Backup Service protects your information at every stage, from initial backup to final deletion. Our approach includes encryption at rest, secure transmission, and protocols for irrevocable removal, safeguarding your data throughout its lifecycle.

Encryption at Rest

Encryption at Rest involves encrypting data stored on physical media. It protects data from unauthorized access when the data is not actively being used.

• Server-side Encryption: Uses AES-256 to encrypt data on storage devices, preventing unauthorized access outside the server.

• Customer-Side Encryption: Enables customers to encrypt each backup plan using a password, which is then converted into an encryption key for the AES-256 encryption method. Neither Acronis nor IONOS stores the encryption key, and if you forget the password, the backups will be irretrievable.

For the same reason, backups cannot be exported using the Bulk Export procedure, as a password is required to download and decrypt each backup.

Encryption in Transit

Backup Service encrypts all transferred data in real-time using secure protocols (HTTPS, TLS) and strong encryption algorithms. It ensures secure cryptographic key exchange with Diffie-Hellman and RSA.

Secure deletion

• Secure deletion is achieved by using customer-provided passwords for each backup.

• If no password is set, data is still securely deleted when it leaves the Acronis's perimeter.

• Acronis manages the physical infrastructure. When drives or equipment need repair or decommissioning, Acronis ensures complete data erasure from disks and internal memory according to NIST SP 800-88rev1. If erasure is not possible, equipment is physically destroyed to prevent data recovery.

Announcement of Backup Service Change

Our technology partner Acronis will migrate two features from the regular backup service offering into two advanced packs from January 7th, 2025. The following are the key updates:

• the feature Vulnerability Assessment will become part of the extension Advanced Management. Baseline Windows Vulnerability assessment will continue to be included with the regular backup service offering.

• the feature Active Protection will become part of the extension Advanced Security.

What does that mean for you?

Currently, both features are configuration elements in the standard Protection Plan that can be configured via the Backup Console.

The backup plans that were in place at the time of the transition and that have these features activated will remain valid and active. However, the respective feature will no longer be executed within the backup plan. If you would like to continue benefiting from the features after the transition, you need to add the desired advanced packs to your backup plan.

Re-enable Vulnerability Assessment of 3rd party Windows applications & Active Protection

If neither of these advanced packs is active on your protection plan, you are not consuming any additional security extension that comes with these advanced packs yet. It is not required to have both advanced packs enabled to use one of the two features affected by the change. Follow the steps to enable the required feature that will add the respective advanced pack to your account automatically:

1. Log in to the DCD with your credentials.

2. Follow the instructions to open the Backup Console.

3. In the left navigation bar, go to Management > Protection plans. This will show you the list of all protection plans currently configured in your account.

1. Select the protection plan you want to manage. This will open an Actions dialog at the right side of the screen.

2. Select Edit from the list of options. This will open the protection plan details in an editable mode.

Vulnerability Assessment of 3rd party Windows applications

1. To enable Vulnerability Assessment of 3rd party Windows applications again, go to Vulnerability Assessment, check that the slider is set so it is marked green, and click on the arrow next to the slider. Then, click on the list of elements applied to the Vulnerability assessment scope.

1. Select Windows third-party products if you want to re-enable this feature.

2. Click Done at the lower right of this dialog to confirm the setting.

1. You may see a notification pop-up that requests a confirmation for adding the Advanced Management pack to your account (if it is not activated yet). Confirm this dialog to activate the Advanced Management pack.

2. Press Save on the top of the details settings dialog or continue with enabling Active Protection if required.

Active Protection

1. To enable Active Protection again, go to Antivirus & Antimaleware protection, and check that the slider is set so it is marked green. Click on the arrow next to the slider and click on Off next to the entry Active Protection.

1. Activate Active Protection by setting the slider so it appears green. This will provide you a set of actions that shall be applied in case of suspicious activities are detected. Select the option that fits your needs.

1. Click Done at the lower right of this dialog to confirm the setting.

2. You may see a notification pop-up that requests a confirmation for adding the Advanced Security pack to your account. Confirm this dialog to activate the Advanced Security pack.

3. Press Save at the top of the details settings dialog to save the configuration or continue with enabling Vulnerability Assessment of 3rd party Windows applications if required.

IONOS works with Acronis, a special provider specializing in backup and recovery solutions.

Backups can be set up in three ways:

1) Automatically (before provisioning new servers).

2) Semi-automatically (during deployment of multiple servers).

3) Manually (adding a backup solution to an existing server).

