11.2.0-1 – September 16, 2026

New features

Hyper-V backups now support Microsoft's Resilient Change Tracking (RCT)

Unitrends now protects Hyper-V virtual machines using Resilient Change Tracking (RCT), the change tracking mechanism built into Hyper-V and recommended by Microsoft.
Because RCT is provided by the Hyper-V host itself, it tracks changes reliably when a VM moves between cluster nodes, which cures oversized incremental backups.
Full, incremental, and incremental forever backups are all supported on RCT, as are full recovery, instant recovery (IR), file-level recovery (FLR), and virtual disk recovery.

For details, read: Hyper-V virtual machines and Recovering a virtual machine.

Hyper-V VM recovery to Cluster Shared Volumes (CSVs)

You can now recover a Hyper-V virtual machine directly to a CSV.
Previously, Hyper-V recovery required storage local to the Hyper-V host, which prevented recovery in clustered environments where local storage is rarely large enough to accept a VM.
When you select a recovery target, CSVs on the target host now appear alongside local storage, grouped under a Cluster Shared Volumes label.

For details, read: Preparing for instant recovery.

LDAPS support for Active Directory authentication

Appliance Active Directory (AD) authentication now supports LDAP over SSL/TLS (LDAPS).
User credentials and directory queries exchanged between the appliance and your domain controller are now encrypted in transit.
For details, see To set up Active Directory authentication and To enable Certificate Validation for LDAPS.

WireGuard secure tunnel for replication

New replication configurations now use WireGuard for the secure tunnel to a hot backup copy target instead of OpenVPN.
WireGuard runs in the Linux kernel, which reduces CPU overhead on both appliances and improves throughput over the same link.
For details, read: WireGuard secure tunnel.

NOTE  Replication configured before this release continues to use OpenVPN, and updating does not convert an existing tunnel.
A new target added to a source that is already using OpenVPN also uses OpenVPN.
To move an existing source to WireGuard, contact Support.

Enhancements

Faster file-level recovery and virtual disk mounts

File-level recovery (FLR) and virtual disk recovery objects now start noticeably faster, particularly for large virtual disks.
The improvement comes from more efficient handling of the virtual disk layout when the recovery object is built, and from reduced logging during start up.
No configuration change is required.
For details, see Windows file-level recovery and Recovering Virtual Disks.

Windows agent Changed Block Tracking driver is now Microsoft-signed

The Hyper-V Changed Block Tracking (CBT) driver packaged with the Windows agent is now signed through the Microsoft Partner Center.
The driver version is also now stable across builds, so updating the Windows agent no longer reinstalls the CBT kernel driver unless the driver itself has changed.
For details, see Updating and removing the Windows agent.

Fixes

  • NAS incremental backups no longer fail when a single file or directory cannot be read.
    The skipped-file threshold now applies to NAS backups, so an unreadable item is skipped and reported as a warning instead of ending the backup with an error.
    Previously, incremental backups of a NAS volume failed outright while full and differential backups of the same volume succeeded or completed with warnings.
    For details, see NAS Backups Overview.
  • Backups now run with secure agent pairing enabled when the appliance's IP address is translated by NAT.
    Previously, a paired agent could not open a control channel to the appliance across a NAT boundary, which is a common configuration when protecting assets in a DMZ, and the backup failed with a connection error.
    For details, see Secure agent pairing for Windows and Linux agents.
  • The logrotate service now runs after an appliance is migrated from CentOS 7 to AlmaLinux 9.
    Previously the migration left the service inactive, so appliance logs were never rotated and could fill the /var partition, which in turn slowed or stopped backups.
    For details, see CentOS 7 Upgrade to AlmaLinux 9.
  • logrotate now rotates the appliance log files in /usr/bp/logs.dir/.
    Previously the bp-* logrotate configurations were missing a required directive, so rotation was silently skipped for logs including alertman, api, bpserver, tasker, and gui.
    Those logs could grow without limit and eventually exhaust disk space, and because logrotate exited successfully no alert was raised.
  • Instant recovery and Data Copy Access (DCA) jobs no longer send DNS updates to your production DNS servers.
    Previously, the dnsmasq service used by these jobs forwarded registrations for its internal 192.168.53.x addresses upstream, adding entries for addresses that do not exist on your network.
  • Appliances running AlmaLinux 9 no longer send "usleep is deprecated" warning emails.
    The scheduled database maintenance job that generated the warning has been updated.