Veeam v13: Upgrading from v12 on Windows
In This Article
Veeam Backup and Replication v13 is a significant release. The jump from v12.3 is straightforward if your environment is clean, but the installer runs a hard configuration check before it allows the upgrade to proceed -- and it stops cold if it finds any of several specific conditions. Some of those conditions have been sitting in environments for years: legacy backup copy job formats, old per-machine metadata, older agent installs with LocalDB, jobs using a removed retention option. You have to fix them first.
This article covers the complete upgrade process on Windows from v12.3.1 to v13.0.1: what the hard blockers actually are (sourced directly from the official Veeam upgrade checklist), what is deprecated vs. discontinued, platform changes, disk space requirements, component upgrade order, the wizard walkthrough, and post-upgrade validation. The known issues section covers the real problems that surface immediately after upgrade and how to resolve them.
1. Upgrade vs. Migration: Know the Difference
Veeam uses these two terms with specific meanings for v13.
| Term | What It Means | Result |
|---|---|---|
| Upgrade | VBR v12.3.x on Windows to VBR v13 on Windows | Same server, same OS, in-place |
| Migration | VBR on Windows to the Veeam Software Appliance (Linux) | New platform -- requires config backup restore to a new appliance |
If your goal is the Linux Software Appliance, you cannot in-place upgrade to it. You must do a fresh appliance install and restore a configuration backup. That process is covered separately. This guide is the Windows-to-Windows path only.
2. Supported Upgrade Paths
A direct in-place upgrade to v13.0.1 requires v12.3.1 build 12.3.1.1139 or later as the source. This is confirmed by the official Veeam upgrade documentation and Veeam KB4763. If you are below that build, you must reach it first.
| Current Version | Direct to v13? | Required Action |
|---|---|---|
| v12.3.1 (build >= 12.3.1.1139) or v12.3.2 | Yes | Ready to upgrade |
| v12.3.0 or earlier v12.3.x builds | Patch First | Update to v12.3.1 build 1139 or later (see KB4696) |
| v12.2.x or v12.1.x | No | Upgrade to v12.3.1 first, then to v13 |
| v12.0.x | No | Upgrade to v12.3.1 first, then to v13 |
| v11.x or older | No | Upgrade through supported intermediate per KB2053, then to v13 |
3. Upgrade Blockers: Hard Stops
Step 6 of the upgrade wizard -- the Configuration Check -- scans for these conditions. Any hard blocker shows as a red item and the wizard will not continue. Exit, fix the condition, and relaunch the installer. The following list comes directly from the official Veeam upgrade checklist.
| Blocker | How to Fix |
|---|---|
| Jobs with backup metadata not yet upgraded to v12 format (legacy per-machine single metadata file) | Console: Home > Backups, right-click the job's backup entry, select "Upgrade backup chain." Repeat for every flagged job. The primary job is disabled during upgrade -- re-enable it after. |
| Backup Copy jobs still in legacy mode | Legacy interval-based jobs must be recreated. Legacy mirror-mode jobs with v11 per-machine format can be upgraded via right-click "Upgrade backup file format." Check with PowerShell: Get-VBRBackupCopyJob | Where-Object { $_.IsLegacy -eq $true } |
| Full Veeam Agent for Windows installs prior to v6 with LocalDB configuration database | Upgrade those agents to v6 or later. Managed agents can be pushed from the console under Protection Groups. |
| Nested repository paths (one repository folder located inside another) | Reconfigure repositories so no repository path is a subfolder of another. This topology is no longer supported. |
| UNC path configured in the Export VBK wizard | Remove the UNC path configuration from the export wizard settings. |
| File Copy jobs with the backup server configured as the destination | The backup server can no longer be the destination for File Copy jobs. Update these jobs to target a different server or repository. |
| Jobs using the "Transform previous backup chains into rollbacks" option | This option is completely removed. Edit affected jobs and change the backup mode before upgrading. The job will be broken post-upgrade if left unaddressed. |
Checking Legacy Jobs via PowerShell
4. Deprecated Features
These features continue to function on existing jobs that already use them. They cannot be selected for new jobs. All will be fully removed in v14.