The DCD's Backup Unit Manager creates, manages, and saves server data in the Backup Units. Furthermore, you can also assign names and passwords to the units. The external Backup Management Console enables you to manage your backups and their schedules. You can log in to the console with the username and password specified in the Backup Unit Manager.

Functionality

To create backups for a server, install a backup agent that communicates with the backup system and assigns backups to the respective Backup Unit.

The communication between the server, backup agent, and backup system requires an internet connection. Backups are charged per Backup Unit; hence, they are compressed before storage to reduce expenses.

IONOS Cloud Backup Service is a fully integrated backup function offering secure data storage in IONOS Cloud data centers for all data backup application scenarios. Consult our user guides, reference documentation, and FAQs to support your hosting needs.

Developer Tools

Recommended How-Tos

Learn More

Backup Service - Frequently Asked Questions

A graphical user interface, the Backup Management Console, is available for managing your backups. Therein, you can organize your backups and backup plans, activate backup agents, and generate tokens.

The Backup Management Console only allows you access to Backup Units for which you are authorized. The login is possible at one click (single sign-on) directly from the DCD, or manually using the corresponding URL provided you know the login credentials of the required Backup Unit.

The Backup Management Console is available in 25 languages.

Opening the Console

Start from the DCD Menu > Storage by selecting the required Backup Unit in Backup Console:

Alternatively, go to Menu > Storage > Backup Unit Management

Finally, you may enter the following URL: https://backup.ionos.com and the credentials set when the Backup Unit was created.

The Backup Management Console is created. You can now manage the backups and backup plans of the selected Backup Unit or add further devices.

The Backup Management Console provides detailed information and instructions on installing backup agents and managing backups.

1 - Acronis Web Help 2 - IONOS Cloud User Guide

Checking VM Registration in the Console

After provisioning, you may open the Backup Management Console and check the registration of the VM and the activation of automated backups.

You may run a backup right away:

The backup system sends out a status report e-mail regularly:

You may change the default backup schedule at any time.

Installing automated backups manually

It is possible to set up automated backups on an existing server, even on servers that have been provisioned with images other than IONOS. The details of the procedure depend on the operating system used.

1. If no Backup Unit is available, create one.

2. Connect to the required server.

3. Open the Backup Management Console.

4. Download the backup agent for your OS.

5. Install the backup agent and follow the instructions.

6. If this has not been done automatically, register the backup agent in the Backup Management Console using the code generated during installation.

7. Enable backups for the VM.

Automated backups are set up according to the default backup schedule. You may run a backup right away and change the default backup schedule at any time. The backup system sends out a status report e-mail regularly.

Example: Windows Server 2016

1. Create a Backup Unit if none is available.

2. Download the backup agent in the Backup Management Console.

3. Select Add > Add Devices

4. Start the installation process and follow the instructions of the installation wizard.

5. In the Backup Management Console, register the VM with its backup agent.

The VM is registered. Now, you can enable backups for the VM.

Automated backups have been set up for the selected VM.

Setting up automated backups requires the creation of Backup Units in which the backups of a group of servers are contained.

You will need to assign a unique Name and a Password for each Backup Unit. The Backup Unit is generated in the following format: <Contract number>-Name, for example: 31898953-Backup001.

Backup Units can be shared with other Users and Groups like other resources.

Creating a Backup Unit

1. Open the Backup Unit Manager: Menu > Storage > Backup Unit Management.

2. Click + Create to create a new Backup Unit.

3. In the dialog, enter a unique Name, a Password, and an E-mail address to which the backup systems may send status reports.

4. Confirm your entries by clicking Create Unit.

The Backup Unit is now created and added to the list on the right inside of the Backup Unit Manager.

Deleting a Backup Unit

If you no longer need a backup unit and its backups, you can delete them to save costs and space. Deleting a Backup Unit also deletes all backups it contains.

1. Open the Backup Unit Manager: Menu > Storage > Backup Unit Management.

2. Select the required Backup Unit. Click Delete.

3. In the dialog that appears, confirm your action by entering your Password and clicking OK.

The selected item is deleted and cannot be restored. The Backup Unit and the backups it contains are deleted.

Automatic installation

The automatic setup of backups can only be applied to new servers prior to their first provisioning with an image provided and supported by IONOS. The default backup schedule may be changed any time after installation.

1. Create a new Server in the DCD.

2. Add a boot drive to the Server.

3. Select an IONOS image: Inspector > Images > IONOS Images.

4. In the Backup Unit field, select a backup unit to which you wish to assign the server.

Alternatively, When no Backup Unit is available, you may create one.

