Contents

Dell PowerProtect 19.11 Data Manager Deployment Guide PDF

1 of 53
1 of 53

Summary of Content for Dell PowerProtect 19.11 Data Manager Deployment Guide PDF

PowerProtect Data Manager 19.11 Deployment Guide

June 2022 Rev. 01

Notes, cautions, and warnings

NOTE: A NOTE indicates important information that helps you make better use of your product.

CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid

the problem.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

2016 - 2022 Dell Inc. or its subsidiaries. All rights reserved. Dell Technologies, Dell, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners.

Preface.........................................................................................................................................................................................5

Chapter 1: Getting Started............................................................................................................ 9 Introducing the PowerProtect Data Manager software............................................................................................ 9 Supported Internet Protocol versions...........................................................................................................................10 Unsupported file-system modifications........................................................................................................................ 10 References...........................................................................................................................................................................10 Terminology.......................................................................................................................................................................... 11 Access the PowerProtect Data Manager UI............................................................................................................... 12

Get Started window.................................................................................................................................................... 13 UI tools and options ....................................................................................................................................................13

Export data.......................................................................................................................................................................... 17 Exported fields.............................................................................................................................................................. 18

Customer feedback........................................................................................................................................................... 19 Provide general feedback...........................................................................................................................................19

Security configuration......................................................................................................................................................20 Role-based security..................................................................................................................................................... 21

Chapter 2: Preparing for a Deployment........................................................................................22 Licensing PowerProtect Data Manager.......................................................................................................................22 PowerProtect Data Manager interoperability introduction.....................................................................................23 Microsoft application agent, Oracle RMAN agent, and PowerProtect Data Manager interoperability....... 23 File System agent interoperability and supported operating systems ................................................................ 24 Memory optimization........................................................................................................................................................25

Adjust the virtual machine memory........................................................................................................................ 25 Scalability limits for vCenter server, VM Direct Engine, and DD systems.......................................................... 26 PowerProtect Data Manager resource requirements in a VMware environment............................................. 26 Requirements for an external VM Direct Engine....................................................................................................... 27 Requirements for the PowerProtect Search Engine................................................................................................ 27 Network requirements......................................................................................................................................................27

Chapter 3: Deployment................................................................................................................28 PowerProtect Data Manager deployment methods................................................................................................. 28 Deploy the OVA file to a vCenter server.....................................................................................................................29

Chapter 4: Configuration............................................................................................................. 31 Configure the PowerProtect Data Manager virtual appliance................................................................................ 31 Troubleshooting network setup issues.........................................................................................................................33 Log bundle creation to troubleshoot configuration failures.................................................................................... 33 Configuring SupportAssist for PowerProtect Data Manager.................................................................................34

Migrating to SupportAssist....................................................................................................................................... 34 Generate SupportAssist access key and PIN....................................................................................................... 35 Connect to support services through SupportAssist ........................................................................................35 Update or configure contact data...........................................................................................................................36 Add AutoSupport.........................................................................................................................................................36

Contents

Contents 3

Change SupportAssist connection settings.......................................................................................................... 37 Enable or disable SupportAssist...............................................................................................................................37 Troubleshooting SupportAssist................................................................................................................................ 37

Chapter 5: Performing Updates...................................................................................................39 Managing update packages............................................................................................................................................ 39

Automatically check for an update package......................................................................................................... 39 Troubleshooting automatic downloads.................................................................................................................. 40 Manually check for an update package..................................................................................................................40 Download an update package...................................................................................................................................40 Upload an update package.........................................................................................................................................41 Delete an update package..........................................................................................................................................41 Perform a precheck on an update package...........................................................................................................41 Install an update package.......................................................................................................................................... 42

Updating the version of PowerProtect Data Manager............................................................................................ 43 Updating from a released version of PowerProtect Data Manager that has been updated.......................... 44 Update PowerProtect Data Manager from version 19.9 or 19.10 to version 19.11.............................................44 Update PowerProtect Data Manager from version 19.8 to version 19.11............................................................ 47 Update PowerProtect Data Manager from version 19.7 to version 19.11............................................................ 49

Appendix A: Deployment Best Practices and Troubleshooting......................................................52 Best practices for deploying PowerProtect Data Manager....................................................................................52 Troubleshooting PowerProtect Data Manager software updates........................................................................ 52

4 Contents

Preface As part of an effort to improve product lines, periodic revisions of software and hardware are released. Therefore, all versions of the software or hardware currently in use might not support some functions that are described in this document. The product release notes provide the most up-to-date information on product features.

If a product does not function correctly or does not function as described in this document, contact Customer Support.

NOTE: This document was accurate at publication time. To ensure that you are using the latest version of this document,

go to the Customer Support website.

Product naming Data Domain (DD) is now PowerProtect DD. References to Data Domain or Data Domain systems in this documentation, in the user interface, and elsewhere in the product include PowerProtect DD systems and older Data Domain systems. In many cases the user interface has not yet been updated to reflect this change.

Language use This document might contain language that is not consistent with Dell Technologies current guidelines. Dell Technologies plans to update the document over subsequent future releases to revise the language accordingly.

This document might contain language from third-party content that is not under Dell Technologies control and is not consistent with the current guidelines for Dell Technologies own content. When such third-party content is updated by the relevant third parties, this document will be revised accordingly.

Website links The website links used in this document were valid at publication time. If you find a broken link, provide feedback on the document, and a Dell Technologies employee will update the document as necessary.

Purpose This document describes how to deploy the Dell PowerProtect Data Manager software.

Audience This document is intended for the system administrator who will deploy the PowerProtect Data Manager software.

Revision history The following table presents the revision history of this document.

Table 1. Revision history

Revision Date Description

01 June 21, 2022 Initial release of this document for PowerProtect Data Manager version 19.11.

Preface 5

Compatibility information Software compatibility information for the PowerProtect Data Manager software is provided by the E-Lab Navigator.

Related documentation The following publications are available at Customer Support and provide additional information:

Table 2. Related documentation

Title Content

PowerProtect Data Manager Administration and User Guide Describes how to configure the software.

PowerProtect Data Manager Deployment Guide Describes how to deploy the software.

PowerProtect Data Manager Licensing Guide Describes how to license the software.

PowerProtect Data Manager Release Notes Contains information about new features, known limitations, environment, and system requirements for the software.

PowerProtect Data Manager Security Configuration Guide Contains security information.

PowerProtect Data Manager Amazon Web Services Deployment Guide

Describes how to deploy the software to Amazon Web Services (AWS).

PowerProtect Data Manager Azure Deployment Guide Describes how to deploy the software to Microsoft Azure.

PowerProtect Data Manager Google Cloud Platform Deployment Guide

Describes how to deploy the software to Google Cloud Platform (GCP).

PowerProtect Data Manager Cloud Disaster Recovery Administration and User Guide

Describes how to deploy Cloud Disaster Recovery (Cloud DR), protect virtual machines in the AWS or Azure cloud, and run recovery operations.

PowerProtect Data Manager Cyber Recovery User Guide Describes how to install, update, patch, and uninstall the PowerProtect Cyber Recovery software.

PowerProtect Data Manager File System User Guide Describes how to configure and use the software with the File System agent for file-system data protection.

PowerProtect Data Manager Kubernetes User Guide Describes how to configure and use the software to back up and restore namespaces and PVCs in a Kubernetes cluster.

PowerProtect Data Manager Microsoft Exchange Server User Guide

Describes how to configure and use the software to back up and restore the data in a Microsoft Exchange Server environment.