| Feature | Status in v13 | Replacement |
|---|---|---|
| Reversed incremental backup mode | Deprecated | Forward incremental with synthetic or active full |
| Restore-point-based job retention | Deprecated | Day-based retention for all jobs |
| Non per-machine backup chains (single-storage format) | Deprecated | Per-machine chains only for new jobs and new repositories |
| AD-based authentication for Cloud Connect tenants | Deprecated | Local users, MFA, or provider-managed auth. Existing AD-based tenants continue to work; new tenants cannot use AD auth. |
| VBK/VBM double-click restore from Windows Explorer | Deprecated | Initiate all restores from the Veeam console |
| Sequential tape processing option | Deprecated | Parallel processing is the default. Automatic fallback to sequential when only a single drive is available. |
| Managed Hardened Repository v2 | Deprecated | Upgrade to the current Infrastructure Appliance-based Hardened Repository to continue receiving security updates. Existing v2 repos continue working but will not receive updates. |
| Recovery Media burned to CD/DVD | Deprecated | ISO or USB bootable media |
| Agent job retention by restore point count | Deprecated | Day-based retention for agent jobs |
| Import/export of agent configuration to/from XML | Deprecated | Use configuration backup instead |
5. Platform and OS Changes
v13 drops support for several platforms. Managed servers running on unsupported OS versions are non-blocking warnings during the upgrade but cause immediate job failures afterward.
| Platform | Minimum in v13 | Dropped |
|---|---|---|
| VMware vSphere (ESXi and vCenter) | vSphere 7.0 | vSphere 6.x entirely |
| VMware vCloud Director | vCD 10.4 | Versions through 10.3 |
| Microsoft Hyper-V | Windows Server 2016 | 2012 and 2012 R2 |
| Guest OS (application-aware processing) | 64-bit OS only | All 32-bit guest OS. Crash-consistent host-level backup remains possible for 32-bit guests. |
| Microsoft SQL Server (configuration DB) | SQL Server 2016 | SQL Server 2012 and 2014 |
| Linux (agent and infrastructure roles) | RHEL 8.4, Rocky/Alma 8.10 or 9.4+, SLES 12 SP5 or 15 SP3+, Ubuntu 16.04 LTS+ | RHEL 7, RHEL 8.0-8.3, Rocky/Alma 9.0-9.3, older SLES, Fedora (fully dropped), Debian 10 |
| Nutanix AHV | AHV 6.8 | AHV prior to 6.8 |
Database: PostgreSQL and SQL Server
PostgreSQL 17.6 is bundled and is the default for new v13 installations. SQL Server 2016 through 2025 remains supported. If you are upgrading from v12 with an existing SQL Server configuration database, the installer connects to it and upgrades it in place -- you do not need to migrate to PostgreSQL as part of this upgrade. That migration is optional and documented separately. Note that Veeam has stated SQL Server support will eventually be discontinued post-v13.
If your v12 install used the bundled PostgreSQL 15 instance, v13 installs PostgreSQL 17.6 alongside it and redirects the configuration database to the new instance. PostgreSQL 15 is left installed but unused and can be removed after confirming v13 is healthy.
PowerShell: v7 Now Required
The Veeam PowerShell module in v13 requires PowerShell 7. Windows PowerShell 5.x will no longer load the Veeam module. If you have automation scripts, scheduled tasks, or monitoring integrations using Veeam PowerShell cmdlets under Windows PowerShell 5.x, they will fail after upgrade. Install PowerShell 7 on the backup server and update your script launchers to use pwsh.exe instead of powershell.exe before upgrading.
6. Pre-Upgrade Checklist
- Confirm installed version is v12.3.1 build 12.3.1.1139 or later (Help > About)
- Run a Veeam Configuration Backup and store the .bco file off the backup server
- Take a snapshot of the backup server VM if virtualized -- your rollback option
- Stop all running backup jobs, restore sessions, and SureBackup sessions
- Disable all scheduled jobs to prevent them starting during the upgrade window
- Resolve all hard blockers from Section 3: legacy metadata, legacy copy jobs, old agents with LocalDB, nested repos, UNC export path, File Copy job destinations, rollback-mode jobs
- Identify jobs still using restore-point-based retention and convert to day-based
- Check managed servers and proxies for unsupported OS versions
- Verify vSphere is at 7.0 or later if backing up VMware workloads
- Verify SQL Server is 2016 or later if using SQL Server for the configuration database
- Check all SOBR performance extents have matching immutability settings
- If Veeam Backup for Microsoft 365 is co-installed, upgrade it first
- Install PowerShell 7 on the backup server if you use Veeam PowerShell automation
- Verify disk space: at minimum 55.5 GB -- approximately 50.5 GB (3x ISO size) in the install path, plus 5 GB on the system volume for database operations. The installer calculates the exact minimum dynamically during the configuration check.