5. Inspector > Backup Unit > + Create Backup Unit and assign it to the server.

6. When a Backup Unit is chosen, the Initialize Backup window opens. Click OK to finalize.

Once the Backup Unit is chosen for your Server, you can continue by adding Internet access or further modifying the DCD.

7. When ready, Provision Changes.

The server is provisioned, the backup agent is installed and the default backup plan activated.

The Backup Service includes features that cover most of the cyber security threats. You can use these features without an additional fee. In addition, you can enable advanced features to boost the protection of your workloads. The Advanced protection features appear in protection plans marked with the Advanced feature icon:

If at least one feature is enabled from an Advanced pack, you will be charged for the corresponding Advanced protection pack for each workload (a virtual machine, a server or a workstation).

Advanced Backup

Protects your workloads continuously and ensures that even last-minute changes of your work will not be lost.

• One-click recovery

• Continuous data protection

• Backup support for Microsoft SQL

• Server clusters and Microsoft Exchange clusters – Always On Availability Groups (AAG) and Database Availability Groups (DAG)

• Backup support for MariaDB, MySQL, Oracle DB, and SAP HANA

• Data protection map and compliance reporting

• Off-host data processing

• Remote operations with bootable media

Advanced Security

Protects your workloads continuously from all malware threats.

• Antivirus and antimalware protection with local signature-based detection (with realtime protection)

• Exploit prevention

• URL filtering

• Endpoint firewall management

• Forensic backup, scan backups for malware, safe recovery, corporate allowlist

• Smart protection plans (integration with CPOC alerts)

• Centralized backup scanning for malware

• Remote wipe

• Microsoft Defender Antivirus

• Microsoft Security Essentials

Advanced Management

Allows you to patch vulnerabilities on the protected workloads.

• Patch management

• Disk health

• Software inventory

• Fail-safe patching

• Cyber Scripting

• Remote assistance

• File transfer and sharing

• Selecting a session to connect

• Observing workloads in multi-view

• Connection modes: control, observe, and curtain

• Connection via the Quick Assist application

• Remote connection protocols: NEAR and Screen Sharing

• Session recording for NEAR connections

• Screenshot transmission

• Session history report – 24 monitors

• Threshold-based monitoring

• Anomaly-based monitoring

What is the reason for renaming "Managed Backup" to "Backup Service"?

The Managed Backup name is changed to Backup Service to standardize our product terminology. Previously, it was referred to as Managed Backup, Backup as a Service, or Backup by Acronis across different platforms. This new unified name ensures consistency in our communications and branding, service calalog and pricelist.

• In the , the product resides under Storage > Backup Service (previously named as Backups).

• In the , the name changed from Backup as a Service to Backup Service.

• In the , the product is renamed from IONOS Cloud Backup to Backup Service.

• Metering descriptions in the billing API call that returns a stay intact. For example, 30d per 1GB Backup Storage for Win. or Linux Server Backup.

• In the , the product is renamed from Backup units to Backup Service.

Rest assured, the service itself remains unchanged.

What firewall configurations are needed for effective backup agent communication?

Ensure that the following firewall rules are configured to allow the backup agent to communicate effectively:

What is the availability of IONOS data centers?

The availability of our data centers is 99.95%. The maximum number of maintenance hours is four in three months.

How is my virtual data center protected against hardware failures?

Our entire storage system ensures maximum redundancy for all hardware components. All storage volumes are replicated synchronously on additional storage servers, which are physically located in separate fire zones of the same modular data center. Additionally, all communication connections and devices are implemented with a minimum of single redundancy protection. In the event of a physical failure of a server with a VM, the VM restarts on another physical server.

How do I create snapshots or backups of my storage?

You can create snapshots or backups of your storage within the Data Center Designer.

What is the best way to protect data and improve performance with RAID?

Reliable performance and security are ensured, to a large extent, by storing the data in duplicate, meaning in two separate zones of the data center. Reliability and security would only be marginally improved by mirroring mass storage devices, such as RAID 1.

Striping with RAID 0, or using RAID 5 to boost speed and reliability, would also have hardly any effect; the same holds true for DRBD storage systems.

Updating Agent versions via the Backup Service Console

Under its Managed Services offering, IONOS Cloud regularly updates the entire Backup service platform and the corresponding Backup Agent. To avoid compatibility issues, we recommend regularly updating the Agent software on your VMs, workstations, or other backed-up devices. You can either use the Console to update the agents individually or set an automatic update for all machines.

