In this release, NetApp Backup and Recovery introduces the following enhancements for Kubernetes workloads:

For details about protecting Kubernetes workloads, refer to Learn about protecting Kubernetes workloads with NetApp Backup and Recovery.

In this release, NetApp Backup and Recovery introduces the following enhancements for ONTAP Volumes workloads:

For more details, refer to Unregister Backup and Recovery for a system.

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

In this release, NetApp Backup and Recovery introduces the following enhancement for Oracle Database workloads:

Restore to an alternate location: NetApp Backup and Recovery now supports restoring an Oracle database to an alternate location (a different registered host).

For details about protecting Oracle Database workloads, refer to Learn about protecting Oracle Database workloads with NetApp Backup and Recovery.

Ransomware Resilience now provides a manual user activity agent creation workflow, enabling more control in how you create your user activity agent on your VM. With this new workflow, you can install the user activity agent directly and configure proxy settings without providing VM SSH keys.

For more information, see Create a user activity agent.

Ransomware Resilience now provides an enhanced isolated recovery environment configuration workflow. The new workflow clarifies and simplifies the process to set-up an isolate recovery environment for the cloud or on-premises environments.

For more information, see Create an isolated recovery environment for a clean restore.

Ransomware Resilience has improved the workflow for enabling user activity monitoring. Previously, Ransomware Resilience tested the connection of the data collector every time you enabled a ransomware protection strategy with user activity monitoring on a workload. With that update, that check is now skipped if a data collector exists for the storage VM and is in the "running" state, accelerating the protection workflow.

For more information, see protect workloads.

Support for the Flex service level from Google Cloud NetApp Volumes in Ransomware Resilience is now generally available (GA).

In this release, Oracle Database workloads introduces the following enhancement:

Oracle Data Guard support: NetApp Backup and Recovery now supports using protection groups to protect primary and standby databases that use Oracle Data Guard for high availability.

For details about protecting Oracle Database workloads, refer to Learn about protecting Oracle Database workloads with NetApp Backup and Recovery.

The 4.12.0 release supports both standard mode and restricted mode.

This release of the Console agent includes security improvements and bug fixes.

This release includes security improvements and bug fixes.

Value Insights now includes ONTAP, E-Series, and StorageGRID systems in health, risk, security risk, and lifecycle totals. You can filter the dashboard by platform to view platform-specific details. Delivered and projected savings remain available for ONTAP systems only.

Discover Value Insights in Digital Advisor.

You can now use the NetApp Console to deploy and manage the General Availability (GA) version of Cloud Volumes ONTAP 9.19.1 in Azure.

The Console has supported Cloud Volumes ONTAP 9.19.1 in AWS and Google Cloud since August 2026.

Cloud Volumes ONTAP 9.19.1 release notes

Starting with Cloud Volumes ONTAP 9.19.1 GA, Azure encryption at host is enabled by default for new Azure single-node and high availability (HA) deployments that meet the prerequisites. This feature encrypts data on the physical server that hosts the VM, including the ephemeral disk and associated host-level caches, as data is written to and read from the host.

Before deploying Cloud Volumes ONTAP in Azure, confirm that your environment meets the following prerequisites:

Note these points:

Microsoft documentation: Use the Azure portal to enable end-to-end encryption using encryption at host

Cloud Volumes ONTAP 9.19.1 and later support backend cluster network encryption for HA configurations in Azure and Google Cloud.

Enabling cluster network encryption might affect cluster performance. Exercise caution and verify that your environment can accommodate the additional overhead before enabling this feature.

Enable backend network encryption on Cloud Volumes ONTAP clusters

During scheduled maintenance, Azure can briefly pause a VM in a Cloud Volumes ONTAP HA pair. ONTAP might interpret the pause as a node outage and move storage operations to the partner node, then move them back when the VM resumes (takeover and giveback). This process can disrupt active client connections even when there is no node failure.

With Cloud Volumes ONTAP 9.19.1 and later, you can enable an optional setting that lets the HA pair continue operating through an Azure scheduled-maintenance freeze without automatically initiating takeover and giveback.

Prevent disruptions during Azure maintenance for Cloud Volumes ONTAP HA pairs

In this release, NetApp Backup and Recovery introduces the following licensing enhancement for all workloads:

Licensing change: Charges no longer apply to backups using disk-to-disk or disk-to-disk fan-out architectures. Charges apply only to backups to object storage, including backups using 3-2-1 or disk-to-object-storage architectures.

For details about licensing, refer to Set up licensing for NetApp Backup and Recovery.

In this release, Hyper-V workloads introduces the following enhancements:

For details about protecting Hyper-V workloads, refer to Learn about protecting Hyper-V workloads with NetApp Backup and Recovery.

