S2 — Deployment, Configuration & Security 12 cards
2.4
Immutability period range
7 to 9999 days.
2.4
Hardened repo filesystem
XFS with fast clone (reflink).
2.4
Single-use credentials
Used once to deploy the Data Mover. Never stored in the config DB.
2.4
Methods NOT allowed on hardened repo
Reverse incremental and forever forward incremental.
2.3
SOBR capacity tier policies
Copy (immediately) and Move (after operational restore window, sealed chains only).
2.3
SOBR placement policies
Data locality (chain on one extent) and Performance (fulls and increments split).
2.1
Default config database (v12+)
PostgreSQL.
2.5
Four-eyes authorization
A second admin must approve destructive actions (v12.1+).
2.5
Backup encryption algorithm
AES-256.
2.5
Config backup includes passwords only if…
…the configuration backup is encrypted.
2.1
VSA HA requirements
VSA 13.0.1+ and Veeam Data Platform Premium. Active/passive.
2.5
v13 RBAC additions
Custom scoped roles and SAML 2.0 SSO.