Restore or Failback to Server 2022 Hyper-V host fails with "Unable to update VM security descriptor Error"

KB ID: 4377
Product: Veeam Backup & Replication | 11
Published: 2023-01-18
Last Modified: 2023-01-18
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please try again later.

Article Applicability

This article is specific to an error that occurs when attempting to restore or failback to a Hyper-V host running  Windows Server 2022 or versions 2004 and 20H2 of the Semi-Annual Channel versions of Windows Server.

This article addresses an issue that is mentioned in the Veeam Backup & Replication 11a release notes:

Restoring VMs  that were backed up from Hyper-V 2012R2 (or later) hosts in the crash-consistent state to Hyper-V 2022 and SAC version 2004 and 20H2 hosts fails with the “Writer 'Microsoft Hyper-V VSS Writer' is failed at 'VSS_WS_FAILED_AT_POST_RESTORE'” error due to a bug in Hyper-V.

Challenge

A Full VM Restore, Instant Recovery, or Failback of Hyper-V VM with Configuration Version 5.0Configuration Version 5.0 was first introduced with Server 2012 R2 Hyper-V. to a Hyper-V host running Server 2022 fails with the following error:

Unable to update VM security descriptor Error: Failed to call RPC function
'HvRestorePostRestore': Writer 'Microsoft Hyper-V VSS Writer' is failed at
'VSS_WS_FAILED_AT_POST_RESTORE'. The writer experienced a non-
transient error. If the backup process is retried,. the error is likely to reoccur.
Failed to finalize restore session. Failed to process request to process post
restore steps. Failed to execute post restore command.
Example of error as shown in logs
Info         [HV-VSS] Performing post restore steps on the hyper-v server.
Info             [proxy] Performing HvVSS post restore steps...
Error        Failed to call RPC function 'HvRestorePostRestore': Writer 'Microsoft Hyper-V VSS Writer' is failed at 'VSS_WS_FAILED_AT_POST_RESTORE'. The writer experienced a non-transient error.  If the backup process is retried,. the error is likely to reoccur. Failed to finalize restore session. Failed to process request to process post restore steps. Failed to execute post restore command.. InParams: '<InputArguments><SessionId value="36cee020-bf24-429e-8867-6e756182ae87" /><TimeoutMs value="900000" /></InputArguments>'. 
Error        Writer 'Microsoft Hyper-V VSS Writer' is failed at 'VSS_WS_FAILED_AT_POST_RESTORE'.
Error        The writer experienced a non-transient error.  If the backup process is retried,
Error        the error is likely to reoccur.
Error        --tr:Failed to verify writers state.
Error        --tr:Failed to perform post-restore steps.
Error        Failed to finalize restore session.
Error        Failed to process request to process post restore steps.
Error        Failed to execute post restore command. (System.Runtime.InteropServices.COMException)

Cause

Due to a bug in Hyper-V 2022, the Hyper-V host will fail to register VMs that are being restored if they were using Configuration Version 5.0. Through testing, we have determined that this restore/failback issue does not occur if Application-Aware Processing was used to process the source VM that had configuration version 5.0.

Note: Configuration Version 5.0 was associated with Server 2012 R2. However, VMs with Configuration Version 5.0 may also exist on Hyper-V hosts running Server 2016 and Server 2019. Starting with Server 2022, Configuration Version 5.0 is no longer supported, and in most scenarios, the Hyper-V 2022 host will automatically upgrade those VMs to Configuration Version 8.0.

When the restore or failback operation fails to complete, the following events can be observed within the VMMS Events on the destination Server 2022 Hyper-V host:

Event 10113, Hyper-V-VMMS
Unable to parse backup metadata for component '<VM-guid>'.
Event 10113
Event 10104, Hyper-V-VMMS
One or more errors occurred while restoring the virtual machine from backup. The virtual machine
might not have registered or it might not start. (Virtual machine ID <VM_GUID>)
Event 10104

Solution

Prevention

Server 2016/2019 Hyper-V Hosts
For environments where the VMs with Configuration Version 5.0 are located on a Hyper-V host running Server 2016 or Server 2019, either:

Server 2012 R2 Hyper-V Hosts
For environments using a Hyper-V host running Server 2012 R2, there is only one option: Application-Aware Processing must be enabled within the backup or replication job(s), and it must successfully process the VMs. This will ensure that the generated restore points can be restored to a Hyper-V host running Server 2022.

Workarounds

For scenarios where the restore or failback operation must be completed, use the following workarounds:
 

Restore
  1. Use VM Files Restore to restore all the VM's files to a folder on the Hyper-V host running server 2022.
  2. On that Hyper-V host, use the Hyper-V Manager's Import Virtual Machine function with those restored VM files.

     
Replica Failback
  1. Take note of the replica's:
    • Generation, either 1 or 2
    • Memory Configuration
    • CPU Configuration
  2. On the failback destination, create a New Virtual Machine with the same Generation, Memory, and CPU configuration as the replica but with no disks.
  3. Within the Veeam Backup & Replication console perform failback:
  4. Proceed with normal failback handling, choosing either Commit failback or Undo failback.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please try again later.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case

By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please try again later.