In this release, Oracle Database workloads introduces the following enhancement:

Automatic archive log management: During database restore and clone operations, NetApp Backup and Recovery automatically discovers and mounts the required archive logs, then unmounts them when the operation is complete. Primary, secondary, and object storage log sources are supported.

For details about protecting Oracle Database workloads, refer to Learn about protecting Oracle Database workloads with NetApp Backup and Recovery.

NetApp Disaster Recovery now supports setting optional boot order for resource groups in a Kubernetes replication plan by specifying a priority order and optional delay time for resources. This option enables you to boot resources at the same time when necessary and delay booting for resources that are dependent on others, supporting your applications to come back online in a healthy manner.

For more information, see create a replication plan.

Disaster Recovery now supports SnapLock volumes, enabling you to failover tamperproof snapshots.. When performing failback with SnapLock volumes, you must use the Take snapshot now option to ensure failback completes successfully.

For more information, see instructions for failover and failback.

Refresh runs for vCenter, replication plans, and compliance have been simplified into a single job to facilitate a faster execution. To see this change, learn how to monitor jobs.

Disaster Recovery has added compliance checks to identify missing working environments for Kubernetes workloads. These compliance checks help ensure workload health for the integrity of your replication plans.

You can download on-demand PowerPoint reports or schedule one-time, weekly, monthly, or quarterly delivery from Storage > Keystone > Monitoring > Health reports in the NetApp Console. Each report combines subscription usage, operational health, risks, and vulnerabilities across selected subscriptions, helping you identify concerns and share actionable insights with recipients. To learn more, refer to Generate and schedule health reports for Keystone subscriptions.

You can view physical capacity, logical capacity, and storage efficiency for ONTAP clusters and their aggregates in Assets > Clusters and aggregates. This is available only for Keystone STaaS subscriptions billed on physical capacity. To learn more, refer to View assets across your Keystone subscriptions and View assets associated with a Keystone subscription.

The initial release of OCI NetApp Storage Service (OCI NSS) for Workload Factory offers onboarding, system discovery, credential management, and link creation and association. To request access to OCI NSS, open a support ticket with Oracle.

You can find detailed documentation for Workload Factory in the NetApp Console, including guides for onboarding, system discovery, credential management, and link creation and association.

Workload Factory documentation for NetApp Console

In this release, KVM, Hyper-V, and VMware workloads introduce the following enhancement:

Console Role-Based Access Control (RBAC) support: The Hyper-V, KVM, and VMware workloads now support the NetApp Console framework for RBAC, enabling you to manage access to individual Hyper-V, KVM, or VMware hosts.

Learn more about using RBAC in NetApp Backup and Recovery.

In this release, ONTAP Volumes workloads introduces the following preview enhancements:

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

In this release, VMware workloads introduces the following enhancement:

Google Cloud NetApp Volumes Flex Unified support: NetApp Backup and Recovery for VMware workloads now supports the the Flex Unified service level for Google Cloud NetApp Volumes. Flex Unified is supported in ONTAP-mode only.

For details about protecting VMware workloads, refer to Protect VMware workloads with NetApp Backup and Recovery.

An update to the documentation for the Value Insights Dashboard has been published.

Learn more about how to use Value Insights Dashboard in Digital Advisor.

The Config Drift feature has been deprecated and is no longer available in Digital Advisor as of September 2026.

For questions or to share feedback, contact the Active IQ team.

In this release, ONTAP Volumes workloads introduces the following preview enhancements:

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

In this release, Kubernetes workloads introduces the following enhancements:

For details about protecting Kubernetes workloads, refer to Learn about protecting Kubernetes workloads with NetApp Backup and Recovery.

You can now deploy Cloud Volumes ONTAP systems in private mode with capacity-based licenses in AWS, Azure, and Google Cloud.

NetApp supports only the Essentials package for capacity-based licensing in private mode. Purchase a capacity-based Bring-Your-Own License (BYOL) Essentials package from NetApp and assign it to your system during deployment. The first 500 GiB of consumed capacity does not count toward your license charges. You can purchase additional packages as your workload requirements grow.

NetApp recommends capacity-based licensing for all private-mode Cloud Volumes ONTAP deployments. If you have existing private-mode deployments with node-based licenses, you can convert them to capacity-based licensing by purchasing an Essentials package from NetApp. This new deployment capability, combined with the conversion option, supports NetApp's plan to gradually move away from node-based licensing to capacity-based licensing.

A new private mode release is now available to download from the NetApp Support Site

The 4.10.0 release includes updates to the following NetApp Console components and services.

Private mode can now be installed and run on Red Hat Enterprise Linux (RHEL) 9.6, providing users with the latest supported operating system for enhanced security and performance. Learn about host requirements for private mode

The 4.11.0 release supports both standard mode and restricted mode.