PowerProtect Data Manager Microsoft SQL Server User Guide

Describes how to configure and use the software to back up and restore the data in a Microsoft SQL Server environment.

PowerProtect Data Manager Oracle RMAN User Guide Describes how to configure and use the software to back up and restore the data in an Oracle Server environment.

PowerProtect Data Manager SAP HANA User Guide Describes how to configure and use the software to back up and restore the data in an SAP HANA Server environment.

PowerProtect Data Manager Storage Direct User Guide Describes how to configure and use the software with the Storage Direct agent to protect data on VMAX storage arrays through snapshot backup technology.

PowerProtect Data Manager Network Attached Storage User Guide

Describes how to configure and use the software to protect and recover the data on network-attached storage (NAS) shares and appliances.

PowerProtect Data Manager Virtual Machine User Guide Describes how to configure and use the software to back up and restore virtual machines and virtual-machine disks (VMDKs) in a vCenter Server environment.

6 Preface

Table 2. Related documentation (continued)

Title Content

VMware Cloud Foundation Disaster Recovery With PowerProtect Data Manager

Provides a detailed description of how to perform an end-to- end disaster recovery of a VMware Cloud Foundation (VCF) environment.

PowerProtect Data Manager Public REST API documentation Contains the Dell Technologies APIs and includes tutorials to guide you in their use.

vRealize Automation Data Protection Extension for Data Protection Systems Installation and Administration Guide

Describes how to install, configure, and use the vRealize Data Protection Extension.

Typographical conventions The following type style conventions are used in this document:

Table 3. Style conventions

Formatting Description

Bold Used for interface elements that a user specifically selects or clicks, for example, names of buttons, fields, tab names, and menu paths. Also used for the name of a dialog box, page, pane, screen area with title, table label, and window.

Italic Used for full titles of publications that are referenced in text.

Monospace Used for: System code System output, such as an error message or script Pathnames, file names, file name extensions, prompts, and syntax Commands and options

Monospace italic Used for variables.

Monospace bold Used for user input.

[ ] Square brackets enclose optional values.

| Vertical line indicates alternate selections. The vertical line means or for the alternate selections.

{ } Braces enclose content that the user must specify, such as x, y, or z.

... Ellipses indicate non-essential information that is omitted from the example.

You can use the following resources to find more information about this product, obtain support, and provide feedback.

Where to find product documentation The Customer Support website The Community Network

Where to get support The Customer Support website provides access to product licensing, documentation, advisories, downloads, and how-to and troubleshooting information. The information can enable you to resolve a product issue before you contact Customer Support.

To access a product-specific page:

1. Go to the Customer Support website. 2. In the search box, type a product name, and then from the list that appears, select the product.

Preface 7

Knowledgebase The Knowledgebase contains applicable solutions that you can search for either by solution number (for example, KB000xxxxxx) or by keyword.

To search the Knowledgebase:

1. Go to the Customer Support website. 2. On the Support tab, click Knowledge Base. 3. In the search box, type either the solution number or keywords. Optionally, you can limit the search to specific products by

typing a product name in the search box, and then selecting the product from the list that appears.

Live chat To participate in a live interactive chat with a support agent:

1. Go to the Customer Support website. 2. On the Support tab, click Contact Support. 3. On the Contact Information page, click the relevant support, and then proceed.

Service requests To obtain in-depth help from a support agent, submit a service request. To submit a service request:

1. Go to the Customer Support website. 2. On the Support tab, click Service Requests.

NOTE: To create a service request, you must have a valid support agreement. For details about either an account or

obtaining a valid support agreement, contact a sales representative. To find the details of a service request, in the

Service Request Number field, type the service request number, and then click the right arrow.

To review an open service request:

1. Go to the Customer Support website. 2. On the Support tab, click Service Requests. 3. On the Service Requests page, under Manage Your Service Requests, click View All Dell Service Requests.

Online communities For peer contacts, conversations, and content on product support and solutions, go to the Community Network. Interactively engage with customers, partners, and certified professionals online.

How to provide feedback Feedback helps to improve the accuracy, organization, and overall quality of publications. You can send feedback to DPAD.Doc.Feedback@emc.com.

8 Preface

Getting Started

Topics:

Introducing the PowerProtect Data Manager software Supported Internet Protocol versions Unsupported file-system modifications References Terminology Access the PowerProtect Data Manager UI Export data Customer feedback Security configuration

Introducing the PowerProtect Data Manager software PowerProtect Data Manager software is an enterprise solution that provides software-defined data protection, deduplication, operational agility, self-service, and IT governance.

PowerProtect Data Manager key features include the following:

Table 4. Key features

Software-defined data protection with integrated deduplication, replication, and reuse

Data backup and recovery self-service operations from native applications that are combined with central IT governance

Multicloud optimization with integrated Cloud Tiering

SaaS-based monitoring and reporting

Modern services-based architecture for ease of deployment, scaling, and updating

PowerProtect Data Manager integrates multiple data-protection products within the Data Protection portfolio to enable data protection as a service, providing the following benefits:

Table 5. Benefits

Enables data-protection teams to create data paths with provisioning, automation, and scheduling to embed protection engines into their data-protection infrastructure for high-performance backup and recovery

Enables backup administrators of large-scale environments to schedule backups for the following asset types from a central location on the PowerProtect Data Manager server: VMware virtual machines File systems VMAX storage groups Kubernetes clusters Microsoft Exchange Server and Microsoft SQL Server databases Oracle databases SAP HANA databases Network-attached storage (NAS) shares

Provides an agent-based approach to automatically discover and protect databases on an application server

Enables self-service and centralized protection by: Monitoring service-level objectives (SLOs) Identifying violations of recovery-point objectives (RPOs)

1

Getting Started 9

Table 5. Benefits (continued)

Supports deploying an external VM Direct appliance that moves data with a VM Direct Engine that is optimized for performing high-capacity backup streams

Comes with a basic embedded VM Direct Engine that has the following functions and capabilities: It is automatically used as a fallback proxy for performing backup and restore operations when an external VM Direct

Engine fails, is disabled, or is unavailable It has a limited capacity for performing backup streams It can work with virtual-machine crash-consistent protection policies that use the Transparent Snapshot Data Mover

(TSDM) protection mechanism It enables the Search Service used by PowerProtect Search

Supports PowerProtect Search, which enables backup administrators to quickly search for and restore VM and NAS file copies

Supports the vRealize Automation DP extension, which enables the automatic provisioning of virtual machines and on-demand backups and restores

Integrates with Cloud Disaster Recovery (Cloud DR), including workflows for Cloud DR deployment, protection, and recovery operations in the AWS and Azure clouds

Integrates with PowerProtect Cloud Snapshot Manager to view PowerProtect Cloud Snapshot Manager jobs, alerts, and reports from a consolidated PowerProtect Data Manager dashboard

Integrates with PowerProtect Cyber Recovery to protect the integrity of a PowerProtect Data Manager environment from cyber threats

Provides a RESTful API interface that allows PowerProtect Data Manager to be monitored, configured, and orchestrated: Existing automation frameworks can be integrated New scripts can be quickly written Easy-to-follow tutorials are provided

Supported Internet Protocol versions PowerProtect Data Manager only supports the use of IPv4 addresses.

Using an IPv6 address can result in errors or other unexpected behavior. When configuring devices to connect over the network with PowerProtect Data Manager, use only IPv4 addresses.