- Check for any application already bound to port 443 on the backup server -- v13's REST service requires it
- Download the v13.0.1 ISO: VeeamBackup&Replication_13.0.1.180_20251101.iso (~16 GB). Check for patch releases newer than the base 13.0.1.180 build.
7. Component Upgrade Order
If your environment includes components beyond the backup server, upgrade in this sequence.
| Order | Component | Notes |
|---|---|---|
| 1 | Veeam Backup for Microsoft 365 | Only if co-installed on the VBR server. Must go first. |
| 2 | Veeam ONE | Upgrade before VBR. v13 of Veeam ONE supports monitoring v12 environments so you can upgrade it ahead of the VBR maintenance window. Use the 13.0.1 ISO -- 13.0.0 has a known upgrade failure bug fixed in build 13.0.1.5860. |
| 3 | Veeam Backup Enterprise Manager | Must be upgraded before VBR. If both are on the same machine, upgrade EM first, then immediately upgrade VBR. |
| 4 | VBR Server | The main upgrade. All components above must be updated first. |
| 5 | Remote components (proxies, repositories, agents) | Enable "Update remote components automatically" in the wizard to push updates to managed servers as part of the upgrade. Can also be done manually from Backup Infrastructure afterward. |
8. Running the In-Place Upgrade
Mount VeeamBackup&Replication_13.0.1.180_20251101.iso and run Setup.exe from the root of the mounted drive.
The installer detects the existing installation and presents the upgrade option. Select it -- do not use the fresh install path.
Click "I Accept." The existing license is automatically detected and carried forward. If not found, browse to the .lic file. The license file format has been unchanged since v10.
The installer automatically installs any missing prerequisites. Usually fast unless new .NET or VC++ redistributable versions are required.
The critical gate. Red items are hard blockers -- exit, fix, relaunch. Yellow items are warnings -- review each one carefully. Pay particular attention to managed servers on unsupported OS versions: the upgrade passes this point, but jobs routed through those servers will fail immediately after.
Review the components list. Check "Update remote components automatically" to push updated data mover components to managed proxies and repositories. Click Upgrade.
The installer stops all Veeam services, updates binaries, upgrades the configuration database, and restarts services. Do not interrupt -- especially during the database upgrade. Total duration is typically 20 to 40 minutes depending on database size and hardware. Services may take longer than expected on first start; this is a known issue covered in Section 10.
Click Finish. Open the Veeam Console. On first connect, accept the updated certificate thumbprint. The version in Help > About should show 13.0.1.180 or higher.
9. Post-Upgrade Validation
- Console connects and Help > About shows 13.0.1.x
- All existing backup jobs are listed with correct last-run status
- Run at least one backup job end to end and confirm it completes successfully
- Backup Infrastructure: all repositories show correct status and capacity
- Re-trust managed servers flagged as untrusted: right-click each and select Trust
- Verify managed proxies show updated component versions
- Verify hypervisor connections are intact and current inventory is visible
- Confirm all credentials are present in the Credentials Manager
- Perform a test restore to validate recovery capability
- If Veeam ONE is in use, confirm it connects to the v13 server and generates reports
- Run the Security and Compliance Analyzer under Configuration in the console
- Test any PowerShell automation scripts under PowerShell 7
Re-Trust Managed Servers
After upgrade, proxies, repositories, and mount servers may show as untrusted on first connect. This is expected behavior. Go to Backup Infrastructure, right-click each server with a warning icon, and select Trust. Jobs routing through untrusted servers will fail until this is done.
10. Known Issues and Fixes
VeeamBackupRESTSvc Times Out on First Start
The most widely reported post-upgrade issue. VeeamBackupRESTSvc times out on first start due to heavy initialization load. Windows kills the service before it finishes loading. Other dependent Veeam services may also fail to start as a result. The fix is to increase the Windows service startup timeout:
Console Cannot Connect After Upgrade
If the console fails to connect immediately after upgrade, wait 5 to 10 minutes and retry -- services may still be completing initialization. If the error persists past 10 minutes, check Windows Services and confirm all Veeam services are Running. Apply the ServicesPipeTimeout fix above if services are still stuck in Starting.
