210
vSphere Data Protection Administration Guide vSphere Data Protection 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see http://www.vmware.com/support/pubs. EN-001565-00

Vmware Data Protection Administration Guide 60

  • Upload
    radocs2

  • View
    51

  • Download
    3

Embed Size (px)

DESCRIPTION

Vmware Data Protection Administration Guide 60

Citation preview

  • vSphere Data Protection AdministrationGuide

    vSphere Data Protection 6.0

    This document supports the version of each product listed andsupports all subsequent versions until the document is replacedby a new edition. To check for more recent editions of thisdocument, see http://www.vmware.com/support/pubs.

    EN-001565-00

  • VMware, Inc.3401 Hillview Ave.Palo Alto, CA 94304www.vmware.com

    2 VMware, Inc.

    vSphere Data Protection Administration Guide

    You can find the most up-to-date technical documentation on the VMware Web site at:

    http://www.vmware.com/support/

    The VMware Web site also provides the latest product updates.

    If you have comments about this documentation, submit your feedback to:

    [email protected]

    Copyright 20072015 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.

    VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.

  • VMware, Inc. 3

    Contents

    1 UnderstandingVDP 13IntroductiontovSphereDataProtection 14BenefitsofvSphereDataProtection 14VDPFunctionality 15

    ImagelevelBackupandRestore 16SingleVMDKBackupandRestore 16GuestlevelBackupandRestore 16

    Replication 17FileLevelRecovery 17CustomerExperienceImprovementProgram 17vSphereDataProtectionArchitecture 17

    2 VDPInstallationandConfiguration 19vSphereDataProtectionCapacityRequirements 20SoftwareRequirements 20

    HardwareVersionsandMigration 20vSphereHostsandvSphereFlashReadCacheCompatibilityandPerformance 20UnsupportedDiskTypes 20

    SystemRequirements 20VDPSystemRequirements 21IPv6Requirements 21

    PreinstallationConfiguration 21DNSConfiguration 21NTPConfiguration 22vCenterHostsandClustersView 22UserAccountConfiguration 22

    VDPBestPractices 23GeneralBestPractices 23HotAddBestPractices 24StorageCapacityforInitialVDPDeployment 24MonitoringVDPCapacity 24

    VDPInstallation 25DeployingtheOVFTemplate 25

    InitialConfiguration 26

    3 VDPApplianceUpgrades 31BestPractices 32SupportedUpgradePaths 32CreatingaSnapshotoftheVDPAppliance 33MountingtheUpgradeISOImageontheAppliance 34InstallingtheUpgrade 34

    Freeingupspacefortheupgrade 36CompletingtheUpgrade 36RevertingBacktoaSnapshot 37UpgradingProxySoftware 38

  • vSphere Data Protection Administration Guide

    4 VMware, Inc.

    4 PostInstallationConfigurationofVDPAppliance 41AbouttheVDPConfigureUtility 42ViewingStatus 42StartingandStoppingServices 43CollectingLogs 44ModifyingConfigurationSettings 45

    NetworkSettings 45vCenterServerRegistration 45

    RollingBackanAppliance 46EmergencyRestore 46

    AutomaticHostDetection 49RefreshingRestorePoints 49ReconnectingtheHosttothevCenter 49

    5 SecuringCommunicationbetweenvCenterandVDP 51SecureVDPServicesCommunicationtovCenter 52SecureExternalProxyCommunicationwithvCenter 53

    6 ConfiguringVDP 55LoginSecurity 56ConfiguringtheCustomerExperienceImprovementProgram 56ConfigurationandMonitoring 57

    ViewingBackupApplianceConfiguration 57EditingtheBackupWindow 58ConfiguringEmail 58ViewingtheUserInterfaceLog 59RunninganIntegrityCheck 60

    MonitoringVDPActivity 60ViewingRecentTasks 61ViewingAlarms 61ViewingtheEventConsole 62

    VDPShutdownandStartupProcedures 62

    7 Proxies 63ProxyOverview 64

    ConsiderationsBeforeDeployinganExternalProxy 64DeploymentofExternalProxies 64NumberofProxiestoDeployandProxyThroughputsperProxy 64BestPracticeswhenDeployingaVDPAppliance 65

    ManagingInternalandExternalProxies 66ExternalProxySupport 66

    AddinganExternalProxy 68DisablingtheInternalProxy 68

    (Optional)ConfiguringProxyCertificateAuthentication 69MonitoringExternalProxyHealthStatus 69

    HealthStatusCriteria 69ExternalProxyLogs 69

    8 StorageManagement 71CreatingNewStorage 72

    MinimumStoragePerformance 73AttachingExistingVDPDisks 73DetachingandReattachingStorage 75

  • VMware, Inc. 5

    Contents

    ViewingtheStorageConfiguration 76

    9 DataDomainIntegration 79VDPandDataDomainSystemIntegration 80ArchitectureOverview 80VDPClientSupport 81BestPractices 81

    DataDomainLimitations 82Backup 82Restore 82SecurityEncryption 82DataMigration 82

    PreintegrationRequirements 82NetworkThroughput 83NetworkConfiguration 83NTPConfiguration 83Licensing 84PortUsageandFirewallRequirements 84Capacity 84DataDomainSystemStreams 84ExistingBackupProductsinUsewithDataDomain 85

    PreparingtheDataDomainsystemforVDPIntegration 85AddingaDataDomainSystem 86

    ChangingtheMaxStreamsValue 87EditingtheDataDomainSystem 87DeletingtheDataDomainSystemfromtheVDPAppliance 88BackupswithVDPandDataDomain 90

    HowBackupsWorkwithVDPandDataDomain 90WhereBackupDataisStored 90HowVDPApplianceManagesBackupData 90SupportedBackupTypes 90CancelingandDeletingBackups 90SelectingaDataDomainTargetforBackups 91

    ReplicationControl 91ReplicationDataFlow 91ReplicationSchedule 91ReplicationConfiguration 92ReplicationMonitoringwithVDP 92

    ServerMaintenanceActivityMonitoring 92RestoringAvamarCheckpointbackupsfromDataDomainsystems 92

    AssumptionsfortheRestoreOperation 92PerformingtheCheckpointRestore 93

    MonitoringDataDomainfromtheVDPAppliance 94MonitoringUsingthevSphereWebClient 94MonitoringUsingtheVDPConfigureUI 94DataDomainCapacityMonitoring 95

    ReclaimingStorageonaFullDataDomainSystem 95CommonProblemsandSolutions 96

    BackupFailsiftheDataDomainSystemisOffline 96RollingBackafterDeletingaDataDomainSystem 97

    10 VDPDiskExpansion 99PreExpansionRequirements 100VMFSHeapSizeRecommendations 100PerformingDiskExpansion 101

  • vSphere Data Protection Administration Guide

    6 VMware, Inc.

    ViewingtheStorageConfiguration 102PerformanceAnalysis 103

    RunningthePerformanceAnalysisTest 103DiskExpansionwithEssentialsPlus 103

    11 UsingvSphereDataProtection 105AccessingvSphereDataProtection 106AccessingtheVDPApplianceCommandLine 106UnderstandingtheVDPUserInterface 107SwitchingVDPAppliances 107VDPUserInterface 108ViewingInformationfromtheReportsTab 108

    Refresh 108TaskFailuresTab 108JobDetailsTab 109UnprotectedClientsTab 110

    12 ManagingBackups 111BackupJobs 112ChoosingtheVirtualMachines 112

    Identifyingretiredvirtualmachines 112SpecifyingtheBackupSchedule 113SettingtheRetentionPolicy 113CreatingaFullImageBackupJob 114CreatingaBackupJobonIndividualDisks 115

    Unsupporteddisktypes 116Limitation 116MigrationonIndividualDisks 117

    ViewingStatusandBackupJobDetails 117EditingaBackupJob 117CloningaBackupJob 117

    DeletingaBackupJob 118EnablingorDisablingaBackupJob 118RunningExistingBackupJobsImmediately 118

    LockingandUnlockingaBackup 119

    13 AutomaticBackupVerification 121AboutAutomaticBackupVerification 122

    Limitations 122BestPractices 122

    CreatingaNewBackupVerificationJob 123EditingaBackupVerificationJob 124CloningaBackupVerificationJob 125ExecutingandRunningaBackupVerificationJob 125MonitoringBackupVerification 126EnablingandDisablingaBackupVerificationJob 126DeletingaBackupVerificationJob 126

    14 ManagingRestores 127RestoreOperations 128

    Limitations 128SelectingBackupstoRestore 128FilteringforListofBackups 128

  • VMware, Inc. 7

    Contents

    RestoreswhenSnapshotsArePresent 128RestoringImageBackupstotheOriginalLocation 128RestoringImageBackupstoaNewLocation 130RestoringBackupstoIndividualSCSIDisks 131DeletingaBackupfromtheRestoreTab 132ClearingallSelectedBackupsfromtheRestoreTab 132

    15 Replication 133ReplicationJobs 134

    ReplicationCompatibility 134ReplicationandDataDomain 136BestPracticeswhenReplicating 136Limitations 136DefiningBackupTypesforaReplicationJob 136

    CreatingaReplicationJob 136ManagingDestinations 140EditingaReplicationJob 140CloningaReplicationJob 141DeletingaReplicationJob 141EnablingorDisablingaReplicationJob 141ViewingStatusandReplicationJobDetails 141RunningExistingReplicationJobsImmediately 141ReplicationBacktotheSource 141

    NodeStructureforRecoveredBackups 142NodeStructureofBackupsReplicatedAgain 142ReplicationDestinations 142

    ReplicationRecoveryCompatibility 142EnablingorDisablingReplicationRecovery 143ReplicationRecovery 143MultiTenancy 144

    16 UsingFileLevelRestore 147IntroductiontotheVDPRestoreClient 148

    LVM/EXTSupport 148FileLevelRestoreLimitations 148UnsupportedVMDKConfigurations 148UnsupportedWindowsConfigurations 149

    LoggingintotheRestoreClient 149BasicLogin 149AdvancedLogin 150

    MountingBackups 150FilteringBackups 150NavigatingMountedBackups 151PerformingFileLevelRestores 151

    UsingtheRestoreClientinBasicLoginMode 151UsingtheRestoreClientinAdvancedLoginMode 152

    MonitoringRestores 152

    17 VDPApplicationSupport 153VDPApplicationSupport 154

    InstallingApplicationAgents 154CheckingtheUserAccountControlSettingonMicrosoftWindows 154InstallingVDPClientswhenUACisEnabled 154

    BackingUpandRestoringMicrosoftSQLServers 155

  • vSphere Data Protection Administration Guide

    8 VMware, Inc.

    MicrosoftSQLServerOptions 155HardwareRequirements 155MicrosoftSQLServerSupport 155InstallingVDPforSQLServerClient 156ConfiguringtheClusterClientinaFailoverCluster 157ConfiguringtheClusterClientforanAlwaysOnAvailabilityGroup 159CreatingBackupJobsforMicrosoftSQLServers 160RestoringBackupsofMicrosoftSQLServers 163MonitoringClientActivity 164UninstallingtheVDPPluginforSQLServer 164

    BackingUpandRestoringMicrosoftExchangeServers 164MicrosoftExchangeServerOptions 164MicrosoftExchangeServerSupport 165Microsoft.NETFramework4Requirement 165HardwareRequirements 165UnsupportedMicrosoftExchangeServers 165InstallingVDPforExchangeServerClient 165InstallinginaDAGorClusterEnvironment 166ConfiguringanExchangeDAGClient 167UsingtheVMwareExchangeBackupUserConfigurationTool 168ManuallyConfiguringtheVDPBackupService 170CreatingBackupJobsforMicrosoftExchangeServers 170RestoringBackupsofMicrosoftExchangeServers 172SuspendingReplicationinaDAGorCluster 173MonitoringClientActivity 173UninstallingtheExchangeServerPlugin 174GranularLevelRecoveryonMicrosoftExchangeServers 174

    BackingUpandRestoringMicrosoftSharePointServers 177HardwareRequirements 177SupportedMicrosoftSharePointServers 177InstallingVDPforSharePointServerClient 178CreatingBackupJobsforMicrosoftSharePointServers 178RestoringBackupsofMicrosoftSharePointServers 179MonitoringClientActivity 180UninstallingtheVDPPluginforSharePointServer 180

    18 VDPDisasterRecovery 181BasicDisasterRecovery 182ExtendedDataProtection 182BestPracticesforArchivingtheVDPAppliancetoTape 182ExportingtheReplicationTarget 183ConfiguringBackupsforTapeOut 183BackingUpVDPReplicationTargettoTape 183RestoringtheVDPReplicationTargetfromTapetothevCenter 184

    A vSphereDataProtectionPortUsage 187

    B MinimumRequiredvCenterUserAccountPermissions 189

    C vSphereDataProtectionTroubleshooting 193TroubleshootingVDPApplianceInstallation 194TroubleshootingtheInstallerPackage 194TroubleshootingAccessingtheVDPWebClient 194TroubleshootingVDPBackups 194

  • VMware, Inc. 9

    Contents

    TroubleshootingVDPRestores 196TroubleshootingVDPReplicationJobs 197TroubleshootingVDPIntegrityCheck 197TroubleshootingAutomaticBackupVerification 197TroubleshootingtheRestoreClient(FileLevelRecovery) 198TroubleshootingVDPAdvancedLicensing 199TroubleshootingtheVDPAppliance 201TroubleshootingVDPMicrosoftExchangeServer 201TroubleshootingVDPMicrosoftSQLServer 203TroubleshootingVDPMicrosoftSharePoint 203AccessingVDPKnowledgeBaseArticles 203

    Index 205

  • vSphere Data Protection Administration Guide

    10 VMware, Inc.

  • VMware, Inc. 11

    ThevSphereDataProtectionAdministrationGuidedescribeshowtoinstallandmanagebackupsforsmallandmediumbusinesses.Thisguidealsoincludestroubleshootingscenariosandrecommendationsforresolution.