Unsupported file-system modifications Files and directories on PowerProtect Data Manager and PowerProtect DD systems should only be modified according to documentation and guidance.

Performing any of the following file-system operations that have not been documented in a product guide or communicated by Customer Support is unsupported:

Adding, removing, editing, or otherwise modifying a file or directory Manually mounting a DD file system with anything other than read-only permissions Altering a file-system procedure Replacing a command in the step of a file-system procedure with a different command

References Some procedures in this document reference other publications for further details.

For a list of PowerProtect Data Manager publications, see "Related documentation" in the preface.

For information about DD Virtual Edition, see the following publications at Customer Support:

Table 6. Related PowerProtect DD Virtual Edition documentation

PowerProtect DD Virtual Edition in VMware Cloud Installation and Administration Guide

10 Getting Started

Table 6. Related PowerProtect DD Virtual Edition documentation (continued)

PowerProtect DD Virtual Edition in Google Cloud Platform Installation and Administration Guide

PowerProtect DD Virtual Edition on Premise Installation and Administration Guide

PowerProtect DD Virtual Edition in Azure Installation and Administration Guide

PowerProtect DD Virtual Edition in Amazon Web Services Installation and Administration Guide

Terminology Familiarize yourself with the terminology for the PowerProtect Data Manager user interface and documentation.

The following table provides more information about names and terms that you should know to use PowerProtect Data Manager:

Table 7. Term list

Term Description

Application agent Application agents are installed on application or database host servers to manage protection using PowerProtect Data Manager. These agents are commonly known as DD Boost Enterprise Agents (DDBEAs) for databases and applications.

Application-aware A virtual machine protection policy that includes additional application-aware data protection for Microsoft SQL Servers. An application-aware virtual machine protection policy provides the ability to quiesce the application during virtual machine image backup to perform a full backup of Microsoft SQL Server databases. You can also schedule Microsoft SQL Server log backups for the virtual machines in the policy.

Asset Assets are objects in PowerProtect Data Manager for which you want to manage protection, including virtual machines, databases, and file systems.

Asset source Assets that PowerProtect Data Manager protects reside within asset sources, which include vCenter servers, application or database hosts, and file servers.

Cloud Tier storage Cloud Tier storage can be added to a protection storage system to expand the deduplication storage capacity onto less expensive object storage in public or private object storage clouds, including secure Elastic Cloud Storage appliances.

Copy A PowerProtect Data Manager copy is a point-in-time backup copy of an asset.

Copy Map The PowerProtect Data Manager Copy Map is a visual representation of backup copy locations on your protection storage and is available for all protected assets that have copies.

Discovery Discovery is an internal process that scans asset sources to find new assets to protect and scans infrastructure components to monitor their health and status.

Instant Access PowerProtect Data Manager virtual machine backup copies can be accessed, mounted, and booted directly from the protection storage targets as running virtual machines. This operation is called Instant Access. Copies can also be moved to a production VMware datastore using vMotion. PowerProtect Data Manager Virtual machine application-aware backup copies can be mounted directly from protection storage as running Microsoft SQL Server databases, which includes the ability to roll forward log backups. These Microsoft SQL Server database disks can also be moved to a production VMware datastore using vMotion.

PowerProtect Data Manager agent

An agent that is included in PowerProtect Data Manager and installed on each application agent host server so that you can monitor and manage the application agent through PowerProtect Data Manager.

Protection policy Protection policies configure and manage the entire life cycle of backup data, which includes backup types, assets, backup start and stop times, backup devices, and backup retention.

Service-level agreement (SLA) An optional policy that you can layer on top of a protection policy. An SLA performs additional checks on protection activities to ensure that protection goals meet the standards of an organization. SLAs are made up of one or more service-level objectives.

Getting Started 11

Table 7. Term list (continued)

Term Description

Service-level objective (SLO) A definable rule that sets the criteria for recovery-point objectives (RPOs), encryption, and the location of backups according to company requirements.

Access the PowerProtect Data Manager UI PowerProtect Data Manager provides a web-based UI that you can use to manage and monitor system features and settings from any location over a network.

Steps

1. From a host that has network access to the virtual appliance, use Google Chrome to connect to the appliance:

https://<appliance_hostname> NOTE: You can specify the hostname or the IP address of the appliance.

2. Log in with your username and password.

Usernames follow the format user[@domain], where domain is an optional identifier that associates the user with a particular identity provider.

For example: jsmith or administrator@test-lab.

If you do not supply a domain, the authentication service checks the default identity provider. If you supply a domain, the authentication service consults the external identity provider for that domain and determines

whether to allow the login.

Domains are case-sensitive. Supply the domain with the same capitalization that was used when configuring the identity provider. Otherwise, you may receive error messages such as 500: Resources cannot be retrieved.

NOTE:

If the user interface is left unattended for more than 30 minutes and times out, the login page might display with the

error 503: Unknown Error. If this occurs, dismiss the error and log in again with your username and password.

If you log in with an expired password, reset the password immediately. Clicking Cancel, closing the browser, or

navigating away from the page before changing your password disables your credentials for subsequent logins. To

re-enable your credentials, the PowerProtect Data Manager Security Configuration Guide contains instructions to reset

your password using the REST API.

When the identity provider validates the credentials, the authentication service issues a user token. The PowerProtect Data Manager UI uses the token information to authorize activities.

Unless you have changed the system configuration, the default identity provider is the local identity provider.

The PowerProtect Data Manager Security Configuration Guide provides more information about the available user roles and their associated permissions. The associated roles for an account determine what parts of the UI a user can see and use, and what operations a user can perform.

If this is your first time accessing the PowerProtect Data Manager UI, an unsigned certificate warning might appear in the web browser.

The security certificate that encrypts communication between the PowerProtect Data Manager UI and the web browser is self-signed. A self-signed certificate is signed by the web server that hosts the secure web page. There is nothing wrong with this certificate. This certificate is sufficient to establish an encrypted channel between the web browser and the server. However, it is not signed by a trusted authority.

The Get Started window appears with configuration options that are required upon first deployment. To skip this window and go right to the Dashboard, click Launch.

From the Dashboard window:

The left pane provides links to the available menu items. Expand a menu item for more options. The icons in the PowerProtect Data Manager banner provide additional options.

12 Getting Started

Get Started window

The Get Started window provides configuration options that are required when the PowerProtect Data Manager system is first deployed. This window continues to display by default each time you log in until you click Launch.

You can access the Get Started window at any time, or view any getting started options that have yet to be configured, by

clicking , and then selecting Getting Started.

The Get Started window enables you to configure or edit the following menu items:

Table 8. PowerProtect Data Manager Get Started menu items

Options Description

License Launches the License window, which prompts you to add a license file to PowerProtect Data Manager. Once a license is uploaded, you can view license details, such as capacity usage and software ID.

Support Launches the Support window, which enables you to configure SupportAssist, AutoSupport, and set up the email server for application notifications and messages.

Assets Launches the Asset Sources window, where you can enable any of the asset source types that PowerProtect Data Manager supports. Upon enabling an asset source, you can add and register the source for the protection of assets.

Storage Launches the Add Storage window, where you can add a PowerProtect DD System or PowerProtect DD Management Center as protection storage for primary backup and replicated copies.

UI tools and options

Learn about the tools, windows, and banner options available in the PowerProtect Data Manager UI.

Dashboard

The Dashboard is visible when you log in to the PowerProtect Data Manager UI, and can be accessed from the left navigation pane. This window provides a high-level view of the overall state of the PowerProtect Data Manager system through six widgets. The following table describes each widget.