This release of the Console agent includes security improvements and bug fixes.

In this release, KVM, Hyper-V, and VMware workloads introduce the following enhancement:

Credential selection during VM host discovery: When you discover a KVM, Hyper-V, or VMware host, you can now use credentials that you have already added to Backup and Recovery.

In this release, Hyper-V workloads introduces the following enhancement:

Spanning disk protection for VMs: For CIFS configurations, Backup and Recovery now supports protecting every disk attached to each VM in a protection group. This includes files distributed across multiple ONTAP volumes or ONTAP storage systems (spanning disks) and files limited to a single location.

For details about protecting Hyper-V workloads, refer to Learn about protecting Hyper-V workloads with NetApp Backup and Recovery.

In this release, ONTAP Volumes workloads introduces the following preview enhancement:

Daily backup data transfer report: NetApp Backup and Recovery for Volumes now includes a daily backup data transfer report under the Reports tab, giving you visibility into daily backup and replication data transfer activity across your environment. You can generate the report for the full account or for selected storage systems, filter by date range and protection type, and download the results as a CSV.

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

This release of Data Classification includes security improvements and performance enhancements.

Support for Kubernetes-based workloads in NetApp Disaster Recovery is now generally available (GA). With support for Kubernetes-based workloads, you can protect applications running on Kubernetes clusters, including OpenShift Virtualization environments. Disaster Recovery supports any version of Kubernetes currently supported by Trident Protect, ensuring seamless integration and robust disaster recovery capabilities for containerized applications.

To begin protecting Kubernetes-based workloads, see Kubernetes requirements for NetApp Disaster Recovery.

Disaster Recovery now supports resource transformations, allowing you to modify any aspect of a workload during failover. This feature provides flexibility to adapt workloads to different environments and configurations during a disaster recovery event.

Resource transformations are applied when you create a replication plan. You can create, edit, and delete resource transformations in the new Settings page. For more information, see Manage resource transformations.

You can now inject custom scripting into the failover workflow to coordinate the quiescence and resumption of applications. This feature helps ensure that applications are properly prepared before a snapshot is replicated and restored appropriately so operations can resume seamlessly after failover.

To learn how to inject a custom script, see Create a replication plan.

Disaster Recovery has added a Workloads page to the UI, providing a comprehensive view of all discovered workloads and their protection status. The Workloads page enables you to monitor and manage your workloads more effectively.

For more information, see Review health and protection status in Disaster Recovery.

Disaster Recovery now provides a Settings page to centrally manage resource transformation templates and AppVaults. This page provides a single interface to configure and manage these critical components of your disaster recovery plans. To learn more about options in the Settings page, see Manage resource transformations and Manage AppVaults.

Disaster Recovery has introduced enhanced validations in the replication plan creation page to ensure a smoother, error-free user experience.

Disaster Recovery has also increased the resiliency of the service to tolerate intermittent request timeouts, enhancing the UI's overall performance and reliability.

Clean restores are now available for recovery after suspicious user behavior and user-based encryption attacks. This enhancement adds to the existing support for encryption (entropy)-based attacks. This enhanced capability enables you to take advantage of clean restore's guided approach, identifying optimal restore points to minimize data loss and accelerate recovery.

For more information, see Create an isolated recovery environment for a clean restore.

The Virtual Machine feature will be deprecated in Digital Advisor in October 2026.

For questions or to share feedback, contact the Active IQ team.

Cloud Volumes ONTAP now supports deployment in Azure Government Secret and Top Secret regions in private preview. This capability extends Cloud Volumes ONTAP to Microsoft's classified Azure environments, enabling government and defense customers to use ONTAP for data management, protection, and disaster recovery to support workloads for national security. Contact your NetApp accounts team to participate.

For information, refer to Azure documentation:

You can now manage your StorageGRID 12.1 system from NetApp Console.

Learn how to administer StorageGRID using the advanced view in NetApp Console.

You can now trigger failover using the latest snapshot, which is the preferred method when you're not taking a new snapshot.

When selecting a specific snapshot baseline, SnapMirror transfer snapshots are hidden by default. This is because they can be deleted mid-failover, leading to an inability to reprotect the workload after failover due to a "no common snapshot found" error. You can still use these snapshots, but will have to complete an additional confirmation prompt to acknowledge the risk.

For more information, see Fail over to a remote site.

Ransomware Resilience now supports delivering SIEM events through the Console agent, in addition to the existing option to deliver events through NetApp Console.

When you deliver SIEM events through the Console agent, you can keep SIEM event delivery within your network boundary. This simplifies deployment for on-premises environments with strict IP address allow lists and can align better with existing security controls. To use this option, ensure the Console agent can resolve and connect to your SIEM endpoint on the required port through any firewall or proxy controls.