    Intended AudienceThisbookisforanyonewhowantstoprovidebackupsolutionsbyusingvSphereDataProtection(VDP).TheinformationinthisbookisforexperiencedWindowsorLinuxsystemadministratorswhoarefamiliarwithvirtualmachinetechnologyanddatacenteroperations.

    Typographical conventionsVMwareusesthefollowingtypestyleconventionsinthisdocument:

    VMware Technical Publications GlossaryVMwareTechnicalPublicationsprovidesaglossaryoftermsthatmightbeunfamiliartoyou.FordefinitionsoftermsastheyareusedinVMwaretechnicaldocumentation,gotohttp://www.vmware.com/support/pubs.

    About This Book

    Bold Usefornamesofinterfaceelements,suchasnamesofwindows,dialogboxes,buttons,fields,tabnames,keynames,andmenupaths(whattheuserspecificallyselectsorclicks)

    Italic UseforfulltitlesofpublicationsreferencedintextMonospace Usefor:

    Systemoutput,suchasanerrormessageorscript Systemcode Pathnames,filenames,prompts,andsyntax Commandsandoptions

    Monospace italic

    Useforvariables

    Monospace bold

    Useforuserinput

    [] Squarebracketsencloseoptionalvalues| Verticalbarindicatesalternateselectionsthebarmeansor{} Bracesenclosecontentthattheusermustspecify,suchasxoryorz... Ellipsesindicatenonessentialinformationomittedfromtheexample

  • vSphere Data Protection Administration Guide

    12 VMware, Inc.

    Document FeedbackVMwarewelcomesyoursuggestionsforimprovingourdocumentation.Sendyourfeedbacktodocfeedback@vmware.com.

    Technical Support and Education ResourcesThefollowingsectionsdescribethetechnicalsupportresourcesavailabletoyou.ToaccessthecurrentversionsofotherVMwarebooks,gotohttp://www.vmware.com/support/pubs.

    Online SupportTouseonlinesupporttosubmittechnicalsupportrequests,viewyourproductandcontractinformation,andregisteryourproducts,gotohttp://www.vmware/support/phone_support.html.

    Support OfferingsTofindouthowVMwaresupportofferingscanhelpmeetyourbusinessneeds,gotohttp://www.vmware.com/support/services.

    VMware Professional ServicesVMwareEducationServicescoursesofferextensivehandsonlabs,casestudyexamples,andcoursematerialsdesignedtobeusedasonthejobreferencetools.Coursesareavailableonsite,intheclassroom,andliveonline.Foronsitepilotprograms andimplementationbestpractices,VMwareConsultingServicesprovidesofferingsto helpyouassess,plan,build,andmanageyourvirtualenvironment.Toaccessinformationabouteducationclasses,certificationprograms,andconsultingservices,gotohttp://www.vmware.com/services.

  • VMware, Inc. 13

    1

    Thischapterincludesthefollowingtopics: IntroductiontovSphereDataProtectiononpage 14 BenefitsofvSphereDataProtectiononpage 14 VDPFunctionalityonpage 15 Replicationonpage 17 FileLevelRecoveryonpage 17 CustomerExperienceImprovementProgramonpage 17 vSphereDataProtectionArchitectureonpage 17

    Understanding VDP 1

  • vSphere Data Protection Administration Guide

    14 VMware, Inc.

    Introduction to vSphere Data ProtectionvSphereDataProtection(VDP)isarobust,simpletodeploy,diskbasedbackupandrecoverysolutionthatispoweredbyEMC.VDPisfullyintegratedwiththeVMwarevCenterServerandenablescentralizedandefficientmanagementofbackupjobswhilestoringbackupsindeduplicateddestinationstoragelocations.TheVMwarevSphereWebClientinterfaceisusedtoselect,schedule,configure,andmanagebackupsandrecoveriesofvirtualmachines.Duringabackup,VDPcreatesaquiescedsnapshotofthevirtualmachine.Deduplicationisautomaticallyperformedwitheverybackupoperation.Thefollowingtermsareusedthroughoutthisdocumentinthecontextofbackupandrecovery. Adatastoreisavirtualrepresentationofacombinationofunderlyingphysicalstorageresourcesinthe

    datacenter.Adatastoreisthestoragelocation(forexample,aphysicaldisk,aRAID,oraSAN)forvirtualmachinefiles.

    ChangedBlockTracking(CBT)isaVMkernelfeaturethatkeepstrackofthestorageblocksofvirtualmachinesastheychangeovertime.TheVMkernelkeepstrackofblockchangesonvirtualmachines,whichenhancesthebackupprocessforapplicationsthathavebeendevelopedtotakeadvantageofVMwaresvStorageAPIs.

    FileLevelRecovery(FLR)allowslocaladministratorsofprotectedvirtualmachinestobrowseandmountbackupsforthelocalmachine.Fromthesemountedbackups,theadministratorcanthenrestoreindividualfiles.FLRisaccomplishedusingtheVDPRestoreClient.

    VMwarevStorageAPIsforDataProtection(VADP)enablesbackupsoftwaretoperformcentralizedvirtualmachinebackupswithoutthedisruptionandoverheadofrunningbackuptasksfrominsideeachvirtualmachine.

    VirtualMachineDisk(VMDK)isafileorsetoffilesthatappearsasaphysicaldiskdrivetoaguestoperatingsystem.Thesefilescanbeonthehostmachineoronaremotefilesystem.

    VDPApplianceisapurposebuiltvirtualapplianceforVDP.

    Benefits of vSphere Data ProtectionThebenefitsofvSphereDataProtection(VDP)areasfollows: Providesfastandefficientdataprotectionforallofyourvirtualmachines,eventhosepoweredoffor

    migratedbetweenvSpherehosts. Significantlyreducesdiskspaceconsumedbybackupdatausingpatentedvariablelengthdeduplication

    acrossallbackups. ReducesthecostofbackingupvirtualmachinesandminimizesthebackupwindowbyusingChange

    BlockTracking(CBT)andVMwarevirtualmachinesnapshots. Allowsforeasybackupswithouttheneedforthirdpartyagentsinstalledineachvirtualmachine. Usesasimple,straightforwardinstallationasanintegratedcomponentwithinvSphere,whichis

    managedbyawebportal. ProvidesdirectaccesstoVDPconfigurationintegratedintothevSphereWebClient. Protectsbackupswithcheckpointandrollbackmechanisms. ProvidessimplifiedrecoveryofWindowsandLinuxfileswithenduserinitiatedfilelevelrecoveriesfrom

    awebbasedinterface. Throughemergencyrestore,providesamethodforrestoringthevCenterServerwhenthevCenterServer

    isunavailableortheuserisunabletoaccesstheVDPuserinterfacewiththevSphereWebClient. Throughreplication,enablesyoutoavoiddatalossifthesourceVDPAppliancefailsbecausecopiesof

    thebackupsareavailableonadestinationtarget.

  • VMware, Inc. 15

    Chapter 1 Understanding VDP

    DeduplicationStoreBenefitsEnterprisedataishighlyredundant,withidenticalfilesordatastoredwithinandacrosssystems(forexample,OSfilesordocumentssenttomultiplerecipients).Editedfilesalsohavetremendousredundancywithpreviousversions.Traditionalbackupmethodsmagnifythisbystoringalloftheredundantdataoverandoveragain.vSphereDataProtectionusespatenteddeduplicationtechnologytoeliminateredundancyatboththefileandthesubfiledatasegmentlevel.

    Variablevs.FixedLengthDataSegmentsAkeyfactorineliminatingredundantdataatasegment(orsubfile)levelisthemethodfordeterminingsegmentsize.Fixedblockorfixedlengthsegmentsarecommonlyemployedbysnapshotandsomededuplicationtechnologies.Unfortunately,evensmallchangestoadataset(forexample,insertingdataatthebeginningofafile)canchangeallfixedlengthsegmentsinadataset,despitethefactthatverylittleofthedatasethasbeenchanged.vSphereDataProtectionusesanintelligentvariablelengthmethodfordeterminingsegmentsizethatexaminesthedatatodeterminelogicalboundarypoints,whichincreasesefficiency.

    LogicalSegmentDeterminationVDPusesapatentedmethodforsegmentsizedeterminationdesignedtoyieldoptimalefficiencyacrossallsystems.VDPsalgorithmanalyzesthebinarystructureofadatasettodeterminesegmentboundariesthatarecontextdependent.Variablelengthsegmentsaverage24KBinsizeandarefurthercompressedtoanaverageof12KB.ByanalyzingthebinarystructurewithintheVMDKfile,VDPworksforallfiletypesandsizesanddeduplicatesthedata.

    VDP FunctionalityThevSphereDataProtectionproduct,startingwithversion6.0,includesallfeaturesthatwerepreviouslyincludedinVDPAdvanced.VDPfunctionalityisincludedaspartofvSphereEssential+anddoesnotrequireaspecificlicensekey.ThefollowingtablelistsVDPfunctionality.Table 1-1. VDP Functionality

    Feature VDP

    VirtualmachinessupportedperVDPAppliance Upto400NumberofappliancessupportedpervCenter Upto20Availablestoragesize 8TBSupportforimagelevelbackups YesSupportforindividualdiskbackups YesSupportforimagelevelrestorejobs YesSupportforimagelevelreplicationjobs YesSupportfordirecttohostrecovery YesSupportfordetachable/remountabledatapartitions YesSupportforfilelevelrecovery(FLR) YesSupportsLVMandEXT4withexternalproxiesSupportforguestlevelbackupsandrestoresofMicrosoftExchangeServers,SQLServers,andSharePointServers

    Yes

    Supportforapplicationlevelreplication YesAbilitytoexpandcurrentdatastore YesSupportforbackinguptoaDataDomainsystem YesAbilitytorestoretoagranularlevelonMicrosoftServers YesSupportforautomaticbackupverification(ABV) Yes

  • vSphere Data Protection Administration Guide

    16 VMware, Inc.

    Image-level Backup and RestorevSphereDataProtectioncreatesimagelevelbackups,whichareintegratedwiththevStorageAPIforDataProtection,afeaturesetwithinvSpheretooffloadthebackupprocessingoverheadfromthevirtualmachinetotheVDPAppliance.TheVDPAppliancecommunicateswiththevCenterServertomakeasnapshotofavirtualmachines.vmdkfiles.Deduplicationtakesplacewithintheappliancebyusingapatentedvariablelengthdeduplicationtechnology.TosupportthelargescaleandcontinuallyexpandingsizeofmanyVMwareenvironments,eachVDPAppliancecansimultaneouslybackupto8virtualmachinesiftheinternalproxyisused,orbackupto24virtualmachinesifthemaximumnumberof8externalproxiesaredeployedwiththeVDPAppliance.Toincreasetheefficiencyofimagelevelbackups,VDPutilizestheChangedBlockTracking(CBT)feature,whichgreatlyreducesthebackuptimeofagivenvirtualmachineimageandprovidestheabilitytoprocessalargenumberofvirtualmachineswithinaparticularbackupwindow.ByleveragingCBTduringrestores,VDPoffersfastandefficientrecoveriesofvirtualmachinestotheiroriginallocation.Duringarestoreprocess,VDPusesCBTtodeterminewhichblockshavechangedsincethelastbackup.TheuseofCBTreducesdatatransferwithinthevSphereenvironmentduringarecoveryoperationandmoreimportantlyreducestherecoverytime.Additionally,VDPautomaticallyevaluatestheworkloadbetweenbothrestoremethods(fullimagerestoreorarecoveryleveragingCBT)andperformsthemethodresultinginthefastestrestoretime.ThisisusefulinscenarioswherethechangeratesincethelastbackupinavirtualmachinebeingrestoredisveryhighandtheoverheadofaCBTanalysisoperationwouldbemorecostlythanadirectfullimagerecovery.VDPdetermineswhichmethodresultsinthefastestimagerecoverytimesforvirtualmachinesintheenvironment.IMPORTANTVDPdoesnotsupportbackupsofavCenterServerAppliance(VCSA).TheVDPvirtualenvironment,however,canincludeaVCSA.

    Single VMDK Backup and RestoreAfullimagebackupjobincludesalldisksintheentirevirtualmachine(VM)inasingleimagebackup.Individualdiskbackupjobsallowyoutoselectonlythedisksyouneed.AnimagelevelbackupofaVMwithunsupporteddisktypesdoesnotincludetheunsupporteddisktypesbecauseofsnapshotlimitations.WhenyourestoreaVM,theVDPAppliancerestorestheVMconfigurationfile(.vmx),whichresultsinthecreationofallVMDKsfromtheoriginalVM.IfanyoftheoriginalVMDKswerenotbackedup,therestoreprocesscreatesthemasprovisionalVMDKs.TheVMmaynotbefullyfunctionalinthiscase.TheprotectedVMDKs,however,canbeaccessedfromtherestore.SeeCreatingaBackupJobonIndividualDisksonpage 115forinstructionsonbackingupindividualdisks.