If your Agent is already set to automatically update during the default maintenance window, you have to take no further action. However, if you have disabled the automatic update option, you should arrange for your Agent to be updated either manually or during maintenance. Otherwise, the software might cause compatibility issues in the future.

Updating individual machines manually

When an Agent is out of date, the system will provide a small alert under Settings. The circled number shows how many Agents require updating.

1. In the DCD, go to Storage > Backup Console, and log in to one of the backup consoles in the list.

2. In the backup console, go to Settings > Agents. The software displays the list of machines. The machines with outdated agent versions are marked with an orange exclamation mark.

3. Select the machines that you want to update the agents on. The machines must be online.

4. Click Update Agent for an individual machine or Update all outdated Agents for all machines.

1. In the Update agent window, click Update.

2. You will be notified that the process has started. The selected machines will be updated with the current Agent version.

Update all machines automatically

1. In the Backup Service web console, go to Settings > Agents. The software displays the list of machines. The machines with outdated agent versions are marked with an orange exclamation mark.

2. Select the machines that you want to update the agents on. The machines must be online.

3. Activate the Automatically update agents tab. This aligns the update with IONOS Cloud’s regular maintenance.

4. Activate Maintenance window and set a timeframe below.

5. Click Apply. The selected machines will be updated regularly with the current Agent version during the chosen timeframe.

Acronis Backup Agent facilitates the backup and recovery of data on Linux systems. It allows users to protect and restore their data efficiently. The Acronis Agent is installed on individual machines and servers to enable seamless integration with the Acronis Backup infrastructure, providing features such as scheduled backups, recovery options, and data protection in various environments.

Prerequisites

• Ensure that you have the following:

  • Appropriate permissions for installation.

  • Your browser allows pop-ups.

  • A backup unit to download the installer.

  • Internet connectivity for the Virtual Machine (VM) and all its ports are open:

• Only contract administrators, owners, and users with the Create Backup Units privilege can use the Backup Console.

• For Ubuntu and Debian, update the package list using:

  sudo apt-get update

• For CentOS, Rocky, and Alma, update the package list using:

  sudo yum makecache

• Make sure to install wget using either of these:

  sudo yum install wget

  sudo apt install wget

Download the Acronis Backup Agent Installer

1. In the DCD, go to Menu > Storage > Backup Console.
2. Select a backup unit from the drop-down menu for which you want to download the backup agent installer.

4. In Add Devices window, scroll down to SERVERS and then select Linux.

Install the Acronis Backup Agent

1. To make the downloaded binary file executable, use:

   chmod u+x name_of_your_agent.bin

2. Run the installer file by executing the following command:

   ./name_of_your_agent.bin

3. The Acronis Agent setup will now be initiated. Select the components that you want to install from the Component Selection list. You can choose Agent for Linux and then select Next.
4. To install the required packages automatically, select Continue; otherwise, select Skip.
5. The installation of the required packages will begin.
6. Once the installation is completed, a prompt to register the machine will be displayed. To get the registration information, select Show registration info and hit Enter.
7. You will see a Registration link and a Registration code. Use the Registration Code to register a machine in the Backup Console.
8. To register a machine in the console devices, go to console DEVICES > + Add > REGISTRATION VIA CODE. Click REGISTER.

Unattended installation

The installation of Acronis Backup Agent, for which you do not need to select options or provide input for each step, you can use either of the following methods:

Using token

For unattended installation, you need to generate a token first:

1. In the Backup window, go to DEVICES and click +Add.
2. Scroll down to REGISTRATION TOKEN > GENERATE.
3. Run the following command:

   ./name_of_agent.bin -a --rain="https://backup.xyz.com" --token=XXXX-XXXX-XXXX

Using backup unit credentials

Run the following command:

./name_of_agent.bin -a --rain="https://backup.xyz.com" --login=contractnumber- backupunitname --password=xxxxx

By default, the Backup Service uses AES-256 server-side encryption for storage devices, preventing unauthorized access outside the server. This document describes how to apply customer-side AES-256 encryption to a protection plan using a password.

Opening the Backup Console

In the DCD, go to Menu > Storage and select the required Backup Unit in Backups:

Encrypting backups

Backup encryption can be enabled only during creation of the new protection plan.

1. Navigate to MANAGEMENT > Protection plans.

2. Click on the + Create Plan in the right pan.

3. Click on the Specify password link in the Encryption section.

1. Enter a strong encryption password and confirm it to ensure there are no typos. Make sure to store this password securely, as it will be required to restore the backups.

2. Configure any additional settings for your protection plan.

3. Assign this protection plan to your devices.