A separate registry access error has also been reported: "Access to the registry key 'HKLM\SOFTWARE\Veeam\...\Console' is denied." This indicates a version mismatch between the remote console and the upgraded server. Update the remote console to v13.0.1.
Port 443 Conflict Blocks the REST Service
v13's REST API and Web UI require port 443. If another application is already bound to that port on the backup server, VeeamBackupRESTSvc will fail to bind and will not start. Check for conflicts before upgrading:
File Copy Jobs Fail with NIC Selection Bug
A confirmed bug in v13.0.1 affects File Copy jobs on backup servers with multiple NICs. v13 changed the internal data mover connection model and the service may attempt to use a secondary NIC instead of the primary production interface, causing File Copy jobs to fail with a "Connection forwarder not registered" error -- even when Backup Copy jobs to the same target succeed. The fix is to either disconnect the unused secondary NIC or configure a preferred network under Configuration > Network Traffic Rules in the console.
PowerShell Automation Breaks Under Windows PowerShell 5.x
The Veeam PowerShell module requires PowerShell 7 in v13. Scripts, scheduled tasks, and monitoring integrations running under powershell.exe (Windows PowerShell 5.x) will fail with a module load error after upgrade. Update launchers to use pwsh.exe (PowerShell 7).
PostgreSQL 15 Left Installed After Upgrade
If v12 was using the bundled PostgreSQL 15 instance, v13 installs PostgreSQL 17.6 and points the configuration database at the new instance. PostgreSQL 15 is left installed but unused. Uninstall it from Programs and Features after confirming v13 is operating correctly.
If the Upgrade Fails Completely
If you took a snapshot before upgrading, revert. This returns you to a known good state in minutes.
If no snapshot is available: uninstall the broken installation, perform a fresh v13.0.1 install, then restore from your .bco configuration backup using the Configuration Database Restore wizard on first console launch. This recovers all jobs, credentials, infrastructure settings, and schedules.
Key Takeaways
- Minimum source version for a direct upgrade to v13.0.1 is v12.3.1 build 12.3.1.1139 (confirmed by Veeam KB4763 and official help center). Anything lower requires an intermediate step first.
- Seven hard upgrade blockers exist -- all sourced from the official Veeam upgrade checklist: legacy backup metadata, legacy backup copy jobs, old Veeam Agent for Windows with LocalDB, nested repository paths, UNC path in export VBK wizard, File Copy jobs with the backup server as destination, and jobs using the removed "Transform to rollbacks" option.
- Deprecated features -- reversed incremental, restore-point retention, non-per-machine chains, AD auth for Cloud Connect tenants, and others -- survive on existing jobs but cannot be used for new jobs and will be removed in v14.
- vSphere 6.x, Hyper-V 2012/2012 R2, 32-bit guest OS, SQL Server 2012/2014, and several Linux distributions are dropped. Managed servers on unsupported OS versions are warnings, not blockers -- but they cause immediate job failures post-upgrade.
- The Veeam PowerShell module requires PowerShell 7. Windows PowerShell 5.x will not load the module. Update all automation before upgrading.
- Upgrade order: Veeam Backup for M365, then Veeam ONE (use 13.0.1 ISO -- 13.0.0 had a known upgrade failure bug), then Enterprise Manager, then VBR, then remote components.
- Disk space minimum is 55.5 GB: ~50.5 GB (3x ISO size) in the install path plus 5 GB on the system volume for database operations. The installer calculates the exact requirement dynamically.
- Port 443 must be free on the backup server before upgrading -- v13's REST service requires it.
- VeeamBackupRESTSvc startup timeout on first boot is fixed by setting the Windows ServicesPipeTimeout registry value to 300000ms and rebooting.
- File Copy jobs may fail on multi-NIC servers due to a confirmed v13.0.1 data mover NIC selection bug. Fix via Network Traffic Rules or by disconnecting the unused secondary NIC.
- PostgreSQL 15 is left installed after upgrade and can be removed once v13 on PostgreSQL 17.6 is confirmed healthy.