    Guest-level Backup and RestoreVDPsupportsguestlevelbackupsforMicrosoftSQLServers,ExchangeServers,andSharePointServers.Withguestlevelbackups,clientagents(VMwareVDPforSQLServerClient,VMwareVDPforExchangeServerClient,orVMwareVDPforSharePointServerClient)areinstalledontheSQLServer,ExchangeServer,orSharePointServerinthesamemannerthatbackupagentsaretypicallyinstalledonphysicalservers.

    Supportforexternalproxies Yes,upto24simultaneousvirtualmachinesifthemaximumnumberof8externalproxiesaredeployed.

    SupportforCustomerExperienceImprovementProgram Yes

    Table 1-1. VDP Functionality (Continued)

    Feature VDP

  • VMware, Inc. 17

    Chapter 1 Understanding VDP

    TheadvantagesofVMwareguestlevelbackupsare: ProvidesadditionalapplicationsupportforMicrosoftSQLServer,MicrosoftExchangeServer,or

    SharePointServerinsidethevirtualmachines SupportforbackingupandrestoringentireMicrosoftSQLServer,MicrosoftExchangeServer,or

    SharePointServersorselecteddatabases IdenticalbackupmethodsforphysicalandvirtualmachinesSeeVDPApplicationSupportonpage 151foradditionalinformationonguestlevelbackupandrestore.

    ReplicationReplicationenablesyoutoavoiddatalossifthesourceVDPAppliancefailsbecausecopiesofthebackupsareavailableonthedestinationtarget.Replicationjobsdeterminewhichbackupsarereplicated,andwhenandtowherethebackupsarereplicated.Withscheduledoradhocreplicationjobsforclientsthathavenorestorepoints,onlytheclientisreplicatedonthedestinationserver.BackupscreatedwithVDP6.0orlatercanbereplicatedtoanotherVDPAppliance,toanEMCAvamarserver,ortoaDataDomainsystem.IfthetargetVDPApplianceis5.8orearlier,thenthetargetmustbeVDPAdvancedorReplicationTargetIdentity.SeeChapter 15,Replication,onpage 133foradditionalinformationonReplication.

    File Level RecoveryFileLevelRecovery(FLR)allowslocaladministratorsofprotectedvirtualmachinestobrowseandmountbackupsforthelocalmachine.Fromthesemountedbackups,theadministratorcanthenrestoreindividualfiles.FLRisaccomplishedbyusingtheVDPRestoreClient.SeeChapter 16,UsingFileLevelRestore,onpage 147foradditionalinformationonFLR.

    Customer Experience Improvement ProgramTheCustomerExperienceImprovementProgramisanoptionthatenablesyoutosendencryptedconfigurationandusageinformationabouttheVDPenvironmenttoVMwareserversforanalysis.ThepurposeoftheCustomerExperienceImprovementProgramistohelpVDPimprovethequality,reliability,andfunctionalityoftheVDPproduct.TheCustomerExperienceImprovementProgramisnotenabledbydefault.Duringinstallation,youcanenabletheCustomerExperienceImprovementProgramfromtheProductImprovementpageintheVDPConfigureUtility.YoucanalsoenableordisablethisoptionanytimeaftertheinstallationofVDPfromthepostinstallationUI.RefertoConfiguringtheCustomerExperienceImprovementProgramonpage 56formoreinformation.

    vSphere Data Protection ArchitectureVDPcanbedeployedtoanystoragesupportedbyvSphere.SupportedstorageincludesVMFS,NFS,andVSANdatastores.ManagementofVDPisperformedbyusingthevSphereWebClient.VDPconsistsofthefollowingcomponents: vCenterServer5.1orlater(5.5orlaterrecommended) VDPvirtualappliance(installedonvSpherehosts;versions5.0,5.1,and5.5aresupported) vSphereWebClient Applicationbackupagents

  • vSphere Data Protection Administration Guide

    18 VMware, Inc.

    Backupdataisdeduplicatedandstoredinthe.vmdkfilesthatmakeuptheVDPvirtualapplianceorasupportedDataDomainappliance.

    Figure 1-1. vSphere Data Protection architecture

  • VMware, Inc. 19

    2

    Thischapterincludesthefollowingtopics: vSphereDataProtectionCapacityRequirementsonpage 20 SoftwareRequirementsonpage 20 SystemRequirementsonpage 20 PreinstallationConfigurationonpage 21 VDPBestPracticesonpage 23 VDPInstallationonpage 25 InitialConfigurationonpage 26

    VDP Installation and Configuration 2

  • vSphere Data Protection Administration Guide

    20 VMware, Inc.

    vSphere Data Protection Capacity RequirementsvSphereDataProtection(VDP)capacityrequirementsdependonanumberoffactorsincluding: Numberofprotectedvirtualmachines Amountofdatacontainedineachprotectedvirtualmachine Typesofdatabeingbackedup(OSfiles,documents,anddatabases,forexample) Backupdataretentionperiod(daily,weekly,monthly,oryearly) DatachangeratesNOTEAssumingaveragevirtualmachinesizes,datatypes,datachangerates,andaretentionpolicyof30days,1TBofVDPbackupdatacapacitysupportsapproximately25virtualmachines.

    Software RequirementsUsingthelatestversion(6.0)ofVDPisrecommended.VDP6.0requiresthefollowingsoftware: TheminimumrequirementisvCenterServer5.1,whilevCenterServer5.5orlaterisrecommended.VDP

    version6.0supportstheLinuxbasedvCenterServerVirtualApplianceandtheWindowsbasedvCenterServer.

    NOTEVDP5.1isnotcompatiblewithvCenter5.5orlater. vSphereWebClient(seetheVMwarewebsiteforcurrentvSpherewebbrowsersupport) WebbrowsersmustbeenabledwithAdobeFlashPlayer11.3orlatertoaccessthevSphereWebClient

    andVDPfunctionality vSpherehostversions5.0,5.1,or5.5

    Hardware Versions and MigrationThevirtualmachineshardwareversionlimitsvirtualmachinesfrommigratingtotheolderversionsthatareconfiguredonthenewerversionsofvSpherehosts.IftheVDPAppliancewasmigratedtoavSpherehostthatwasversion5.1orlower,itwouldnotbefunctional.

    vSphere Hosts and vSphere Flash Read Cache Compatibility and PerformanceTheVDPApplianceisdeployedasavirtualmachinewithhardwareversion7,whichenablesbackwardcompatibilitywithvSphere4.xhosts.ThevSphereFlashReadCachebackeddisksareonlyavailableonvSphere5.xhosts,whichexpectaVMtohavehardwareversion10.Asaresult,ifyouattempttoperformanimagelevelbackupofavSphereFlashReadCachebackeddiskbyusingtheVDPAppliance,thenthecurrentconfigurationcausestheappliancetousethenetworkblockdevice(NBD)protocol(insteadofHotAdd)asthetransportmode,whichadverselyaffectsperformance.

    Unsupported Disk Types Whenplanningforbackups,makesurethedisksaresupportedbyVDP.Currently,VDPdoesnotsupport

    thefollowingvirtualhardwaredisktypes: Independent

    RDMIndependentVirtualCompatibilityMode RDMPhysicalCompatibilityMode

    System RequirementsThefollowingsectionliststhesystemrequirementsforVDP.

  • VMware, Inc. 21

    Chapter 2 VDP Installation and Configuration

    VDP System RequirementsVDPisavailableinthefollowingconfigurations: 0.5TB 1TB 2TB 4TB 6TB 8TBIMPORTANTAfterVDPisdeployedthesizecanbeincreased.VDPrequiresthefollowingminimumsystemrequirements:

    IPv6 RequirementsDNSserversthatVDPusesinanIPv6environmentmustonlycontainAAAArecordsforhostnames.TheDNSservermustnotcontainbothanAandanAAAArecordwiththesamehostname.

    Preinstallation ConfigurationBeforetheVDPinstallation,completethefollowingpreinstallationsteps: DNSConfigurationonpage 21 NTPConfigurationonpage 22 UserAccountConfigurationonpage 22 VDPBestPracticesonpage 23

    DNS ConfigurationTheDNSservermustsupportbothforwardandreverselookupontheVDPandthevCenter.BeforeyoudeployVDP,youmustaddanentrytotheDNSserverfortheVDPAppliancesIPaddressandFullyQualifiedDomainNames(FQDN).Inaddition,communicationtoDNSisrequiredbyVMwareproxynodes(port53)overbothTCPandUDPprotocols.FailuretosetupDNSproperlycancausemanyruntimeorconfigurationissues.ToconfirmthatDNSisconfiguredproperly,runthefollowingcommandsfromthecommandpromptonthevCenterServer: nslookup

    ThenslookupcommandreturnstheFQDNoftheVDPAppliance. nslookup

    ThenslookupcommandreturnstheFQDNofthevCenterServer.

    Table 2-2. Minimum system requirements for VDP

    0.5 TB 1 TB 2 TB 4 TB 6 TB 8 TB

    Processors Minimumfour2GHzprocessors

    Minimumfour2GHzprocessors

    Minimumfour2GHzprocessors

    Minimumfour2GHzprocessors

    Minimumfour2GHzprocessors

    Minimumfour2GHzprocessors

    Memory 4GB 4GB 4GB 8GB 10GB 12GBDiskspace 873GB 1,600GB 3TB 6TB 9TB 12TB

  • vSphere Data Protection Administration Guide

    22 VMware, Inc.

    Ifthenslookupcommandsreturntheproperinformation,closethecommandprompt.Ifthenslookupcommandsdonotreturntheinformationyouseek,youcanmanuallyaddtheVDPnameandaddresstothe/etc/hostsfileinthevCenter.

    NTP ConfigurationVDPleveragesVMwareToolstosynchronizetimethroughNTP.AllvSpherehostsandthevCenterServermusthaveNTPconfiguredproperly.TheVDPAppliancegetsthecorrecttimethroughvSphereandmustnotbeconfiguredwithNTP.CAUTIONConfiguringNTPdirectlyontheVDPAppliancecausestimesynchronizationerrors.SeetheESXiandvCenterServerdocumentationformoreinformationaboutconfiguringNTP.

    vCenter Hosts and Clusters ViewTheVDPAppliancecanworkwithfoldersandresourceviewsthatarecreatedundertheHostsandClustersview.TheHostsandClustersviewinthevSphereWebClientallowyoutoperformthefollowingtasks: Configureuseraccounts Createasnapshot MounttheISOimage Removeasnapshot Revertbacktoasnapshot Expanddisks ConfiguretheVDPAppliancesystemsettings. RemovetheVDPAppliancefromthevCenterinventory.

    Accessing the Host and Clusters view1 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    2 Loginwithadministrativeprivileges.3 SelectvCenter>HostsandClusters.

    User Account ConfigurationBeforethevCenteruseraccountcanbeusedwithVDP,orbeforetheSSOadminusercanbeusedwithVDP,youmustaddtheseusersasadministratoronthevCenterrootnode.Userswhoinheritpermissionsfromgrouprolesarenotvalid.NOTEInhighsecurityenvironments,youcanrestrictthevCenteruseraccountpermissionsrequiredtoconfigureandadministertheVDPAppliance.TheaccountpermissioncategoriesarelistedinMinimumRequiredvCenterUserAccountPermissionsonpage 189.ThefollowingstepsareusedtoconfiguretheVDPuserorSSOadminuserusingthevSphereWebClient.1 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    2 Loginwithadministrativeprivileges.3 SelectvCenter>HostsandClusters.4 Ontheleftsideofthepage,clickthevCenterServer.

  • VMware, Inc. 23

    Chapter 2 VDP Installation and Configuration

    IMPORTANTEnsurethatyouselectthevCenterfromtherootlevelofthetreestructure(representedunderHostsandClusters).IfyouselectthevCenterVM,theconfigurationfails.

    5 ClicktheManagetab,andthenselectPermissions.6 ClicktheAddpermission(+)icon.7 ClickAdd.8 FromtheDomaindropdownlist,selectdomain,server,orVSPHERE.LOCAL.

    NOTE:ForvCenterversions5.1andearlier,thedefaultdomainisSYSTEMDOMAIN.9 SelecttheuserwhowilladministerVDPorbetheSSOadminuser,andthenclickAdd.10 ClickOK.11 FromtheAssignedRolelist,selectAdministrator.12 ConfirmthatthePropagatetochildobjectsboxisselected.13 ClickOK.ToverifythatuserislistedunderAdministrators,gotoHome>Administration>RoleManagerandclicktheAdministratorrole.Theuseryoujustaddedshouldbelistedtotherightofthatrole.IMPORTANTIftheVDPbackupuserusingtheVDPConfigureutilitybelongstoadomainaccount,usetheSYSTEMDOMAIN\adminformatinVDPconfigure.Iftheusernameisenteredintheformatadmin@SYSTEMDOMAINformat,tasksrelatedtothebackupjobmaynotshowupontheRecentRunningtasks.IMPORTANTThedomainaccountpasswordcannotcontainspaces.

