{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "slug": "dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path", "url": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/" }, "title": "Identify whether a Hyper-V backup product uses host VSS or the WMI path", "summary": "Which Hyper-V backup interface and change-tracking model is a backup implementation using?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:14:56+00:00", "modified_at": "2026-09-08T18:23:27+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 200, "potentially_affected": "Administrators and developers reviewing Hyper-V backup implementations.", "dse_recommendation": "Ask the backup owner or vendor to document the interface, reference-point lifecycle, and supported restore workflow.", "primary_source": { "name": "Hyper-V Backup Approaches", "url": "https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/backup-approaches", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Hyper-V supports host-side VM backup without requiring custom backup software inside each VM. Microsoft describes the host VSS writer as a small-scale approach that backs up the server’s VMs together. From Windows Server 2016, the Hyper-V WMI backup API uses reference points and resilient change tracking instead of host VSS, while still using VSS inside the guest for backup purposes. Microsoft documentation.

\n

Applicability

\n

Identify the host release, backup product version, protected guests, and vendor-supported interface. Review the product’s guest consistency and data-reading behavior instead of inferring it from a generic statement that Hyper-V backup is supported.

\n

DSE recommendation

\n

Ask the backup owner or vendor to document the interface, reference-point lifecycle, and supported restore workflow. Record how failures and stale tracking state are investigated. Keep the implementation decision separate from retention policy and the business recovery objective.

\n

Verification

\n

Run a controlled backup and restore of a representative VM and verify the application’s recovered state. Preserve job and guest consistency evidence and compare the observed behavior with the product’s documented method. Resolve missing application data or uncertain tracking behavior before depending on the implementation for that workload.

\n

Official references

\n

Microsoft Learn: Hyper-V Backup Approaches. Source reviewed September 8, 2026.

", "content_text": "Source facts\nHyper-V supports host-side VM backup without requiring custom backup software inside each VM. Microsoft describes the host VSS writer as a small-scale approach that backs up the server’s VMs together. From Windows Server 2016, the Hyper-V WMI backup API uses reference points and resilient change tracking instead of host VSS, while still using VSS inside the guest for backup purposes. Microsoft documentation.\nApplicability\nIdentify the host release, backup product version, protected guests, and vendor-supported interface. Review the product’s guest consistency and data-reading behavior instead of inferring it from a generic statement that Hyper-V backup is supported.\nDSE recommendation\nAsk the backup owner or vendor to document the interface, reference-point lifecycle, and supported restore workflow. Record how failures and stale tracking state are investigated. Keep the implementation decision separate from retention policy and the business recovery objective.\nVerification\nRun a controlled backup and restore of a representative VM and verify the application’s recovered state. Preserve job and guest consistency evidence and compare the observed behavior with the product’s documented method. Resolve missing application data or uncertain tracking behavior before depending on the implementation for that workload.\nOfficial references\nMicrosoft Learn: Hyper-V Backup Approaches. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nHyper-V supports host-side VM backup without requiring custom backup software inside each VM. Microsoft describes the host VSS writer as a small-scale approach that backs up the server’s VMs together. From Windows Server 2016, the Hyper-V WMI backup API uses reference points and resilient change tracking instead of host VSS, while still using VSS inside the guest for backup purposes. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/backup-approaches).\n\n## Applicability\n\nIdentify the host release, backup product version, protected guests, and vendor-supported interface. Review the product’s guest consistency and data-reading behavior instead of inferring it from a generic statement that Hyper-V backup is supported.\n\n## DSE recommendation\n\nAsk the backup owner or vendor to document the interface, reference-point lifecycle, and supported restore workflow. Record how failures and stale tracking state are investigated. Keep the implementation decision separate from retention policy and the business recovery objective.\n\n## Verification\n\nRun a controlled backup and restore of a representative VM and verify the application’s recovered state. Preserve job and guest consistency evidence and compare the observed behavior with the product’s documented method. Resolve missing application data or uncertain tracking behavior before depending on the implementation for that workload.\n\n## Official references\n\n[Microsoft Learn: Hyper-V Backup Approaches](https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/backup-approaches). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "url": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Identify whether a Hyper-V backup product uses host VSS or the WMI path", "item": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "url": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/", "headline": "Identify whether a Hyper-V backup product uses host VSS or the WMI path", "description": "Which Hyper-V backup interface and change-tracking model is a backup implementation using?", "abstract": "Which Hyper-V backup interface and change-tracking model is a backup implementation using?", "articleBody": "Source facts\nHyper-V supports host-side VM backup without requiring custom backup software inside each VM. Microsoft describes the host VSS writer as a small-scale approach that backs up the server’s VMs together. From Windows Server 2016, the Hyper-V WMI backup API uses reference points and resilient change tracking instead of host VSS, while still using VSS inside the guest for backup purposes. Microsoft documentation.\nApplicability\nIdentify the host release, backup product version, protected guests, and vendor-supported interface. Review the product’s guest consistency and data-reading behavior instead of inferring it from a generic statement that Hyper-V backup is supported.\nDSE recommendation\nAsk the backup owner or vendor to document the interface, reference-point lifecycle, and supported restore workflow. Record how failures and stale tracking state are investigated. Keep the implementation decision separate from retention policy and the business recovery objective.\nVerification\nRun a controlled backup and restore of a representative VM and verify the application’s recovered state. Preserve job and guest consistency evidence and compare the observed behavior with the product’s documented method. Resolve missing application data or uncertain tracking behavior before depending on the implementation for that workload.\nOfficial references\nMicrosoft Learn: Hyper-V Backup Approaches. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:14:56+00:00", "dateModified": "2026-09-08T18:23:27+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-135-identify-whether-a-hyper-v-backup-product-uses-host-vss-or-the-wmi-path/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Identify whether a Hyper-V backup product uses host VSS or the WMI path" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 200, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Hyper-V Backup Approaches", "url": "https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/backup-approaches" } } ] } }