Figure 1. Dashboard widgets

Getting Started 13

Table 9. PowerProtect Data Manager Dashboard

Dashboard widget Description

Jobs | Protection, Jobs | Restore and Jobs | System

This widget provides a color-coded status of backup, restore, and system jobs that are in progress or have been performed in PowerProtect Data Manager over a specified period. Jobs | Protection displays by default, showing jobs performed over the last 24 hours.

Click the three vertical dots at the top of the widget to:

Select Protection, Restore, or System to switch the jobs view in the widget. Choose the time period for the jobs that you want to view (last 24 hours, last 3 days,

last 7 days, or all). Once a time period is selected, the widget updates to display only jobs performed within that time period.

Click a color in the chart to view details about jobs with a specific status, or click the links next to each status. This will open the Jobs > Protection Jobs or Jobs > System Jobs window, which is filtered to display the jobs that match the selected status and time period. From this window, you can manage jobs, view more details, and search jobs.

Assets | Count and Assets | Size

Details in this widget include the number of protected assets, unprotected assets, and excluded assets for each asset source that has been added and enabled in PowerProtect Data Manager. You can also view the total number of assets for each asset source, and the total size of these assets. Assets | Count displays by default, and the asset types are sorted based on the percentage of the total asset count that are unprotected, or the total size of the unprotected assets for the asset source, depending on the view.

Click the three vertical dots at the top of the widget to:

Select Count or Size to switch the assets view in the widget. Select one or more asset sources from the list. You can display asset statistics for a single

asset source, multiple asset sources, or all asset sources.

Hover over a color to view the exact number of protected, unprotected, and excluded assets and the total size of these assets. Click a color to open the Infrastructure > Assets window, which is filtered to display the assets that match the selected status.

Health This widget provides a score for the overall PowerProtect Data Manager system health (Good, Fair, or Poor). Health details and status are provided for the following categories:

Components: Identifies the state of hardware and software services, such as Running or Failed.

Configuration: Identifies whether any aspects of the PowerProtect Data Manager configuration are incomplete, such as System Support configuration.

Capacity: Identifies the provisioned and currently allocated size of the associated storage system.

Performance: Identifies key performance indicators, such as memory use. Data Protection: Identifies key protection indicators, such as service-level agreements not

being met and disaster-recovery backup copies not being present.

Click View All to view more details about the system health issues for all categories.

Compliance This widget provides compliance verification statistics for protection policies that are linked to a Service Level Agreement (SLA). The widget also identifies the number of assets within these policies that are compliant and non-compliant.

Click the three vertical dots at the top of the widget to select one or more asset sources from the list. You can display compliance statistics for a single asset source, multiple asset sources, or all asset sources. By default, the total count and number of protection policies for compliant and non-compliant assets displays for all asset sources.

Click View All to open the Protection > SLA Compliance window, where you can view more details about the specific policies and assets that are non-compliant.

Capacity | Active Tier and Capacity | Cloud Tier

This widget displays the capacity status of the DD protection storage systems that are associated with this instance of PowerProtect Data Manager for the active tier and cloud tier. Based on the available capacity on each DD system, a color coded bar graph displays the number of systems that are Good (>20% available), Fair (<20% available), or Poor (<10%).

14 Getting Started

Table 9. PowerProtect Data Manager Dashboard (continued)

Dashboard widget Description

Click the three vertical dots at the top of the widget to:

Select Active Tier or Cloud Tier to switch between a view of protection storage systems for the active tier and cloud tier in the widget. By default, the widget displays Capacity | Active Tier.

Select a DD system from the list. The widget updates to display capacity statistics for the selected DD system. You can only display capacity statistics for one system at a time.

Click View All to open the Infrastructure > Storage window, where you can view more details about specific protection storage systems.

Space Optimization This widget provides information about how efficient the active tier storage capacity is on individual DD systems associated with this instance of PowerProtect Data Manager. Efficiency is determined based on the size of pre-compression data compared with the size of post- compression data on the system.

Click the three vertical dots at the top of the widget to select a DD system from the list. The widget updates to display space optimization statistics for the selected DD system.

PowerProtect Data Manager UI tools and windows

The following table describes the tools and windows in the PowerProtect Data Manager UI left navigation pane.

Table 10. PowerProtect Data Manager tools

Menu item Description

Dashboard

Click Dashboard to view the overall state of the PowerProtect Data Manager system.

Health

Click Health to view a score for the overall PowerProtect Data Manager system health (Good, Fair, or Poor).

Infrastructure

Click Infrastructure to: View and manage all assets:

VMware virtual machines File systems VMAX storage Groups Kubernetes clusters Microsoft Exchange Server databases Network Attached Storage (NAS) Microsoft SQL Server databases Oracle databases SAP HANA databases

Add vCenter and application and File System host asset sources. View and manage Integrated Storage. Add a VM Direct appliance with the VM Direct protection engine for virtual machine data

protection. Manage the vSphere Installation Bundle (VIB) for virtual machine crash-consistent data

protection performed with the Transparent Snapshot Data Mover (TSDM) protection mechanism.

Manage registration of Oracle RMAN agent, Microsoft application agent, SAP HANA agent, and File System agent.

View and manage Cloud Disaster Recovery. Create and manage a Search Cluster.

Getting Started 15

Table 10. PowerProtect Data Manager tools (continued)

Menu item Description

Add PowerProtect Cloud Snapshot Manager tenants as asset sources for jobs, alerts, and reports.

Protection

Click Protection to: Add protection policies to back up assets. Manage service-level agreements (SLAs). Add, edit, and delete protection rules for asset inclusion in policies. Add, edit, and delete file exclusion templates for File System protection policies.

Restore

Click Restore to: View asset copy location details and initiate a Restore operation. Manage Instant Access Sessions. Use the File Search feature to find and restore virtual machine file copies.

Alerts

Click Alerts to: View and acknowledge alerts and events. Filter alerts by critical, warning, and informational status, and specify the time range. View and examine Audit logs. Export audit logs to CSV files. Set audit log boundaries. Configure alert notifications.

There is also a banner UI option, represented by the icon, which provides links that enable you to view all unacknowledged alerts.

Administration

Click Administration to: Configure users and roles. Set password credentials and manage key chains. View and replace certificates. Add external identity providers. View and manage resource groups.

Reports

Click Reports to access the PowerProtect Data Manager Report Browser and Reporting Engine.

Jobs

Click Jobs to manage jobs, view by protection or system, filter, and view details.

Banner UI options

The following table describes the icons in the PowerProtect Data Manager UI banner.

Table 11. Banner UI options

Option Description

Click to enter search criteria to find assets, jobs, logs, and alerts.

The number next to this icon indicates the critical unacknowledged alerts over the last 24 hours.

Click to expand for more information about unacknowledged alerts, including:

16 Getting Started

Table 11. Banner UI options (continued)

Option Description

The total number of alerts (all statuses critical, warning, or informational) that have yet to be acknowledged, or just the unacknowledged alerts from the last 24 hours (marked with the New tag).

The number of critical alerts that have yet to be acknowledged, or just the unacknowledged critical alerts from the last 24 hours (marked with the New tag).

Within this menu, click any of these links to open the Alerts window, where you can view specific details about these unacknowledged alerts.

Click to restore assets from replicated copies through quick recovery. This icon only appears when this system receives replicated metadata from a source system.