    VDP Best PracticesThefollowingbestpracticesshouldbeusedwhendeploying,using,andmonitoringavSphereDataProtection(VDP)Appliance.

    General Best Practices DeploytheVDPApplianceonsharedVMFS5orlatertoavoidblocksizelimitations. Makesurethatallvirtualmachinesarerunninghardwareversion7orlatertosupportChangeBlock

    Tracking(CBT). InstallVMwareToolsoneachvirtualmachinethatVDPwillbackup.VMwareToolsaddadditional

    backupcapabilitythatquiescescertainprocessesontheguestOSbeforethebackup.VMwareToolsarealsorequiredforsomefeaturesusedinFileLevelRestore.

  • vSphere Data Protection Administration Guide

    24 VMware, Inc.

    WhenconfiguringthenetworkfortheVDPApplianceandthevCenter,donotmodifynetworkaddressinformationbyusingNATorotherconfigurationmethods(firewall,IDS,orTSNR).Whentheseunsupportedmethodsaredeployedaspartofthevirtualnetwork,someVDPfunctionalitymaynotworkasdesigned.

    HotAdd Best PracticesTheHotAddtransportmechanismisrecommendedforfasterbackupsandrestoresandlessexposuretonetworkrouting,firewallandSSLcertificateissues.Ifyouusethenetworkblockdevice(NBD)transportmechanisminsteadofHotAdd,backupperformancewillbedegraded.ThefollowingmandatoryrequirementsmustbemetforadisktobemountedwithHotAdd: IfyouareusingvSphereHostversion5.0,thehostmustbelicensedforHotAdd.vSphereHostversion

    5.1andlaterincludethisfeaturebydefault. TheVDPApplianceisdeployedonavSpherehostthathasapathtothestoragethatcontainsthevirtual

    disksbeingbackedup. HotAddisnotusedonIDEconfiguredvirtualdisks.I/Ooverthenetworknegativelyimpacts

    performance.UseSCSIvirtualdisksinstead. ThetotalcapacityoftheVMFSvolumewhereVDPresidesisequaltothesizeofthelargestvirtualdisk

    beingbackedup(freespacecanbelessthanthisamount). TheblocksizeoftheVMFSvolumewhereVDPresidesisthesameorlargerthanthesizeofthelargest

    virtualdiskbeingbackedup. ThevirtualmachinebeingbackeduphasnovirtualharddisksdesignatedasIndependent. Thevirtualmachinebeingbackedupisinthesamedatacenter(vCenterServercontainerobject)asthe

    VDPAppliance.HotAddtransportcannotcrossthedatacenterboundary. ThevirtualmachinesandVMDKsinthevCenterServerhavethesamenameasthoseassociatedwiththe

    virtualmachinebeingbackedup. HotAdddoesnotworkwithvirtualmachinesthatusevSphereFlashReadCache(vFlash).FormoreinformationaboutHotAddbestpractices,refertothefollowingKnowledgeBasearticle:http://kb.vmware.com/kb/2048138

    Storage Capacity for Initial VDP DeploymentWhenanewvSphereDataProtection(VDP)Applianceisdeployed,theappliancetypicallyfillsrapidlyforthefirstfewweeks.Thisisbecausenearlyeveryclientthatisbackedupcontainsuniquedata.VDPdeduplicationismosteffectivewhenothersimilarclientshavebeenbackedup,orthesameclientshavebeenbackedupatleastonce.Aftertheinitialbackup,theappliancebacksuplessuniquedataduringsubsequentbackups.Wheninitialbackupsarecompleteandthemaximumretentionperiodsareexceeded,itispossibletoconsiderandmeasuretheabilityofthesystemtostoreaboutasmuchnewdataasitfreeseachday.Thisisreferredtoasachievingsteadystatecapacityutilization.Idealsteadystatecapacityshouldbe80%.

    Monitoring VDP CapacityYoushouldproactivelymonitorVDPcapacity.YoucanviewVDPcapacitythroughtheVDPReportstab,UsedCapacity(whichisusedtodeterminesteadystate).RefertoViewingInformationfromtheReportsTabonpage 108formoreinformation.

  • VMware, Inc. 25

    Chapter 2 VDP Installation and Configuration

    Table 23describesVDPbehaviorforkeycapacitythresholds:

    Onceyouexceed80%capacity,usethefollowingguidelinesforcapacitymanagement: Stopaddingnewvirtualmachinesasbackupclients. Removeunnecessaryrestorepoints. Deletejobsthatarenolongerneeded. Reassessretentionpoliciestoseeifyoucandecreaseretentionpolicies ConsideraddingadditionalVDPAppliancesandbalancebackupjobsbetweenmultipleappliances

    VDP InstallationThevSphereDataProtection(VDP)installationiscompletedthroughtwosteps: DeployingtheOVFTemplateonpage 25 InitialConfigurationonpage 26

    Deploying the OVF Template

    Prerequisites TheVDPAppliancerequiresoneofthefollowingvSpherehostversions:5.0,5.1,or5.5. TheminimumrequirementisvCenterServer5.1.vCenterServer5.5orlaterisrecommended. LogintothevCenterServerfromavSphereWebClienttodeploytheOVFtemplate.Ifyouareunableto

    connecttothevSphereWebClient,confirmthatthevSphereWebClientserviceisstarted. TheVDPApplianceconnectstoavSpherehostusingport902.IfthereisafirewallbetweentheVDP

    ApplianceandthevSphereHost,port902mustbeopen.SeeChapter A,vSphereDataProtectionPortUsage,onpage 187,foradditionalinformationonportusage.

    TheVMwareClientIntegrationPluginmustbeinstalledonyourbrowser.Ifitisnotalreadyinstalled,itcanbeinstalledduringthefollowingprocedure.

    Procedure1 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    2 Loginwithadministrativeprivileges.3 SelectvCenter>Datacenters.4 OntheObjectstab,clickActions>DeployOVFTemplate.5 Ifprompted,allowandinstalltheVMwareClientIntegrationPlugin.

    Table 2-3. Capacity thresholds

    Threshold Value Behavior

    Capacitywarning 80% VDPissuesawarningevent.Capacitywarning 95% TasksarenotgeneratedonvCenterforbackup

    jobswhencapacityisgreaterthan95%full.Healthchecklimit 95% Existingbackupsareallowedtocompletebut

    newbackupactivitiesaresuspended.VDPissueswarningevents.

    Serverreadonlylimit

    100% VDPtransitionstoreadonlymodeandnonewdataisallowed.

  • vSphere Data Protection Administration Guide

    26 VMware, Inc.

    6 SelectthesourcewheretheVDPApplianceislocated.BydefaulttheFilenamedialogissettoOVFPackages(*.ovf).FromthedropdownboxtotherightofFilename,selectOVAPackages(*.ova).

    7 NavigatetothelocationoftheVDPAppliance.ovafile.Confirmthatyouselecttheappropriatefileforthedatastore.ClickOpen.

    8 AftertheVDPAppliance.ovafileisselected,clickNext.9 ReviewthetemplatedetailsandclickNext.10 OntheAcceptEULAsscreen,readthelicenseagreement,clickAccept,andthenclickNext.11 OntheSelectnameandfolderscreen,typethenamefortheVDPAppliance.Whentypingthename,use

    thefullyqualifieddomainname(FQDN),whichtheVDPconfigurationusestofindtheVDPApplianceinthevCenterinventory.DonotchangetheVDPAppliancenameafterinstallation.

    12 ClickthefolderordatacenterwhereyouwanttodeploytheVDPAppliance,andthenclickNext.13 OntheSelectaresourcescreen,selectthehostfortheVDPApplianceandclickNext.14 OntheSelectStoragescreen,selectthevirtualdiskformatandselectthelocationofthestorageforthe

    VDPAppliance.ClickNext.15 OntheSetupnetworksscreen,selecttheDestinationNetworkfortheVDPApplianceandclickNext.16 IntheCustomizetemplatescreen,specifytheDefaultGateway,DNS,Network1IPAddress,and

    Network1Netmask.ConfirmthattheIPaddressesarecorrectandmatchtheentryintheDNSserver.SettingincorrectIPaddressesinthisdialogboxwillrequirethe.ovatoberedeployed.ClickNext.

    NOTETheVDPAppliancedoesnotsupportDHCP.AstaticIPaddressisrequired.17 OntheReadytocompletescreen,confirmthatallofthedeploymentoptionsarecorrect.CheckPoweron

    afterdeploymentandclickFinish.vCenterdeploystheVDPApplianceandbootsintotheinstallmode.YoucanmonitorRecentTaskstodeterminewhenthedeploymentcompletes.

    Initial Configuration

    Prerequisites EnsurethattheVDP.ovftemplatewasdeployedsuccessfully.SeeDeployingtheOVFTemplateon

    page 25formoreinformation. YoumustbeloggedintothevCenterServerfromthevSphereWebClient. Enoughfreediskspaceexistsonthedatastore.Whenanoptionalperformanceanalysistestisrunduring

    initialconfigurationoftheappliance,41GBperdiskperdatastoreisrequired(forexample,ifthreedisksareplacedonthesamedatastore,123GBoffreespaceisrequired).Ifthereisnotenoughspaceavailable,thetestreportsavalueof0foralloftheread,write,andseektestsandgivesafinalstatusofinsufficientspace.

    Procedure1 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    2 Loginwithadministrativeprivileges.3 SelectvCenterHome>vCenter>VMsandTemplates.ExpandthevCentertreeandselecttheVDP

    Appliance.4 OpenaconsolesessionintotheVDPAppliancebyrightclickingtheVDPApplianceandselectingOpen

    Console.

  • VMware, Inc. 27

    Chapter 2 VDP Installation and Configuration

    5 Aftertheinstallationfilesload,theWelcomescreenfortheVDPmenuappears.Openawebbrowserandtype:

    https://:8543/vdp-configure/

    TheVMwareLoginscreenappears.6 TyperootintheUserfieldandchangemeinthePasswordfield,andthenclickLogin.

    TheVDPWelcomescreenappears.7 ClickNext.

    TheNetworkSettingsdialogboxappearsbydefault.8 Specify(orconfirm)thefollowingnetworkandserverinformationforyourVDPAppliance.Ensurethat

    thevaluesarepopulatedcorrectly,otherwisetheinstallationwillfail.a IPv4Staticaddressb Netmask

    c Gateway

    d PrimaryDNSe SecondaryDNSf Hostname

    g Domain

    9 ClickNext.TheTimeZonedialogboxappears.

    10 SelecttheappropriatetimezoneforyourVDPAppliance,andclickNext.TheVDPCredentialsdialogboxappears.

    11 InthePasswordfield,typeintheVDPAppliancepasswordbyusingthefollowingcriteria,andthenverifythepasswordbyretypingitintheVerifypasswordfield.Thispasswordistheuniversalconfigurationpassword.Thefourcharacterclassesareasfollows: UppercaselettersAZ Lowercaselettersaz Numbers09 Specialcharacters(forexample:~!@#,.)Createthepasswordusingthefollowingcriteria: Ifallfourcharacterclassesareused,thepasswordmustbeatleast6characters. Ifthreecharacterclassesareused,thepasswordmustbeatleast7characters. Ifoneortwocharacterclassesareused,thepasswordmustbeatleast8characters.

    12 ClickNext.

  • vSphere Data Protection Administration Guide

    28 VMware, Inc.

    ThevCenterRegistrationpageappears.

    13 Specifythefollowingvalues:a vCenterusername

    Iftheuserbelongstoadomainaccount,enterthenamebyusingtheSYSTEMDOMAIN\adminformat.

    CAUTIONIfanSSOadminuserisspecifiedasthevCenterusernameintheformat,tasksrelatedtoVDPoperationsdonotappearinthevCenterRecentTaskspaneofthevSphereWebClient.FortaskstoappearintheRecentTaskspane,specifytheSSOadminuserintheformat.

    b vCenterpasswordc vCenterFQDNorIPd vCenterHTTPport(defaultis80)

    SpecifyacustomvaluefortheHTTPportifyouneedtoconnecttovCenterovertheHTTPport,insteadoftheHTTPSport,whichisusedforallothercommunication.

    e vCenterHTTPSport(defaultis443)f Ifdisabled,selecttheUsevCenterforSSOauthenticationcheckboxforSSOauthentication.

    NOTELeavetheUsevCenterforSSOauthenticationcheckboxenabledifyourvCenterhasSSOembeddedinthevCenterServerappliance.Ifyoudisablethisselectionbyclearingthecheckbox,youmustentertheSSOServerFQDNorIPaddressandtheSSOportfields.

    g ClickTestConnection.Aconnectionsuccessmessageappears.Ifthismessagedoesnotappear,troubleshootyoursettingsandrepeatthisstepuntilasuccessfulmessageappears.

    IfyoureceivethefollowingmessageonthevCenterRegistrationpage:Specified user either is not a dedicated VDP user or does not have sufficient vCenter privileges to administer VDP. Please update your user role and try again.

    RefertoUserAccountConfigurationonpage 22forinstructionsonhowtoupdatethevCenteruserrole.

  • VMware, Inc. 29

    Chapter 2 VDP Installation and Configuration

    14 ClickNexttoadvancetotheCreateStoragepage,whichguidesyouthroughthestoragetypeselection.SeeCreatingNewStorageonpage 72forstorageconfigurationinformationandthefinalstepsrequiredtocompletetheinitialconfigurationwizard.