For more information, see Configure a SIEM system.

You can now deploy Cloud Volumes ONTAP 9.12.1 GA and later in the Austria East (austriaeast) and Belgium Central (belgiumcentral) regions in Azure. The following deployment types are supported:

For a list of all supported regions, refer to the Global Regions Map under Azure.

The Value Insights feature consolidates overall health, savings, stability, and security information for ONTAP systems. You can use this information to improve system health and performance through a continuous, data-driven view of your ONTAP environment.

Learn more about Value Insights.

In this release, Hyper-V workloads introduces the following enhancement:

Restore object storage backup to alternate location: You can now restore Hyper-V VMs, files, and folders from object storage to an alternate storage location.

For details about protecting Hyper-V workloads, refer to Learn about protecting Hyper-V workloads with NetApp Backup and Recovery.

In this release, Kubernetes workloads introduces the following enhancements:

For details about protecting Kubernetes workloads, refer to Learn about protecting Kubernetes workloads with NetApp Backup and Recovery.

In this release, Oracle Database workloads introduces the following enhancements:

For details about protecting Oracle Database workloads, refer to Learn about protecting Oracle Database workloads with NetApp Backup and Recovery.

The 4.10.0 release supports both standard mode and restricted mode.

This release of the Console agent includes security improvements and bug fixes.

NetApp Console 4.10.0 administration includes security and bug fixes.

Ransomware Resilience now supports deleting a data collector. The data collector is automatically created when you enable user activity detection on workloads; if the data collector becomes stale, you can now manually delete it.

For more information, see Delete a data collector.

The Config Drift feature will be deprecated in Digital Advisor in September 2026.

For questions or to share feedback, contact the Active IQ team.

In this release, VMware workloads introduces the following enhancements:

For details about protecting VMware workloads, refer to Protect VMware workloads overview.

In this release, Kubernetes workloads introduces the following enhancements:

For details about protecting Kubernetes workloads, refer to Protect Kubernetes workloads overview.

In this release, ONTAP Volumes workloads introduces the following enhancements:

For details about protecting ONTAP Volumes workloads, refer to Protect ONTAP Volumes workloads overview.

Data Classification now provides an Active scans tab in the Configuration menu, providing an enhanced experience for managing scans. The Active scans tab provides an overview of all volumes that you've activated for scanning with familiar filters to sort your resources. The tab also provides a central location to prioritize scans, pause scans, and review errors.

For more information, see Manage scans.

The Disaster Recovery dashboard has been refreshed with an enhanced experience that provides a comprehensive, at-a-glance view of your entire Disaster Recovery estate. The new dashboard includes:

For more information, see View the health of your NetApp Disaster Recovery plans on the Dashboard.

Reporting capabilities have been expanded to provide deeper insight into Disaster Recovery activity across your environment:

For more information, see Create NetApp Disaster Recovery reports.

Disaster Recovery has improved the accountability and auditability of jobs with user-level job logging. Every job executed now records the user who initiated it, providing a clear audit trail for compliance and troubleshooting purposes. Jobs triggered automatically by Disaster Recovery are identified as "system", making it easy to distinguish between user-initiated and service-initiated activity.

For more information, see Monitor NetApp Disaster Recovery jobs.

Various under-the-hood improvements have been made to reduce overall system resource consumption and increase performance across Disaster Recovery operations.

Ransomware Resilience now provides support for SAN workloads from Google Cloud NetApp Volumes, enabling you to detect encryption-based ransomware attacks for SAN workloads. Support for SAN in Google Cloud NetApp Volumes is currently in preview.

For more information, see supported systems and SAN storage in Ransomware Resilience.

Ransomware Resilience now provides a simplified user experience to block users and manage blocked users. With this update, you can easily review and modify which users you have blocked. You must have configured user activity detection to block users.

For more information, see Managed blocked users.

Cloud Volumes ONTAP now supports integration with Microsoft OneLake in public preview.
You can integrate Cloud Volumes ONTAP with Microsoft Fabric using Microsoft OneLake to make existing Cloud Volumes ONTAP NAS data available to Microsoft analytics and AI services such as Power BI, Azure AI Search, OpenAI, and Microsoft Copilot. The integration requires no data movement or duplication. The integration uses ONTAP S3 multi-protocol access to connect Cloud Volumes ONTAP to an existing Microsoft Fabric lakehouse.

The well-architected dashboard in NetApp Console now allows you to fix configuration recommendations for your Cloud Volumes ONTAP systems.

You can also dismiss one or more configurations from the well-architected analysis. This allows you to ignore specific configurations that don't apply to your environment.

If you want to include a dismissed configuration later, you can reactivate it in the well-architected dashboard. This restores the configuration to the analysis and allows you to get recommendations and fixes for it.