Click to configure and manage PowerProtect Data Manager system network, time zone, and NTP settings, DR backups, security, licenses, updates, authentication, agent downloads, and support, and to access the Get Started window.

Click to log out, and log in as a different user, or change the current user password.

Click to see PowerProtect Data Manager version information.

Click to obtain more information about PowerProtect Data Manager, access Customer Support, send feedback, or view the REST API documentation.

Click to launch CloudIQ, APEX Backup Services, and Cloud Snapshot Manager.

Export data PowerProtect Data Manager enables you to export and save table data in CSV format.

Prerequisites

In the PowerProtect Data Manager UI, browse to a window that includes the Export All functionality.

About this task

The following table lists the windows that support the Export All functionality.

Table 12. Supported windows

Menu item Window

Health Health

Infrastructure Assets

Application Agents

Protection Protection Policies

You can also export records for assets that are assigned to a protection policy. Select a protection policy to view its details, and then click the asset count link next to Assets.

SLA Compliance

Protection Rules

You can also export records for assets that are applied to a protection rule. Click the link in the Assigned Assets Count column for the protection rule.

Restore Assets

Alerts System

Getting Started 17

Table 12. Supported windows (continued)

Menu item Window

Administration Access Control > Users/Groups

Access Control > Resource Groups

You can also export records for assets that are assigned to a resource group.

Click next to the resource group, and then click View Assets in the right pane.

Audit Logs

Jobs Protection Jobs

System Jobs

Steps

1. (Optional) Filter and sort the information that appears in the table.

2. In the window, click Export All to export the data to a CSV file.

If you apply any filters in the table, the exported records include only the records that satisfy the filter conditions. NOTE: In this release, filters applied to the table in the Protection Policy window are not applied to the exported CSV

file. Exported protection records include all data that is shown in the table. Download the Excel file to sort and filter the

protection results.

Exported fields

The following tables list the fields that are exported using the Export All functionality. The fields are exported in CSV format.

Table 13. Exported fields

Resource Exported fields

Jobs Job ID, Status, Description, Job Type, Sub Type, Asset Type, Assets, Start Time, End Time, Duration, Next Scheduled, Policy Name, Data Transferred, Storage System, Asset Size, Data Compressed, Average Throughput, Total Compression Factor, Reduction Percentage

Application Agents Host Name, IP, Registration Status, OS, Agent Type, Current Version, Update Status, Port, Application Version, Created Date, Registered Date

Alerts Message ID, Details, Recommended Action, Severity, Date, Summary, Category, Status

Protection Policies Name, Category, Asset Type, Asset Count, Protected Asset Size, Last Run Status, Violations, State

Resource Groups Name, Description, Created At, Number of Resources SLA Compliance Name, Compliance Type, Policies At Risk, Objectives out of

Compliance, Impacted Assets System Health Issues Deduction, Issue, Category, Component, Remediation, Date Users User/Group Name, Type, First Name, Last Name, Email Address,

Roles and Resources, Added Date

The following fields are common to each asset type:

ID, Status, Asset Type, Sub Type, Protection Policy ID, Protection Policy, Protection, Size, Protection Capacity Size, Protection Capacity Time, Last Copy, Network, Protection Rule Name, Resource Group Name

18 Getting Started

The following table lists the fields that are unique to each asset type.

Table 14. Exported fields for asset types

Resource (asset type) Exported fields

VMware Virtual Machines Name, Tags, Operating System, Apps, Disk Excluded, vCenter, Protection Mechanism, ESX Host Name, VM BIOS Uuid, Resource Pool, VM Folder, Data Center

Kubernetes Namespace, Labels, Age, Cluster, PVCs Excluded, Storage Class Name, Volume Mode, PVC Namespace

Microsoft SQL Server Name, Protection Engine Flow, Host Type, Host/Cluster/Group Name, Application Server ID, Application Server Name

Oracle Name, Host/Cluster/Group Name, Host Type, OS Type, Application Server Name, Application Server ID, SID

Microsoft Exchange Server Name, Host/Cluster/Group Name, Host Type, Application Server Name, Application Server ID

SAP HANA Name, Host/Cluster/Group Name, Host Type, Application Server Name, Application Server ID

File System Name, OS Type, File System Type, Host Name, Host Operating System

NAS Name, Asset Source, Appliance Name, Array Type, Server Name/IP, Protocol, File Stubs, File System Path, File System Name

VMAX storage group Name, VMAX Serial No, Host

Customer feedback Use the customer feedback feature in the PowerProtect Data Manager UI to report your satisfaction with PowerProtect Data Manager, provide feedback, and send requests for enhancements. Customer feedback is used to improve the customer experience.

Provide general feedback

Use the following procedure to report your satisfaction with PowerProtect Data Manager and provide feedback.

Steps

1. Log in to the PowerProtect Data Manager UI.

2. From the banner, click , and then select Send Feedback.

The customer feedback survey opens in a new window, as shown in the following figure:

Getting Started 19

Figure 2. Customer feedback survey

NOTE: In environments with limited external connectivity, such as dark sites, an error appears in the web browser and

the customer feedback survey is not displayed.

3. (Optional) Complete the fields in the customer feedback survey, and when finished, click Send My Comment.

You have the option to rate your satisfaction with PowerProtect Data Manager and make a recommendation for how to improve the customer experience. You also have the option to provide an email address so that can follow up with you regarding your feedback.

NOTE: Customer contact information is not be used for marketing purposes.

Security configuration A separate guide provides some server configuration tasks which are intended specifically for security administrators, whose role may be separate from the host system administrator.

The PowerProtect Data Manager Security Configuration Guide provides detailed instructions for all security-related tasks, including but not limited to:

Port requirements Configuring identity providers Managing local and external user accounts Changing and resetting passwords Assigning users and groups to roles and associated privileges Managing credentials for local and remote components Creating resource groups to define scopes of authority Managing security certificates, where applicable

20 Getting Started

Role-based security

PowerProtect Data Manager provides predefined user roles that control access to areas of the user interface and to protected operations. Some of the functionality in this guide is reserved for particular roles and may not be accessible from every user account.

By using the predefined roles, you can limit access to PowerProtect Data Manager and to backup data by applying the principle of least privilege.

The PowerProtect Data Manager Security Configuration Guide provides more information about user roles, including the associated privileges and the tasks that each role can perform.

Getting Started 21

Preparing for a Deployment

Topics:

Licensing PowerProtect Data Manager PowerProtect Data Manager interoperability introduction Microsoft application agent, Oracle RMAN agent, and PowerProtect Data Manager interoperability File System agent interoperability and supported operating systems Memory optimization Scalability limits for vCenter server, VM Direct Engine, and DD systems PowerProtect Data Manager resource requirements in a VMware environment Requirements for an external VM Direct Engine Requirements for the PowerProtect Search Engine Network requirements

Licensing PowerProtect Data Manager PowerProtect Data Manager can be licensed in several different ways. This section describes the different types of available licenses, how to obtain a license, and how to install it.

For more information about licensing, see the PowerProtect Data Manager Licensing Guide.

License types

The available license types are described in the following table.

Table 15. License types

License type Description

Trial Applied by default on the deployment of PowerProtect Data Manager, this license enables full use of the product without applying a license key for up to 90 days. When the trial period ends, PowerProtect Data Manager continues to operate with full functionality so that you can apply a permanent license.

Front-end protected capacity by terabyte (FETB)

The primary model of eLicensing, which is based on the capacity that you want to protect. For example, you can purchase a 100-TB license, which enables you to protect up to 100 TB of data.