  • vSphere Data Protection Administration Guide

    30 VMware, Inc.

  • VMware, Inc. 31

    3

    Thischaptercontainsthefollowingtopics: BestPracticesonpage 32 SupportedUpgradePathsonpage 32 CreatingaSnapshotoftheVDPApplianceonpage 33 MountingtheUpgradeISOImageontheApplianceonpage 34 InstallingtheUpgradeonpage 34 CompletingtheUpgradeonpage 36 RevertingBacktoaSnapshotonpage 37 UpgradingProxySoftwareonpage 38

    VDP Appliance Upgrades 3

  • vSphere Data Protection Administration Guide

    32 VMware, Inc.

    Best Practices Beforerunningtheupgradeprocess,takeasnapshotoftheVDPAppliancefromthevCenterServer.

    TakingasnapshotallowsyoutorestoretheVDPAppliancetoapreviouslyknownstateintheeventthattheupgradeprocessdoesnotcompletesuccessfully.Forinstructions,refertoCreatingaSnapshotoftheVDPApplianceonpage 33.

    Runtheupgradeduringatimeperiodwhennobackupjobsarerunningorscheduledtorun. Beforeperforminganupgrade,manuallyclearallVDPalarms.Aftertheupgradecompletes,manually

    clearthealarmsagain.RestarttheVDPAppliancetoreconfigurethealarmsbyusingthefollowingcommand:

    emwebapp.sh --start

    Supported Upgrade PathsVDPupgradescannotoccurduringthemaintenancewindow.PerformtheVDPupgradewhennobackupjobsarerunning.IMPORTANTYoucannotupgradeVDP5.1.20directlytoVDP6.0.YoumustfirstupgradeVDP5.1.20toVDP5.1.21.xbeforeupgradingto6.0.Table 34listssupportedupgradepathsforVDPandVDPAdvancedversions.

  • VMware, Inc. 33

    Chapter 3 VDP Appliance Upgrades

    NOTEVDP6.0includesallfeaturesthatinearlierversionswereincludedinVDPAdvanced.

    Creating a Snapshot of the VDP ApplianceAsabestpractice,takeasnapshotoftheVDPAppliancebeforetheupgrade.Ifyouencounteranyupgradeissues,youcanrollbacktothesnapshot.1 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    2 Loginasauserwhohasprivilegestoedithardwaresettings.3 ClickvCenter>HostsandClusters.4 Inthetreeontheleft,clickthedisclosurearrowsuntiltheVDPAppliancedisplays.5 RightclicktheVDPApplianceandselectShutDownGuestOS.NOTEAlwaysshutdownaVDPAppliancebyusingtheShutDownGuestOSaction.DonotusePowerOfftoshutdownaVDPAppliance.6 Aftertheappliancehasshutdown,rightclicktheVDPApplianceandchooseEditSettings.7 IntheVirtualHardwaretable,startingwithHarddisk2,clickthedisclosurearrow.

    Table 3-4. Supported Upgrade Paths

    UpgradeFROM

    UpgradeTO

    VDP5

    .1.0

    VDP5

    .1.1

    VDP5

    .1.10

    VDP5

    .1.11

    VDP

    Adv

    anced

    5.1.20

    VDP

    Adv

    anced

    5.1.21

    VDP5

    .5.1

    VDP/

    VDPA

    dvan

    ced

    5.5.5

    VDP/

    VDPA

    dvan

    ced

    5.5.6

    VDP/

    VDPA

    dvan

    ced/

    RTI5

    .8.0

    VDP

    6.0

    VDP5.1.0 X X X X X X X X X X XVDP5.1.1 X X X X X X X X X XVDP5.1.10 X X X X X X X XVDP5.1.11 X X XVDPAdvanced5.1.20

    X X X X X X

    VDPAdvanced5.1.21

    X X X X X

    VDP5.5.1 X X X X XVDP/VDPAdvanced5.5.5

    X X X X

    VDP/VDPAdvanced5.5.6

    X X X

    VDP/VDPAdvanced/ReplicationTargetIdentity(RTI)5.8.0

    X X

    VDP6.0 X

  • vSphere Data Protection Administration Guide

    34 VMware, Inc.

    8 IntheDiskModerow,clickDependent.9 ContinuingwithHarddisk3,repeatStep 7untilalltheremainingdiskshavebeensettoDependent

    mode.

    10 ClickOK.11 RightclicktheVDPApplianceandchooseTakeSnapshot.12 Typeanameforthesnapshot.13 Typeanoptionaldescription.14 ClickOK.15 Afterthesnapshotcompletes,rightclicktheapplianceandclickPowerOn.TheVDPAppliancesnapshothasbeentaken.

    Mounting the Upgrade ISO Image on the ApplianceTheVDPApplianceisupgradedwithanISOupgradeimage.TomounttheupgradeISOimage:1 CopytheupgradeISOimagetoalocationthatisaccessibletothevSphereWebClient.2 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    3 Loginasauserwhohasprivilegestoedithardwaresettings.4 ClickvCenter>HostsandClusters.5 Inthetreeontheleft,clickthedisclosurearrowsuntiltheVDPApplianceappears.6 RightclicktheVDPApplianceandchooseEditSettings.7 IntheVirtualHardwaretable,clickthedisclosurearrownexttoCD/DVD.8 Fromthedropdownmenu,chooseDatastoreISOFile.

    TheSelectFilescreenshouldappear.Ifnot,selecttheCD/DVDMediarowandclickBrowse.9 FromtheSelectFilescreen,navigatetothedatastoreandthefolderthatcontainstheISOupgradeimage

    andselecttheISOimage.ClickOK.10 ClicktheConnectedcheckboxontheCD/DVDMediarow,andthenclickOK.TheISOimagebeginsmountingontheVDPAppliance.TheaveragetimeforaVDPUpgradeISOimagetomountisaboutfiveminutes.

    Installing the UpgradeTheupgradeprocesschecksforavailablediskspaceonthedatastorewheretheVDPApplianceisinstalled.Youneedapproximately2GBoffreespace,plusthesizeoftheupgradeISOfile.NOTETofindupgraderelatedlogsthatyoucanusetotroubleshootupgradeproblems,refertothe avinstaller.log.0 fileintheLogBundler.CAUTIONIfaspecificdedicatedroleisassignedfortheVDPAppliance,updatetheminimumrequiredvCenterpermissionsbeforeyouinstalltheupgrade.RefertoMinimumRequiredvCenterUserAccountPermissionsonpage 189formoreinformation.

    Procedure1 AccesstheVDPConfigureutility:

    https://:8543/vdp-configure/

  • VMware, Inc. 35

    Chapter 3 VDP Appliance Upgrades

    2 LoginwiththeVDPusernameandpassword.3 OntheConfigurationtab,ensurethatalltheservicesarerunning.Ifalloftheservicesarenotrunning,

    theupgradewillnotsucceed.4 ClicktheUpgradetab.UpgradesthatarecontainedontheupgradeISOimageyoumountedare

    displayedintheSWUpgradeswindow.

    5 Clicktheupgradeyouwanttoinstall,andclickUpgradeVDP.

    Theupgradebeginsinstalling.Thisinstallationportionoftheupgradecantakeonetofourhours.Astatusbarupdatestheprogressoftheinstallation.TheVDPApplianceautomaticallyshutsdownafterasuccessfulupgrade.WhenVDPisupgraded,twopluginsmaybevisibleinthevSphereWebClient,asshowninthefollowingfigure.

    Toremovetheoldplug,firstensurethatallVDPApplianceshavebeenupgraded.Then,refertotheVMwarevSphereDocumentationCenterwebsiteforinformationaboutmanagingvSphereWebClientplugins.ToremovetheVDPplugin,youmustupgradeallVDPAppliancestoVDPversion6.0andusethepluginmanagertodisabletheVDPplugin.RefertoVMwareKnowledgeBasearticleforinformationaboutmanagingvCenterplugins:http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2038356

    6 Tocompletetheupgrade,performthestepsdescribedinCompletingtheUpgrade.Iftheupgradeprocessfails,youcantrytoinstalltheupgradeagain.Ifyoucannotsuccessfullycompletetheupgrade,youcanrevertbacktothesnapshotyoutookatthestartoftheupgradeprocess.Forinstructionsonhowtorevertbacktothissnapshot,seeRevertingBacktoaSnapshotonpage 37.

    NOTEIftheISOimagedoesnotappear,closeVDPConfigurebyexitingthewebbrowser.IftheISOimageisbeingmountedfromaremotefilesystem,theprocessofmountingtheISOimageanddecompressingthefilescantakeupto20minutes.AfterallowingtimefortheISOimagetomount,iftheUpgradetabstilldoesnotdisplayanavailableupgrade,itmaybebecausetheimageiscorrupt.AnyISOimagesthatdonotpasschecksumarenotdisplayedontheUpgradetab.

    IMPORTANTTheupgradeprocessdisplaysthefollowingmessageifyoudonothaveenoughdiskspacefortheupgrade:Please make sure you have at least 23 GB for repo. 10 GB for var, 1 GB for root partition and 2 GB for space partition.

    Beforecontinuingtheupgrade,refertoFreeingupspacefortheupgradeonpage 36tofreeupdiskspacefortheupgrade.

  • vSphere Data Protection Administration Guide

    36 VMware, Inc.

    Freeing up space for the upgradeIfyoureceivedthefollowingerrormessageafteryouclickedUpgradeVDPontheUpgradetab:Please make sure you have at least 23 GB for repo. 10 GB for var, 1 GB for root partition and 2 GB for space partition.

    Performthefollowingproceduretofreeupdiskspace.Otherwise,youcanskipthisprocedure.

    Procedure1 OpenPuttysessionontheVDPAppliance.2 Loginasroot.3 StoptheVMwareVDPwebservicesbytypingthefollowingcommand:

    emwebapp.sh --stop

    4 StoptheApachewebserverbytypingthefollowingcommand:/etc/init.d/apache2 stop

    5 Removelogfilesfromthe/usr/local/avamar-tomcat/logsdirectorybytypingthefollowingcommands:

    cd /usr/local/avamar-tomcat/logsrm *log*

    6 Removeoldlogfilesfromthe/root/.avamar/var/mc/cli_logdirectorybytypingthefollowingcommands:

    cd /root/.avamar/var/mc/cli_logrm *.log.*

    7 Removethemod_jk.logfilebytypingthefollowingcommands:cd /var/log/apache2rm mod_jk.log

    8 StarttheApachewebserverbytypingthefollowingcommand:etc/init.d/apache2 start

    9 StarttheVMwareVDPwebservicesbytypingthefollowingcommand:emwebapp.sh --start

    10 Performtheupgrade.RefertoInstallingtheUpgradeonpage 34.

    Completing the UpgradeYoumustremovesnapshotsandunmounttheupgradeimageafteranupgradecompletessuccessfully.1 Fromawebbrowser,accessthevSphereWebClient:

    https://:9443/vsphere-client/

    2 Loginasauserwhohasprivilegestoedithardwaresettings.3 ClickvCenter>HostsandClusters.4 Inthetreeontheleft,clickthedisclosurearrowsuntiltheVDPApplianceappears.5 Ifyourappliancehasnotbeenshutdown,rightclicktheVDPApplianceandchooseShutDownGuest,

    andthenclickYes.6 Aftertheappliancehasshutdown,rightclicktheVDPApplianceandchooseManageSnapshots.7 ClickthesnapshotyoucreatedfortheVDPAppliance.8 ClickDelete,andclickYes.9 ClickClose.

  • VMware, Inc. 37

    Chapter 3 VDP Appliance Upgrades

    10 RightclicktheVDPApplianceandchooseEditSettings.11 StartingwithHarddisk2,clickthedisclosurearrow.12 IntheVirtualHardwaretable,intheDiskModerow,clickIndependentPersistent.13 ContinuingwithHarddisk3,repeatStep 11untilalltheremainingdiskshavebeensettoIndependent

    Persistentmode.14 IntheVirtualHardwaretable,clickthedisclosurearrownexttoCD/DVD.15 FromthedropdownmenuchooseHostDevice.16 ClickOK.17 AfterthesnapshothasbeenremovedandtheappliancehasbeenreconfiguredsotheupgradeISOimage

    isnolongermounted,rightclicktheVDPApplianceandchoosePowerOn.TheVDPApplianceupgradeprocessiscomplete.Afterthesuccessfulupgradecompletesandtheapplianceispoweredon,manuallyrunanintegritycheck.SeeRunninganIntegrityCheckonpage 60forinstructions.NOTEAfterupgradingtheVDPAppliance,whenyoulogintothevSphereWebClientforthefirsttime,thevSphereWebClientwillnotshowVDPasanoption.YoumustlogoutofthevSphereWebClientandthenloginagain.SubsequentloginswillshowVDPasanoption.

    Reverting Back to a SnapshotIfyouneedtorevertbacktothesnapshotyoutookbeforetheupgradeprocess,performthefollowingsteps:1 LogintothevCenterServerbyusingthevSphereWebClientasauserwhohasprivilegestoedit

    hardwaresettingsandremoveasnapshot.2 ClickHostsandClusters.3 Inthetreeontheleft,clickthedisclosurearrowsuntiltheVDPApplianceappears.4 RightclicktheVDPApplianceandchooseShutDownGuest,andthenclickYes.5 Aftertheapplianceshutsdown,rightclicktheVDPApplianceandchooseReverttoCurrentSnapshot.

