs PostgreSQL 17.6 and points the configuration database at the new instance. PostgreSQL 15 is left installed but unused. Uninstall it from Programs and Features after confirming v13 is operating correctly.

If the Upgrade Fails Completely

1
Revert to VM snapshot

If you took a snapshot before upgrading, revert. This returns you to a known good state in minutes.

2
Fresh install plus configuration restore

If no snapshot is available: uninstall the broken installation, perform a fresh v13.0.1 install, then restore from your .bco configuration backup using the Configuration Database Restore wizard on first console launch. This recovers all jobs, credentials, infrastructure settings, and schedules.


Key Takeaways

  • Minimum source version for a direct upgrade to v13.0.1 is v12.3.1 build 12.3.1.1139 (confirmed by Veeam KB4763 and official help center). Anything lower requires an intermediate step first.
  • Seven hard upgrade blockers exist -- all sourced from the official Veeam upgrade checklist: legacy backup metadata, legacy backup copy jobs, old Veeam Agent for Windows with LocalDB, nested repository paths, UNC path in export VBK wizard, File Copy jobs with the backup server as destination, and jobs using the removed "Transform to rollbacks" option.
  • Deprecated features -- reversed incremental, restore-point retention, non-per-machine chains, AD auth for Cloud Connect tenants, and others -- survive on existing jobs but cannot be used for new jobs and will be removed in v14.
  • vSphere 6.x, Hyper-V 2012/2012 R2, 32-bit guest OS, SQL Server 2012/2014, and several Linux distributions are dropped. Managed servers on unsupported OS versions are warnings, not blockers -- but they cause immediate job failures post-upgrade.
  • The Veeam PowerShell module requires PowerShell 7. Windows PowerShell 5.x will not load the module. Update all automation before upgrading.
  • Upgrade order: Veeam Backup for M365, then Veeam ONE (use 13.0.1 ISO -- 13.0.0 had a known upgrade failure bug), then Enterprise Manager, then VBR, then remote components.
  • Disk space minimum is 55.5 GB: ~50.5 GB (3x ISO size) in the install path plus 5 GB on the system volume for database operations. The installer calculates the exact requirement dynamically.
  • Port 443 must be free on the backup server before upgrading -- v13's REST service requires it.
  • VeeamBackupRESTSvc startup timeout on first boot is fixed by setting the Windows ServicesPipeTimeout registry value to 300000ms and rebooting.
  • File Copy jobs may fail on multi-NIC servers due to a confirmed v13.0.1 data mover NIC selection bug. Fix via Network Traffic Rules or by disconnecting the unused secondary NIC.
  • PostgreSQL 15 is left installed after upgrade and can be removed once v13 on PostgreSQL 17.6 is confirmed healthy.

Read more