Perpetual and term-based (subscription) licensing

Licensed software is offered in perpetual and term-based licenses. Your quote identifies whether your license rights are perpetual or term-based. A perpetual license enables you to use the software for as long as you are in compliance with the terms of the license agreement. A term-based license enables you to use the software for a specified time, as long as you are in compliance with the terms of the license agreement. At the end of the license term, you must either stop using the software, extend the license term, or purchase new licenses through an agreement with .

Obtaining a license

You use an XML file to license PowerProtect Data Manager. To obtain an XML license file from the license management website, you must have a License Authorization Code (LAC). You will be provided an LAC code in an LAC letter as part of your software order delivery. This LAC letter also includes instructions for entitlement activations and software downloads.

2

22 Preparing for a Deployment

NOTE: If you have not received your LAC letter, or you do not have access to it, contact your Customer Support

representative.

Installing a license

To install a license, refer to Configure the PowerProtect Data Manager virtual appliance.

PowerProtect Data Manager interoperability introduction PowerProtect Data Manager integrates multiple data protection products within the Data Protection portfolio to enable data protection as a service. PowerProtect Data Manager enables new data paths with provisioning, automation, and scheduling that enable a data protection team to embed protection engines into the infrastructure for high-performance backup and recovery.

There are several integrated services that comprise the PowerProtect Data Manager solution:

Protection Storage Services: PowerProtect DDHardware DD Operating System (DDOS) PowerProtect DD Management Center (DDMC) DD Virtual Edition (DDVE)

The following data paths: Application Direct VM Direct

This section includes several tables that list the supported software and hardware configurations for an PowerProtect Data Manager deployment for each direct data path.

Microsoft application agent, Oracle RMAN agent, and PowerProtect Data Manager interoperability The Microsoft application agent and Oracle RMAN agent enable an application administrator to protect and recover data on a SQL Server host and Oracle server host. PowerProtect Data Manager integrates with the Microsoft application agent and Oracle RMAN agent to check and monitor the backup compliance against protection policies. PowerProtect Data Manager also supports central scheduling for backups.

You can install the Microsoft application agent or Oracle RMAN agent on the host that you plan to protect by using the installation instructions that are provided in the PowerProtect Data Manager Microsoft SQL Server User Guide and PowerProtect Data Manager Oracle RMAN User Guide.

NOTE: The most up-to-date software compatibility information for the PowerProtect Data Manager software, supported

PowerProtect DD System, and application agents is provided by the E-Lab Navigator.

Table 16. Microsoft application agent, Oracle RMAN agent, and PowerProtect DD System support matrix

Product Supported versions

PowerProtect DD System DD9900, DD4500, DD7200, DD9500, DD6300, DD6800, DD9300, DD9800, DD3300 If you are adding a PowerProtect DD System to PowerProtect Data Manager directly through PowerProtect Data ManagerInfrastructure > Storage: DD9900, DD4500, DD7200, DD9500, DD6300, DD6800, DD9300, DD9800, DD3300 DDOS 6.1.2 or higher If you are adding a PowerProtect DD System to PowerProtect Data Manager through PowerProtect DD Management Center (DDMC): DDMC 6.1.0.x, 6.1.x with DDOS 6.1.x and higher The PowerProtect DD Management Center Release Notes provide more information.

Microsoft application agent Refer to the E-Lab Navigator.

Preparing for a Deployment 23

Table 16. Microsoft application agent, Oracle RMAN agent, and PowerProtect DD System support matrix (continued)

Product Supported versions

Oracle RMAN agent Refer to the E-Lab Navigator.

File System agent interoperability and supported operating systems The File System agent allows an application administrator to protect and recover data on the File System host. PowerProtect Data Manager integrates with the File System agent to check and monitor backup compliance against protection policies. PowerProtect Data Manager also allows central scheduling for backups.

PowerProtect Data Manager supports the following application agent and File System agent co-existence:

Coexistence of the Oracle RMAN agent or SAP HANA agent with the File System agent on Linux. Coexistence of the Oracle RMAN agent with the File System agent on AIX. Coexistence of the Microsoft SQL Server or Microsoft Exchange Server application agent with the File System agent on

Windows.

You can install the File System agent on the host that you plan to protect by using the installation instructions provided in the PowerProtect Data Manager File System User Guide.

NOTE: The most up-to-date software compatibility information for the PowerProtect Data Manager software and the File

System agent is provided by the E-Lab Navigator.

Supported operating system versions

Review the following PowerProtect Data Manager file system supported operating system versions for Windows, Linux, and AIX.

Windows

PowerProtect Data Manager supports Windows for file systems on NTFS and ReFS for the following versions:

Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019

Linux

PowerProtect Data Manager supports ext3, ext4 and XFS file systems for the following Linux platforms/versions:

RedHat Enterprise Linux (RHEL) versions 6.x, 7.x, 8.x. SuSe Linux Enterprise Server (SLES) versions 11.x, 12.x, 15 SP1 and 15 SP2. SLES version 11 SP0 is not supported.

NOTE: PowerProtect Data Manager does not support ext4 file systems on SLES 11 SP1-SP4 platforms.

CentOS versions 6.x and 7.x up to 7.7.

AIX

PowerProtect Data Manager supports the AIX operating system for file systems.

24 Preparing for a Deployment

Memory optimization You can use adjust the amount of memory that is assigned to the PowerProtect Data Manager virtual machine in order to optimize server performance.

The following table indicates the default amount of memory assigned to the PowerProtect Data Manager virtual machine in a standard environment. The default values are the minimum recommended values.

Table 17. PowerProtect Data Manager memory requirements

Deployment type Memory Swap space Cores

Default 24 GB 8 GB 10

With the Cloud Disaster Recovery (Cloud DR) Add-On

28 GB 8 GB 10

The recommended number of cores is 10. Also consider the following:

Depending on the environment, increasing the amount of memory can increase performance. If low-memory alerts are seen, increase the amount of memory. Do not increase the amount of memory beyond 32 GB of RAM. PowerProtect Data Manager is not designed to support more

than 32 GB of RAM. If you are deploying PowerProtect Data Manager to a virtual machine in a cloud Marketplace environment, it is automatically

assigned 32 GB of RAM. This amount of memory should not be changed after it is deployed. Most of the services from PowerProtect Data Manager are memory intensive. When the available physical memory drops to

a certain threshold value, these services start leveraging swap memory. If swap memory resides on a slow disk, then there can be significant impact on the Java Garbage Collection activity from each of these services when memory that has not been recently used needs to be swapped into physical memory.

Therefore, it is highly recommended to configure swap memory on a solid-state drive (SSD). During deployment of the PowerProtect Data Manager server, use the SSD data store to avoid the high latency disk impact from swap and metadata operations.

NOTE: For help with optimizing memory, contact your Customer Support representative.

Memory and updating from an earlier version of PowerProtect Data Manager

Features in the current version of PowerProtect Data Manager might require more memory than required in previous versions. When updating from an earlier version of PowerProtect Data Manager, ensure that you increase the amount of assigned memory as necessary.

Adjust the virtual machine memory

Adjust the amount of memory assigned to the PowerProtect Data Manager virtual machine to support changes in the protection environment.

Steps

1. Log in to the vSphere Web Client.

2. Right-click the appliance and select Edit Settings. The Edit Settings window appears with the Virtual Hardware button selected.