    Ifyouhavemorethanonesnapshot,youmustchooseManageSnapshotstochoosethesnapshotyouwanttorevertbackto.

    6 Afterrevertingtothesnapshot,rightclicktheVDPApplianceandchooseEditSettings.7 StartingwithHarddisk2,clickthedisclosurearrow.8 IntheVirtualHardwaretable,intheDiskModerow,clickIndependentPersistent.9 ContinuingwithHarddisk3,repeatStep 7untilalltheremainingdiskshavebeensettoIndependent

    Persistentmode.10 ClickOK.11 RightclicktheVDPApplianceandchoosePowerOn.TheVDPApplianceisresetbacktoitsearlierstate.

  • vSphere Data Protection Administration Guide

    38 VMware, Inc.

    Upgrading Proxy SoftwarePerformthisprocedurewhenanewerversionoftheVMwareexternalproxysoftwareisavailablefordownloadfromtheVDPAppliance.

    Procedure1 AccessthevSphereWebClient:

    https://:9443/vsphere-client/

    wherevCenter_ServeristhenetworkhostnameorIPaddressforthevCenterServer.2 IntheCredentialspage,enteranadministrativevCenterusernameandpasswordandclickLogin.3 InthevSphereWebClient,selectVDP.4 IntheWelcometoVDPpage,selecttheVDPApplianceandclickConnect.5 FromtheVDPuserinterface,selecttheConfigurationtab.6 IntheDownloadssection,clicktheExternalProxyUpgradeISOlink.

    TheVMwareVDPExternalProxylinuxx86version.isodialogboxdisplays,whereversionisthespecificversionAvamarsoftwareavailablefordownload.

    7 SavetheVMwareVDPExternalProxylinuxx86version.ovatoatemporaryfolder,suchasC:\Temp,ortothedesktop.

    8 FromthevSphereClientorvSphereWebClient,logintothevCenterServer.9 LocateandselecttheESXServerthathoststheproxyyouwanttoupdate.10 ClicktheSummarytab.11 IntheResourcespane,selectadatastoreintheDatastorelist.

    ThisdatastoreiswhereyouwilluploadtheISOfile.Ifyouareperformingmultipleupgrades,youshouldselectadatastorethatisaccessibletothegreatestnumberofproxies.

    12 RightclickthedatastoreandselectBrowseDatastore.TheDatastoreBrowserwindowappears.

    13 Selectafolderinthetree.14 ClickUploadfilestothisdatastore,andthenselectUploadfile.

    TheUploadItemsdialogboxappears.15 BrowsetotheISOfilethatyoudownloaded.16 SelecttheISOfileandclickOpen.

    TheUploadItemsdialogboxcloses.17 IfanUpload/DownloadOperationWarningappears,clickYestodismissthewarningandcontinuewith

    theupload.18 Waitfortheuploadtocomplete.19 SwitchtotheVMsandTemplatesviewbyclickingView>InventoryVMsandTemplates.20 Intheleftpane,locateandselecttheproxyyouwanttoupgrade.21 RightclickEditSettings.

    TheVirtualMachinePropertiesdialogboxappears.22 IntheHardwarelist,selectCD/DVDDrive1.

  • VMware, Inc. 39

    Chapter 3 VDP Appliance Upgrades

    23 Setthefollowingoptions:a InDeviceStatus,selectConnected.b InDeviceStatus,selectConnectatpoweron.c InDeviceType,selectDatastoreISOFile.

    24 ClickBrowse.TheBrowseDatastoresdialogboxappears.

    25 BrowsetotheISOfilethatyoudownloaded.26 SelecttheISOfileandclickOpen.

    TheBrowseDatastoresdialogboxcloses.27 IntheVirtualMachinePropertiesdialogbox,clickOK.

    TheVirtualMachinePropertiesdialogboxcloses.TheISOfileismountedontheproxy.Theproxyautomaticallywaitsuntilnobackupsarerunning,thenupdatesitself.Becausethepollingintervalissetto30minutes,itmaketakeupto30minutesafterthelastbackupcompletesfortheupgradetobegin.

    NOTEWhenyoureboottheproxyvirtualmachine,itupdatesitssoftware.Anybackupsthatarerunningduringtherebootwillfail.Therefore,youshouldonlyrebootwhenyouareabsolutelycertaintheproxyisnotbeingusedforbackups.28 EnsurethatyouarestillintheVMsandTemplatesview.Ifnot,switchtotheVMsandTemplatesviewby

    clickingView>InventoryVMsandTemplates.29 Intheleftpane,locateandselecttheproxyyoujustupgraded.30 RightclickEditSettings.

    TheVirtualMachinePropertiesdialogboxappears.31 IntheHardwarelist,selectCD/DVDDrive1.32 InDeviceStatus,cleartheConnectedcheckbox.33 ClickOK.

    TheVirtualMachinePropertiesdialogboxcloses.34 Afterasuccessfulproxyclientupgrade,youcanchecktheversionbyrunningthefollowingcommandon

    theproxyvirtualmachine:avtar --version

  • vSphere Data Protection Administration Guide

    40 VMware, Inc.

  • VMware, Inc. 41

    4

    Thischaptercontainsthefollowingtopics: AbouttheVDPConfigureUtilityonpage 42 ViewingStatusonpage 42 StartingandStoppingServicesonpage 43 CollectingLogsonpage 44 ModifyingConfigurationSettingsonpage 45 RollingBackanApplianceonpage 46 EmergencyRestoreonpage 46

    Post-Installation Configuration of VDP Appliance 4

  • vSphere Data Protection Administration Guide

    42 VMware, Inc.

    About the VDP Configure UtilityDuringinstallationofvSphereDataProtection(VDP),theVDPConfigureutilityrunsininstallmode.Thismodeallowsyoutoenterinitialnetworkingsettings,timezone,VDPAppliancepassword,andvCentercredentials.Installmodealsoallowsyoutocreateorattachstorageandoptionallyruntheperformanceassessmenttool.Afterinitialinstallation,theVDPConfigureutilityrunsinmaintenancemodeanddisplaysadifferentuserinterface.ToaccesstheVDPConfigureutility,openawebbrowserandtype:https://:8543/vdp-configure/

    UsetheVDPApplianceusernameandpassword.AsyoulogintotheVDPConfigureutility,asystemhealthcheckscriptruns.YoumustwaitforthesystemhealthchecktofinishrunningbeforeyoucanperformconfigurationtasksfromanyoftheVDPConfigureutilitytabs.NOTEAftertheapplianceisconfigured,youcanoptionallyrunaperformanceanalysistestfromtheVDPConfigureutility.Thetestrequires41GBperdiskperdatastore.Ifthatamountofspaceisnotavailable,theutilityreportsinsufficientspaceandtheperformanceanalysistestwillnotrun.Usetheconfigurationinterfacetoperformthefollowingconfigurationtasks: InstallingtheUpgradeonpage 34AllowsyoutoupgradetoanewerversionoftheVDPAppliance. StorageManagementonpage 71Allowsyoutoviewyourstorageconfiguration,addandeditaData

    Domainsystem,andaddorexpanddiskstorageontheVDPAppliance. ViewingStatusonpage 42Allowsyoutoseetheservicescurrentlyrunning(orcurrentlystopped)

    ontheVDPAppliance. StartingandStoppingServicesonpage 43AllowsyoutostartandstopselectedservicesontheVDP

    Appliance.

    CollectingLogsonpage 44AllowsyoutodownloadcurrentlogsfromtheVDPAppliancefortroubleshootingpurposes.

    ModifyingConfigurationSettingsonpage 45Allowsyoutovieworchangenetworksettings,configurevCenterRegistration,vieworeditsystemsettings(timezoneinformationandVDPcredentials),andmanageproxythroughputthroughexternalproxyandinternalproxyconfigurationoptions.

    RollingBackanApplianceonpage 46AllowsyoutorestoretheVDPAppliancetoanearlierknownandvalidstate.

    EmergencyRestoreonpage 46AllowsyoutorestoreaVMdirectlytothehostthatisrunningtheVDPAppliance.ThisemergencyrestoreprocedureisintendedforusewhenthevCenterisunavailable.

    Viewing StatusTheConfigurationtablistsalloftheservicesrequiredbyVDPandthecurrentstatusofeachservice.Table 45describestheservicesusedbyVDP.Table 4-5. Description of services running on the VDP Appliance.

    Service Description

    Coreservices ThesearetheservicesthatcomprisethebackupengineoftheVDPAppliance.Iftheseservicesaredisablednobackupjobs(eitherscheduledorondemand)willrun,andnorestoreactivitiescanbeinitiated.

    Managementservices Managementservicesshouldonlybestoppedunderthedirectionoftechnicalsupport.Filelevelrestoreservices Thesearetheservicesthatsupportthemanagementoffilelevelrestoreoperations.Backuprecoveryservices Thesearetheservicesthatsupportbackuprecovery.

  • VMware, Inc. 43

    Chapter 4 Post-Installation Configuration of VDP Appliance

    NOTEIfanyoftheseservicesstoprunning,analarmistriggeredonthevCenterServer.Ifastoppedserviceisrestarted,thealarmiscleared.Therecanbeadelayofupto10minutesbeforealarmsaretriggeredorcleared.

    Thestatusthatisdisplayedfortheseservicescanbeanyofthefollowing: Starting

    StartFailed Running

    Stopping

    StopFailed Stopped

    Loadinggettingstate Unrecoverable(Coreservicesonly) Restoring(Managementservicesonly) RestoreFailed(Managementservicesonly)Clicktherefreshicontoupdatethestatusdisplay.

    Starting and Stopping ServicesOnthestatusscreenyoucanrestartstoppedservicesbyclickingStart,oryoucanstoprunningservicesbyclickingStop.Ingeneral,however,youshouldonlystoprunningservicesunderthedirectionoftechnicalsupport.Ifyouseethataserviceisstopped,youcanattempttorestartitbyclickingStart.Insomecases,however,additionaltroubleshootingstepsarenecessaryfortheservicetoworkproperly.Ifallservicesarestopped,starttheservicesinthefollowingorder:1 Coreservices2 Managementservices3 Backupscheduler4 Maintenanceservices5 Filelevelrestoreservices6 Backuprecoveryservices

    Maintenanceservices Thesearetheservicesthatperformmaintenancetasks,suchasevaluatingwhetherretentionperiodsofbackupshaveexpired.TheMaintenanceservicesaredisabledthefirst2448hoursaftertheVDPApplianceisdeployed.Thiscreatesalargerbackupwindowforinitialbackups.

    Backupscheduler Thebackupscheduleristheservicethatinitiatesschedulebackupjobs.Ifthebackupschedulerisstopped,noscheduledbackupswillrun.Ondemandbackupscanstillbeinitiated.

    Table 4-5. Description of services running on the VDP Appliance. (Continued)

    Service Description

  • vSphere Data Protection Administration Guide

    44 VMware, Inc.

    Collecting LogsTheLogCollectortabenablesyoutodownloadlogfilesindividuallyorcollectively.TheLogCollectortabgroupslogfilesintothreesections.Table 46describesthelogfilesineachgroup.

    Whenyouselectacheckboxnexttoagroupheadingornexttoanindividuallog,theVDPConfigureUI,bydefault,createsalogbundlenamedLogBundle.zip.ThelogbundleisintendedprimarilyforsendingVDPAppliancelogstosupportpersonnel.NOTEAlllogsarecentrallylocatedin/space/vdp/logs.

    Procedure1 Openawebbrowserandtype:

    https://:8543/vdp-configure/

    2 LoginwiththeVDPusernameandpassword.3 ClicktheLogCollectortab.4 Selectoneormorecheckboxestodownloadlogfiles:

    Todownloadalllogfilestoazipfile,selectAllVDPApplianceLogsandclickDownloadtosavealllogfilesfromVDPservicestoa.zipfile.TheSelectlocationfordownloaddialogboxappears.Bydefault,thelogbundleisnamedLogBundle.zip.Renamethefiletoauniquename.

    Todownloadalllogsunderaspecificheading,selectacheckboxnexttoaheading,andthenclickDownload:

    CoreVDPService ManagementService FileSystemService FileLevelRestoreService

    Table 4-6. Log files available from the Log Collector tab

    Group Log files

    AllVDPApplianceLogs AlllogfilesfromtheAllVDPApplianceLogsgroup.CoreVDPService MigrationUtility

    System AVI GSAN DPNandWorkflow VDP

    ManagementService MCFileSystemService HFSCheckFileLevelRestoreService FLRProxyReplication Replication

    ReplicationRecoveryImageBackupandRestore ImageProxyClientLogs Microsoftapplication(MSApp)

    Theaggregatedclientlogincludesreplication,backup,restore,orautomaticbackupverification(ABV)jobsthatpassedwithexceptionsorthatfailed.

    Configurations VDPconfigurationfilesfromproxies,configchecker,agents,andsoforth.Theseconfigurationfilesarelocatedin/space/vdp/config.