3. In the Memory field, specify the new memory value.

Ensure that the value you specify does not exceed 32 GB of memory and that it is a multiple of 4 GB.

4. Click OK.

Preparing for a Deployment 25

Scalability limits for vCenter server, VM Direct Engine, and DD systems The following limits have been tested successfully with PowerProtect Data Manager for vCenter server, VM Direct Engine, and DD systems.

NOTE: These numbers are not maximum or hard limits, but should be considered when scaling your environment.

Table 18. Scalability limits

Component Tested limits

Number of vCenter servers supported with a single PowerProtect Data Manager server

12 NOTE: The vCenter server limit is subject to the VM Direct Engine overall limit of 40 and the per vCenter server limit of 25. For example, using the maximum tested number of vCenter servers of 12, you could add an average of 3 VM Direct Engines per vCenter server.

Number of external VM Direct Engines supported with a single PowerProtect Data Manager server

40 NOTE: This number was tested across 10 vCenter servers. For example, 4 VM Direct Engines per vCenter server.

Number of DD systems supported per PowerProtect Data Manager server

10

Network latency between the PowerProtect Data Manager server and VM Direct Engines

200 ms

Network latency between the PowerProtect Data Manager server and the DD systems

200 ms

Number of virtual machines per PowerProtect Data Manager server

10,000

PowerProtect Data Manager resource requirements in a VMware environment Review the following minimum system requirements for PowerProtect Data Manager in a VMware environment (ESXi server).

CPU10 CPU cores Memory24 GB RAM for PowerProtect Data Manager Seven disks with the following capacities:

Disk 1100 GB Disk 2500 GB Disks 3 and 410 GB each Disks 5 through 75 GB each

1 GB network interface card (NIC)

NOTE: If you plan to use Cloud DR, your system must also meet the following requirements:

CPU14 CPU cores

Memory28 GB

26 Preparing for a Deployment

Requirements for an external VM Direct Engine When adding an external VM Direct Engine, note the following system requirements:

CPU: 4 * 2 GHz (4 virtual sockets, 1 core for each socket) Memory: 8 GB RAM Disks: 2 disks (59 GB and 98 GB) Internet Protocol: Only IPv4 SCSI controller: maximum of 4 NIC: One vmxnet3 NIC with one port

Requirements for the PowerProtect Search Engine When deploying a search engine node, note the following system requirements:

NOTE: Each search engine node must meet the system requirements.

CPU: 4 * 2 GHz (4 virtual sockets, 1 core for each socket) Memory: 8 GB RAM Disks: 3 disks (50 GB each) and 1 disk (1 TB) Internet Protocol: Only IPv4 NIC: One vmxnet3 NIC with one port

Network requirements Learn the network requirements for deploying PowerProtect Data Manager.

When configuring PowerProtect Data Manager, do not use an IP address in the 172.24.0.192 /26 subnet. IP addresses from 172.24.0.192 through 172.24.0.255 are reserved for the private Docker network.

Troubleshooting network setup issues provides more information.

Preparing for a Deployment 27

Deployment

Topics:

PowerProtect Data Manager deployment methods Deploy the OVA file to a vCenter server

PowerProtect Data Manager deployment methods You can deploy PowerProtect Data Manager using an Open Virtualization Appliance (OVA) or a machine image. Each method has its own considerations for the deployment itself and the functionality of PowerProtect Data Manager after its deployment.

OVA deployments

Considerations of OVA deployments include the following.

PowerProtect Data Manager can be deployed to on-premises virtual hosts or to cloud-based environments that include VMware Cloud on Dell, VMware Cloud (VMC) on Amazon Web Services (AWS), Azure VMware Solution (AVS) on Microsoft Azure, and Google Cloud VMware Engine (GCVE) on Google Cloud Platform (GCP).

OVAs are deployed using the vSphere Client. Deployed PowerProtect Data Manager instances do not detect their environment. The environment must be manually

selected during the deployment process in order for the instances to be appropriately configured. PowerProtect Data Manager and DDVE cannot be deployed at the same time from the same interface. Using the Transparent Snapshot Data Mover (TSDM) to back up or restore virtual machines in a VMC, AVS, or GCVE

environment is unsupported.

Machine-image deployments

Considerations of machine-image deployments include the following.

PowerProtect Data Manager can only be deployed to virtual hosts on Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP). These virtual hosts cannot be in an environment that includes VMware Cloud (VMC), Azure VMware Solution (AVS), or Google Cloud VMware Engine (GCVE), although any deployed PowerProtect Data Manager can still protect virtual-machine assets in those environments.

Machine images are deployed using the web-based user interface in the marketplace of a cloud provider. Deployed PowerProtect Data Manager instances detect their environment, and are automatically appropriately configured. PowerProtect Data Manager and DDVE can be deployed at the same time and from the same interface. Not every feature supported by an OVA deployment is supported by a machine-image deployment:

Table 19. Unsupported features

Unsupported feature Deployment environment

Cloud Disaster Recovery (Cloud DR) AWS, Azure, and GCP

Search Clusters AWS, Azure, and GCP

Backing up and restoring virtual machines with the Transparent Snapshot Data Mover (TSDM)

AWS, Azure, and GCP

Microsoft Exchange Server Azure and GCP

Block-based backups (BBB) with the File System agent (FSA) GCP

3

28 Deployment

This guide describes how to deploy PowerProtect Data Manager using an OVA. For information about how to deploy PowerProtect Data Manager using a machine image, see the following guides:

PowerProtect Data Manager Amazon Web Services Deployment Guide PowerProtect Data Manager Azure Deployment Guide PowerProtect Data Manager Google Cloud Platform Deployment Guide

Deploy the OVA file to a vCenter server Use this method to deploy the PowerProtect Data Manager OVA to a stand-alone or cluster host while you are logged in to a vCenter server. This method supports configuring the network settings during the deployment.

About this task

Make note of the following:

Depending on the version of vCenter in your environment, the order of required steps might differ from the order in this procedure.

It is recommended to deploy the OVA file to a vCenter server rather than to an ESXi server.

For more information, see the VMware documentation.

Steps

1. Download the OVA package from the Support website:

Support Downloads and Drivers

2. Log in to the vSphere Client. The vSphere Client window opens.

3. From the Actions menu, select Deploy OVF Template. The Deploy OVF Template wizard opens.

4. On the Select an OVF template page:

a. Browse to the OVA package:

Select URL and type the URL path to the OVA package.

NOTE: This option is not available when deploying the OVA on an ESXi host.

Select Local File, and then click Choose File and browse to the OVA package location.

b. Click Next.

5. On the Select a name and folder page:

a. Specify a name for the virtual appliance. b. Optionally, specify the inventory location. For example, a data center or VM folder. c. Click Next.

6. On the Select a compute resource page:

a. Select the destination compute resource. b. Click Next.

7. On the Review details page:

a. Verify the OVF template details. b. Click Next.

8. On the Configuration page, select the configuration that matches the PowerProtect Data Manager deployment environment. This configures PowerProtect Data Manager with the appropriate settings.

9. On the Select storage page:

a. Select the datastore in which to store the configuration and disk files. b. In the Select virtual disk format field, select Thick provision lazy zeroed. c. Click Next.

10. On the Select networks page:

a. Select a destination network for each source network.

By default, the top network is selected. Ensure that you select the correct network, which may not be the top one in the list.

b. Click Next.