  • VMware, Inc. 45

    Chapter 4 Post-Installation Configuration of VDP Appliance

    Replication

    ImageBackupandRestore Todownloadlogfileslistedundermultipleheadings,selectthecheckboxnexttooneofmorelog

    files,andthenclickDownload. IntheClientLogsgroupbox,clickDownloadtodownloadanaggregatedtextfilewhichcontainsall

    clientfailurelogs. IntheConfigurationsgroupbox,clickDownloadtodownloadonlyVDPconfigurationfile

    information.

    Modifying Configuration SettingsWhenyouaccesstheVDPConfigureutilityafterinstallation,itrunsinmaintenancemode.Whileinmaintenancemode,byclickingtheConfigurationtab,youcansetormodifyanysettingsthatwereenteredduringinstallation.Youcanconfigurenetworksettingsandsystemsettings,andyoucanregisterthevCenter.

    Network SettingsYoucanconfigurethefollowingnetworksettingsontheConfigurationtab.NOTEIfyouchangeanynetworksettings,manuallyrunanintegritycheckimmediatelyafterthechangeismade.FailuretorunanintegritycheckcouldresultinaVDPconnectionfailurewhilerollingbacktoapreviouscheckpoint.SeeRunninganIntegrityCheckonpage 60forinstructions. IPv4staticaddressTheInternetProtocolv4settingoftheinterface. NetmaskThenetworkmaskoftheIPv4staticaddress. GatewayThegatewayaddressoftheIPv4staticaddress. PrimaryDNSTheprimarydomainnamesystemusedforDNSresolution. SecondaryDNSThesecondarydomainnamesystemusedforDNSresolution. HostnameTheuniquenamebywhichacomputerisknownonanetwork(forexample:vdpprimary). DomainAuniquenamethatidentifiesawebsite(forexample:emc.com).Domainissometimesreferred

    toasthedomainname.

    vCenter Server RegistrationCAUTIONChangingthevCenterServerhostname,vCenterServerpassword,vCenterServerFQDNorIPaddress,orvCenterServerportnumberresultsinthelossofallbackupjobs,replicationjobs,andbackupverificationjobsassociatedwiththeVDPAppliance.Existingrestorepointsremainintact,butyouwillberequiredtorecreatebackupjobsandreplicationjobs.BeforetheprocessthatreconfiguresthevCenterServerregistrationruns,allofthefollowingconditionsmustbetrue: Nootherreconfigurationprocessisrunning(forexample,passwordornetworkreconfiguration). Nobackup,replication,orrestorejobsarerunning. Nointegritycheckisrunning. AllservicesarerunningontheVDPAppliance.IfyouchangeanyvCenterregistrationcredentials,manuallyrunanintegritycheckimmediatelyafterthechangeismade.FailuretorunanintegritycheckcouldresultinaVDPconnectionfailurewhilerollingbacktoapreviouscheckpoint.SeeRunninganIntegrityCheckonpage 60forinstructions.

  • vSphere Data Protection Administration Guide

    46 VMware, Inc.

    Rolling Back an ApplianceTheVDPAppliancecouldbecomeinconsistentorunstable.Insomecases,theVDPConfigureutilitycandetectaninconsistentorunstablestateandwillprovideamessagesimilartothefollowingmessageimmediatelyafteryoulogin:

    It appears that your VDP Appliance has suffered an unclean shutdown and will likely require a checkpoint rollback to restore data protection functionality. This process may be initiated from the Rollback tab.

    CAUTIONBydefault,VDPkeepstwosystemcheckpoints.Ifyourollbacktoacheckpoint,allbackupsandconfigurationchangestakensincethecheckpointwastakenwillbelostwhentherollbackiscompleted.ThefirstcheckpointiscreatedwhenVDPisinstalled.SubsequentcheckpointsarecreatedbytheMaintenanceservice.Thisserviceisdisabledforthefirst24to48hoursofVDPoperation.Intheeventthatyourollbackduringthistimeframe,thentheVDPApplianceissettothedefaultconfigurationandanybackupconfigurationsorbackupsarelost.NOTEIfanyVMwareVDPforExchangeServerClientsorVMwareVDPforSQLServerClientswereinstalledbetweenacheckpointandarollback,theclientsmustbereinstalled.FollowtheprocedurebelowtorollbackaVDPAppliance.CAUTIONOnlyrollbacktothemostrecentvalidatedcheckpoint.

    PrerequisiteTheVDPAppliancemustbeinstalledandtheVDPAppliancepasswordisrequired.

    Procedure1 Openawebbrowserandtype:

    https://:8543/vdp-configure/

    2 LoginwiththeVDPusernameandpassword.3 ClicktheRollbacktab.4 ClickthelockicontoenableVDProllback.5 EntertheVDPAppliancepasswordandclickOK.

    Thelockiconchangestounlocked.6 Clickthecheckpointthatyouwanttorollbackto.7 ClickPerformVDProllbacktoselectedcheckpoint.

    AwarningmessageappearsexplainingtheconsequencesofrollingbacktheVDPAppliance.8 ClickYes.

    Aninformationmessageappearstellingyouarollbackhasbeeninitiated.9 ClickOK.

    TheVDPApplianceattemptstorollbackanddisplaysstatusinformation.Italsodisplaysaninformationmessageindicatingwhethertherollbacksucceededorfailed.

    10 ClickOK.IftheVDPAppliancedidnotrollbacksuccessfully,contactCustomerSupport.

    Emergency RestoreVDPisdependentonthevCenterServerformanyofitscoreoperations.ThedirecttohostemergencyrestoreoperationprovidesamethodforrestoringthevCenterServerwhenthevCenterServerisunavailableortheuserisunabletoaccesstheVDPuserinterfacewiththevSphereWebClient.

  • VMware, Inc. 47

    Chapter 4 Post-Installation Configuration of VDP Appliance

    AnemergencyrestoreoperationrestoresaVMdirectlytothehostthatisrunningtheVDPAppliance.TheEmergencyRestoretabdisplaysalistofVMsthathavebeenbackedupbytheVDPAppliance.ThesevirtualmachinescanberestoredasnewvirtualmachinesontothehostwheretheVDPApplianceisrunning.

    Best Practices and RecommendationsEnsurethefollowingrequirementsaremetbeforeyouperformanemergencyrestoreoperation: Thevirtualmachinebeingrestoredhasavirtualhardwareversionthatissupportedbythehostonwhich

    theVDPApplianceisrunning. Thereisadequatefreespaceinthetargetdatastoretoaccommodatetheentirevirtualmachine. ThetargetVMFSdatastoretowhichthevirtualmachineisbeingrestoredsupportstheVMDKfilesize. NetworkconnectivityisavailablefortherestoredvirtualmachinesfromthehostwheretheVDP

    Applianceisrunning. ThereisatleastonelocalaccountwithadministratorprivilegesonthehostwheretheVDPApplianceis

    running.

    Limitations and Unsupported Features ThevSpherehostonwhichtheemergencyrestoreoperationisbeingperformedcannotbepartofthe

    vCenterinventory.AvSpherehostthatiscurrentlymanagedbythevCenterServermustbetemporarilydisassociatedfromthevCenterServertoperformtheemergencyrestore.TodisassociatethevCenterServer,usethevSphereClient(notthevSphereWebClient)connecteddirectlytothevSpherehost.

    Emergencyrestoreallowsyoutorestoreonlytotherootofthehostlevelintheinventory. EmergencyrestorerequiresthattheDNSserverusedbyVDPisavailableandcanfullyresolvethetarget

    vSpherehostname. EmergencyrestorerestoresthevirtualmachineinthePoweredOffstate.Youmustmanuallylogintothe

    hostandpowerontherestoredvirtualmachine. Emergencyrestorerestoresthevirtualmachineasanewvirtualmachine.Youmustensurethatthename

    providedforthevirtualmachineisnotaduplicateofavirtualmachinethatalreadyexists. EmergencyrestoredoesnotlistMSappclients. Aninternalproxyisautomaticallyactivatedwhenanemergencyrestoreoperationisperformed.Ifboth

    theinternalandexternalproxiesareactivated,youmustdisabletheinternalproxyontheVDPConfigureutilityfortheemergencyrestoretocompletesuccessfully.

    Procedure1 Ifyouhavenotalreadydoneso,logintothevSphereclientofthehostand,fromtheSummarytabunder

    HostManagement,performthefollowingsteps:a ClickDisassociateHostfromvCenter.b ClickYeswhenpromptedtoremovethehostfromthevCenter.

    2 LogintotheVDPConfigureutility:https://:8543/vdp-configure/

    3 ClicktheEmergencyRestoretab.VirtualmachinesprotectedbyVDParelistedintheEmergencyRestoredialogbox.Here,youcanfindthefollowingdetailsaboutthevirtualmachines: NameThenameofthevirtualmachinesprotectedbytheVDPAppliance.Byclickingthe

    disclosurearrows,youcandeterminethedateandtimeofthelastrestorefortheselectedvirtualmachine.

  • vSphere Data Protection Administration Guide

    48 VMware, Inc.

    LastKnownPathThelastknownlocationofthevirtualmachineinthevCenterinventorylist.Thislocationisupdatedifthevirtualmachineismoved.

    Runningrestoredetails: ClientNameThenameoftheclientonwhichthevirtualmachineisrestored. StatusThepassorfailstatusoftherestore. StartTimeThetimetherestorestarted. CompletedTimeThetimetherestorecompleted. BytesTransferredThenumberofbytesthatweretransferredduringrestore.

    4 SelectthevirtualmachinethatwillserveastherestorepointandclickRestore.TheHostCredentialsdialogboxappears.

    5 IntheHostCredentialsdialogbox,entervalidhostcredentials: ESXiHostnameorIPEnterthevSpherehostnameorvSpherehostIPaddress. Port443,whichisthedefault,isprepopulated. UsernameEnterthevSpherehostusername.Therecommendedhostusernameisroot.Forany

    otherhostusername,theuseraccountmusthavethecreateVMprivilege. PasswordEnterthevSpherehostpassword.Ifyouenterinvalidhostcredentials,anerrormessage

    displaysandyouwillbeunabletoconnecttothehost.NOTEIfyoudidnotsuccessfullydisassociatetheselectedvirtualmachinefromitsvCenter,anerrormessageappearsandyoucannotproceed.6 ClickOK.

    TheRestoreaBackupscreeninitiatestherestorewiththenewnameanddestination.7 TheRestoreaBackupdialogboxdisplaysthefollowinginformation:

    ClientnameThenameoftheclientonwhichthevirtualmachineisrestored. BackupThedateandtimestampofthebackups. NewNameThefieldwhereanewnamemustbeentered,whichcannotbeaduplicateofaVM

    thatalreadyexists. DestinationThevSpherehostname. DatastoreAdropdownlistofdatastoresavailableasthedestinationtargets.

    8 EnteranewnameintheNewNamefield.Thenamemustbeuniqueandcanbeupto255characterslong.Thefollowingcharacterscannotbeusedinthename:~!@$^%{}[]|,`;#\/:*?&.Inaddition,diacriticalcharacterscannotbeused(forexample:,,,,and).

    9 Selectadatastoreasthedestinationtargetforthebackup.CAUTIONThedatastorecapacitysizeislisted.Makesureyouselectadatastorewithenoughdiskspacetoaccommodatetherestore.Insufficientspacecausestherestoretofail.10 ClickRestore.11 VerifythattherestoresubmittedsuccessfullybycheckingtheprogressintheRecentTasksdialogbox.NOTETherestoredvirtualmachineislistedatthevSpherehostlevelintheinventory.Restoringtoamorespecificinventorypathisnotsupported.

  • VMware, Inc. 49

    Chapter 4 Post-Installation Configuration of VDP Appliance

    Automatic Host DetectionForvSphereDataProtectionversions5.5andearlier,usersarerequiredtoidentify,disassociate,andpopulatevSpherehostvaluesbeforetheyperformanemergencyrestore.WithvSphereDataProtectionversion5.8andlater,theapplianceautomaticallydetectsthehostthatitiscurrentlyregisteredtoandprepopulatesthehostnameorIPvalueintheHostCredentialsdialogbox.Thiseasestheburdenforauser,whomighthavenumeroushostsinaclusterandneedstoidentifythecurrent,residenthosttodisassociatefromthevCenter.Thefollowingarerarecaseswhentheappliancefailstodetectthemostupdatedhosttowhichtheapplianceisregisteredanddisplaysanoldervalue: ThevCenterisunavailableand,aftertheVDPAppliancemigratestoadifferenthostunderHAenabled

    clustering,theappliancedisplaystheolderhosttowhichitwasregistered. ThevCenterbecomesunavailableimmediatelyaftertheapplianceismigratedtoanotherhost.Inthiscase,

    thenewhostcannotbedetected,becauseittakestheapplianceaperiodoftimetoprocessandupdateeventsfromthevCenter.

    Inbothofthesecases,theusermustmanuallydeterminetowhichhosttheapplianceisregistered.

    Refreshing Restore Points1 LogintotheVDPConfigureURL:

    https://:8580/vdp-configure/

    2 ClicktheEmergencyRestoretab.3 ClickRefresh.

    Theloadingbarrefreshestherestorepoints.

    Reconnecting the Host to the vCenter1 RestorethevCenter.RefertoRestoreOperationsonpage 128forinstructions.NOTETherestoredvCenterispoweredoffbydefault.2 OncethevCenterrestorecompletes,poweronthevCenter.3 LogintothevCenterURLtoverifyalltheservicesarerunning:

    https://:5480

    4 LogintotherestoredvCenterthroughthevSphereclient:https://:9443/vsphere-client/

    5 FromthevSphereclient,addthevSpherehosttothenewlyrestoredvCenter.NOTEOncethevCenterhasbeenrestored,theremaybeadelayofapproximately20minuteswhilethevCenterservicesstartup.Duringthisdelay,youwillbeunabletoperformasuccessfulbackuporrestoreoperation.Ifyouexperiencedelays,trythebackuporrestorelater.

  • vSphere Data Protection Administration Guide

    50 VMware, Inc.

  • VMware, Inc. 51

    5

    Thischaptercontainsthefollowingtopics: SecureVDPServicesCommunicationtovCenteronpage 52 SecureExternalProxyCommunicationwithvCenteronpage 53

    Securing Communication between vCenter and VDP 5

  • vSphere Data Protection Administration Guide

    52 VMware, Inc.

    Secure VDP Services Communication to vCenterTheVDPAppliancedoesnotverifySSLcertificatespresentedbyvCenterduringtheregistrationprocesstovCenterServerAppliance(VCSA).ThefailuretoverifytheSSLcertificatemakesthevCenterServerandVDPpronetomaninthemiddleattacks.Topreventmaninthemiddleattacks,youmustsecureVDPserverandmanagementservicescommunicationtovCenterbydownloadingandconfiguringthevcenter-hostname.crtcertificate.Bydefault,theVDPservermanagementserviceandproxiesdonotvalidateSSLcertificateswhenconnectingtothevCenterServer.ThiscanleavethevCenterServervulnerabletoamaninthemiddleexploitation,whichmightresultinunauthorizedaccesstothevCenterServer.ConfiguringeachproxytouseSSLcertificateauthenticationwhenconnectingtothevCenterServercorrectsthisvulnerability.

    Before you beginEnsurethataCertificateAuthority(CA)signedSSLcertificateisinstalledonthevCenterServer.DetailedinstructionsforgeneratingandinstallingaCAsignedSSLcertificateandinstallingitonthevCenterServerarefoundinthefollowingVMwareKnowledgeBasearticle:ImplementingCAsignedSSLcertificateswithvSphere5.x(2034833)describeshowtoimplementCSsignedcertificatesinavSphere5.1or5.5environment.

    Procedure1 Downloadvcenter-hostname.crtfromthevCenterServerorwebbrowsertotheVDPAppliance:

    a Todownloadthecertificationfromabrowser,typethefollowingURLinthebrowser:https://vcenter-ip-address

    wherevcenteripaddressistheIPaddressofthevCenterServer.b Savethevcenter-hostname.crtcertificate.

    2 SSHintoaVDPApplianceastherootuser.3 CreateadirectoryintheVDPApplianceundertherootdirectoryorinanypreferredlocation.

    mkdir /root/directory

    4 Copy/sftpthevcenter-hostname.crtcertificatethatyoudownloadedtothenewdirectory,/root/directory,youcreatedontheVDPAppliance.

    5 Importthecertificateintormi_ssl_keystore:a Typethefollowingcommand:

    /usr/java/latest/bin/keytool -import -file /root/vcentercertificate/vcenter-hostname.crt -alias vcenter-hostname -keystore /usr/local/avamar/lib/rmi_ssl_keystore

    wherevcenterhostnameisthevCenterServerhostname.b Whenpromptedforthekeystorepassword,typechangeme.c Typeyestoacceptthecertificate,andthenpressEnter.

    6 Updatemanagementservicepreferencefile:a Openmcserver.xmlinthevieditor:

    vi /usr/local/avamar/var/mc/server_data/prefs/mcserver.xml

    b Searchforignore_vc_cert,andthenchangeitsvaluetofalse.c Saveandclosethefile.

    7 UpdatevCenterServerconfigurationfile:a Openvcenterinfo.cfginthevieditor:b Addvcenter-ignore-cert=falsetothefile.c Saveandclosethefile.

  • VMware, Inc. 53

    Chapter 5 Securing Communication between vCenter and VDP

    8 RestartMCSbytypingthefollowingcommands:su admin mcserver.sh --restart exit

    9 RestarttheTomcatwebapplicationserverbytypingthefollowingcommand:emwebpp.sh -restart

    Secure External Proxy Communication with vCenterBydefault,theVDPservermanagementserviceandproxiesdonotvalidateSSLcertificateswhenconnectingtothevCenterServer.ThiscanleavethevCenterServervulnerabletoamaninthemiddleexploitation,whichmightresultinunauthorizedaccesstothevCenterServer.ConfiguringeachproxytouseSSLcertificateauthenticationwhenconnectingtothevCenterServercorrectsthisvulnerability.

    Before you beginEnsurethataCertificateAuthority(CA)signedSSLcertificateisinstalledonthevCenterServer.DetailedinstructionsforgeneratingandinstallingaCAsignedSSLcertificateandinstallingitonthevCenterServerarefoundinthefollowingVMwareKnowledgeBasearticle:ImplementingCAsignedSSLcertificateswithvSphere5.x(2034833)describeshowtoimplementCSsignedcertificatesinavSphere5.1or5.5environment.

    Procedure1 Openacommandshellandlogintotheproxyasroot.2 CopythevCenterServercertificateto/usr/local/avamarclient/binontheproxy.NOTEIfachainedSSLcertificateisusedforthevCenter,copythechain.pem file,whichcontainsallcertificatesinthechain,to/usr/local/avamarclient/binontheproxy.3 Settheproperoperatingsystempermissionsonthecertificatebytypingthefollowingcommand:

    chmod 600 /usr/local/avamarclient/bin/vcenter-1.crt

    wherevcenter1.crtistheactualcertificatename.NOTEUsechain.pemforchainedvCenterSSLcertificates.4 Open/usr/local/avamarclient/var/avvcbimageAll.cmdinaUNIXtexteditor.5 Appendthefollowingentrytotheendofthefile:

    --ssl_server_authentication_file=/usr/local/avamarclient/bin/vcenter-1.crt

    wherevcenter1.crtistheactualcertificatename.6 Close/usr/local/avamarclient/var/avvcbimageAll.cmdandsaveyourchanges.7 Open/usr/local/avamarclient/var/avvmwfileAll.cmd inaUNIXtexteditor.NOTEUsechain.pemforchainedvCenterSSLcertificates.8 Appendthefollowingentrytotheendofthefile:

    --ssl_server_authentication_file=/usr/local/avamarclient/bin/vcenter-1.crt

    wherevcenter1.crtistheactualcertificatename.9 Close/usr/local/avamarclient/var/avvmwfileAll.cmdandsaveyourchanges.10 Open/usr/local/avamarclient/var/vddkconfig.iniinaUNIXtexteditor.11 FindthevixDiskLib.linuxSSL.verifyCertificates=0entry.12 ChangethevixDiskLib.linuxSSL.verifyCertificates=0 entryto1.

    vixDiskLib.linuxSSL.verifyCertificates=1" />

    13 Close /usr/local/avamarclient/var/vddkconfig.iniandsaveyourchanges.

  • vSphere Data Protection Administration Guide

    54 VMware, Inc.

    14 Ensurethattherearenorunningbackuporrestorejobsonthisproxy.15 Restarttheavagentandvmwareflrservicesbytypingthefollowingcommands:

    service avagent-vmware restartservice vmwareflr restart

    ResultsThisproxywillnowuseandvalidateSSLcertificateswhenconnectingtothevCenterServer.RepeatthisprocedureforeachproxyyoudeployinthevCenterenvironment.

  • VMware, Inc. 55

    6

    Thischapterincludesthefollowingtopics: LoginSecurityonpage 56 ConfiguringtheCustomerExperienceImprovementProgramonpage 56 ConfigurationandMonitoringonpage 57 MonitoringVDPActivityonpage 60 VDPShutdownandStartupProceduresonpage 62

    Configuring VDP 6

  • vSphere Data Protection Administration Guide

    56 VMware, Inc.

    Login SecurityToincreasesecurityoftheVDPConfigureUI,after5unsuccessfulloginattemptsfromanyuser,theVDPConfigureUIislockedfor5minutes.Thispreventsanyloginattemptsduringthattime.Anyexistingsessionsthatarealreadyloggedinareunaffected.Ifalockoutoccurs: TheVDPConfigureUIinformstheuserduringaloginattempt. AvCentereventaboutthelockoutisgenerated. Thevdp-configure.logcapturesthetime,theuser,thesourceaddress,andrequestheadersofthe

    failedloginattemptsthatleduptothelockout.

    Configuring the Customer Experience Improvement ProgramTheCustomerExperienceImprovementProgramisanoptionthatenablesyoutosendencryptedconfigurationandusageinformationabouttheVDPenvironmenttoVMwareserversforanalysis.VDPsendsthefollowingtypesofdatatoVMware: VersioninformationforVDP VDPtimezoneanduptime NumberofVMsprotectedandthenumberofVMsunprotected Amountofconfiguredcapacity. DataDomaininuse(true/false) Capacityutilization Numberofinternalandexternalproxiesconfiguredandregistered Numberofworkordersperproxyconfiguredbytheuser Managementservicesstatus Latestvalidcheckpointdate Agentsinuse(SQLServer,Exchange,andSharePoint)DuringtheinstallationofVDP,youcanenabletheCustomerExperienceImprovementProgramfromtheProductImprovementpageintheVDPConfigurationUtility.TheProductImprovementpageprovidestheEnableCustomerExperienceImprovementProgramcheckbox.Bydefault,thecheckboxisnotselected.AnytimeaftertheinstallationyoucanenableordisabletheCustomerExperienceImprovementProgrambyaccessingtheVDPConfigureUtilityfromtheawebbrowse.

    PrerequisitesInnetworksthatareprotectedbyafirewall,youmayneedtomodifythenetworktohelppreventconnectivityissueswhentheCustomerExperienceImprovementProgramattemptstouploaddatatotheVMwareserver.ToensurethatthefirewalldoesnotpreventCustomerExperienceImprovementProgramfromuploadingdatatotheVMwareserver,openthenetworktothefollowingVMwareservers: https://vcsa.vmware.com:443 https://phtransfer.vmware.com:443

    Procedure1 Openawebbrowserandtype:

    https://:8543/vdp-configure/

    2 LoginwiththeVDPusernameandpassword.

  • VMware, Inc. 57

    Chapter 6 Configuring VDP

    3 FromtheConfigurationtab,clickthe iconandselectProductImprovement.TheProductImprovementpageappears.

    4 EnableordisabletheCustomerExperienceProgrambyselectingorclearingtheEnableCustomerExperienceImprovementProgramcheckbox.

    Configuration and MonitoringFromthevSphereWebClient,youcanviewandmodifybackupwindowconfigurationdetails,inadditiontoinformationabouttheapplianceandstorage.YoucanalsoconfiguretheVDPAppliancetosendemailreportsonascheduledbasis.

    Viewing Backup Appliance ConfigurationBackupApplianceinformationprovidesinformationforBackupApplianceDetails,StorageSummary,andBackupWindowsConfiguration.BackupApplianceDetailsinclude: Displayname IPAddress MajorVersion(VDPversionnumber) MinorVersion(usedbyTechnicalSupport) Status

    vCenterServer HostIP VDPbackupuser Localtime TimezoneTheseoptionsareconfiguredduringtheVDPApplianceinstallation.TheycanbeeditedthroughtheVDPConfigureutility.SeePostInstallationConfigurationofVDPApplianceonpage 41foradditionaldetails.VDPApplianceStorageSummaryDetailsinclude: CapacityThetotalcapacityoftheVDPAppliance. SpacefreeHowmuchspaceiscurrentlyavailableforbackups. DeduplicatedsizeTheamountofdiskspacethebackupsaretakingupindeduplicatedformat. NondeduplicatedsizeTheamountofdiskspacethebackupswouldtakeupiftheywereconvertedto

    anative,nondeduplicatedformat.NOTEIfaDataDomainsystemisconfiguredasthebackuptarget,theDataDomainStorageSummarydetailsappear.

    Figure 62isagraphicalrepresentationofthebackupwindowconfiguration.

  • vSphere Data Protection Administration Guide

    58 VMware, Inc.

    Figure 6-2. Backup window configuration

    Each24hourdayisdividedintotwooperationalwindows: BackupwindowTheportionofeachdayreservedforperformingnormalscheduledbackups. MaintenancewindowTheportionofeachdayreservedforperformingroutineVDPmaintenance

    activities,suchasintegritychecks.DonotschedulebackupsorperformaBackupNowoperationwhileVDPisinmaintenancemode.ThebackupjobswillrunbuttheywillconsumeresourcesVDPneedsformaintenancetasks.Jobsthatarerunningwhenthemaintenancewindowbeginsorthatrunduringthemaintenancewindowwillcontinuetorun.

    NOTESincetheblackoutwindowhasbeeneliminated,activitiessuchasintegritychecksandgarbagecollectionwillnowrunnonstopduringthemaintenancewindow.

    Editing the Backup WindowYoucanchangetheamountoftimeavailableforprocessingbackuprequests.

    Prerequisites VerifythatVDPisinstalledandconfigured. YouareloggedintothevSphereWebClientandconnectedtotheVDPAppliance.

    Procedure1 Fromawebbrowser,accessVDP.RefertoAccessingvSphereDataPr