Deployment 29

11. On the Customize template page:

a. Specify the Network IP address for the virtual appliance, which should correspond to the network you select in step 8. b. Specify the default gateway for the virtual appliance. c. Specify the network netmask for the virtual appliance. d. Specify the DNS server for the virtual appliance. You can configure up to three DNS servers.

NOTE: Select Yes for Use Custom DNS Server and specify a custom DNS server if PowerProtect Data Manager is

being deployed to an Azure cloud to support Azure VMware Solution (AVS).

e. Specify the fully qualified domain name for the virtual appliance. For example, hostname.domain f. Click Next.

NOTE: For an ESXi host, only the most recent version(s) of ESXi support configuring network details from this window.

If using an earlier ESXi version, you might be required to configure the network settings from the VM Console.

12. In the Ready to Complete window, verify the OVF template details, and click Finish.

30 Deployment

Configuration

Topics:

Configure the PowerProtect Data Manager virtual appliance Troubleshooting network setup issues Log bundle creation to troubleshoot configuration failures Configuring SupportAssist for PowerProtect Data Manager

Configure the PowerProtect Data Manager virtual appliance After you deploy and turn on the PowerProtect Data Manager appliance, you must configure the virtual appliance.

Prerequisites

Ensure that you turn on the PowerProtect Data Manager virtual appliance. (Optional) Download a local copy of the PowerProtect Data Manager virtual appliance license file.

About this task

Perform the following steps from a host that has access to the PowerProtect Data Manager virtual appliance.

Steps

1. From a host that has network access to the virtual appliance, use Google Chrome to connect to the appliance:

https://<appliance_hostname> NOTE: You can specify the hostname or the IP address of the appliance.

2. If an SSL certificate warning page appears with the message Your connection is not private, click Advanced, and then click Proceed to hostname_or_ip_address (unsafe).

3. In the Welcome pane:

a. Specify the deployment type. Select: New Install to set up PowerProtect Data Manager as a new deployment. Restore Backup to restore your settings from a previous backup. To delay jobs defined by your protection

policies until otherwise specified, select After restore, keep the product in recovery mode so that scheduled

4

Configuration 31

workflows are not triggered. When selected, after restore the system enters recovery maintenance mode. During recovery maintenance mode: All jobs defined by your protection policies that modify the backup storage (for example, backup creation, backup

deletion, and PowerProtect Data Manager Server DR jobs) are not triggered. All operations that write to the backup storage are disabled. A system alert is displayed in PowerProtect Data Manager.

To enable automatically scheduled operations and user operations that write to the backup storage, click Return to full Operational mode in the alert.

b. Click Next.

4. On the License pane, perform the following actions:

NOTE: If the license was already applied, review the license information and then click Next.

a. In the License Type field, select a type of license.

i. To use an evaluation license, select 90 days evaluation license.

A description of the license appears in the License File field. ii. To load a license, select License File > Choose File, and then browse to and select the license that you want to

load. iii. To copy the contents of the license file, select Plain Text and then copy the contents of the license file into the

Plain Text field. b. Click Next.

5. In the Authentication pane, perform the following actions:

The Use same initial password for all option is selected by default. This toggle sets one initial password for use with all PowerProtect Data Manager interfaces.

a. Optionally, clear the Use same initial password for all option.

If you leave the Use same initial password for all option selected, in the Enter a new password and Renter password to confirm fields, specify a password.

If you clear the Use same initial password for all option, in the Enter a new password and Renter password to confirm fields, specify individual passwords for the interfaces.

Ensure that the password meets the following requirements:

Contains a minimum of nine characters and a maximum of one hundred characters Contains at least one numeric character (0-9) Contains at least one uppercase character (A-Z) Contains at least one lowercase character (a-z) Contains at least one special character from the following list of acceptable characters:

!@#$%^&*()_-+=~{}[]<>?/`:;',.|\"

Spaces are allowed. Contains only letters from the English alphabet Does not contain other sensitive information that is associated with the user account, such as the first and last

names, username, or email address

NOTE: The admin password expires after 60 days by default. If you do not change it before it expires, you will be

unable to log in to PowerProtect Data Manager until you reset it. For more information, see the PowerProtect Data

Manager Security Configuration Guide.

b. Click Next.

6. In the System Settings pane, perform the following actions:

a. In the Current Timezone list box, select the time zone where the system is physically located. b. To add an NTP server, click Add. c. In the Server IP Address field, specify the NTP server IP address.

32 Configuration

d. Click Add. e. To change the list of NTP servers, click Edit or Delete. f. Click Next.

7. In the Email Setup - Optional pane, perform the following actions:

a. In the Mail Server field, specify the SMTP server IP address. b. In the Email From field, specify the administrator email address. c. In the Recipient for Test Email field, specify the recipient email address. d. In the Port field, specify the TCP port to connect to the SMTP server. e. In the Username field, specify the mail username. f. In the Password field, specify the mail password. g. To send a test email to the specified IP address, click Send Test Email. h. To acknowledge the test email was successfully sent, click OK. i. To send diagnostic and usage data to for proactive support and to help improve our products and services, switchAuto

Support to ON.

When enabling auto support, click View Terms to review the telemetry software terms. Scroll down to click Accept to finish enabling auto support, or Decline to disable auto support.

j. Click Next.

NOTE: Email Server Setup is required before performing a local user password reset and sending customized alert

notifications.

8. In the Summary pane, review the configuration choices, and then click Done.

Next steps

Getting Started provides information.

Troubleshooting network setup issues vCenter registration and proxy deployment fails if the PowerProtect Data Manager server is deployed in the same private network as the internal Docker network.

PowerProtect Data Manager uses an internal private Docker network. If the PowerProtect Data Manager server is deployed in the same private network as the internal Docker network, or if some data sources have already been deployed within the private network, PowerProtect Data Manager fails to protect the data sources.

To resolve this issue, deploy the PowerProtect Data Manager server and other data sources in a different network. If you cannot modify the deployed network, run a script tool within PowerProtect Data Manager to switch the private Docker network to a different network.

To switch the private Docker network to a different network:

1. Connect to the PowerProtect Data Manager console and change to the root user. 2. Modify the Docker network by running the following command:

/usr/local/brs/puppet/scripts/docker_network_switch.sh subnet gateway Where:

subnet describes the new network in the format 172.25.0.0/24 gateway is the gateway for the private network. For example: 172.25.0.1

Ensure that you specify a subnet and gateway that is not in use.

Log bundle creation to troubleshoot configuration failures If errors appear in the PowerProtect Data Manager console after appliance configuration, and the configuration did not complete successfully, you can create a log bundle to determine the cause of the error and troubleshoot the issue.

To create a log bundle:

Configuration 33

1. Log in to the VM console through the vCenter server with the username root and the password changeme.

2. Run the following:

logs tar -cvf vmd_logs.tar * cd /logs/vmdirect/ tar -cvf ecdm_messages messages*

Example command usage

The following screen shows an example command that is run on the VM console to create the log bundle.

Figure 3. Create log bundle in the VM console

Configuring SupportAssist for PowerProtect Data Manager SupportAssist is a support tool that communicates with PowerProtect Data Manager to monitor your environment, automatically detect current and potential issues, and collect and store diagnostic data. SupportAssist securely sends the data that is required for troubleshooting an issue to Customer Support for diagnostic purposes and customer support.

SupportAssist is at heart of the connectivity platform as a unified communication point between PowerProtect Data Manager and Customer Support.

SupportAssist provides the following features and benefits:

Proactive monitoring and issue prevention Facilitates update package downloads Automatic health checks Communicates telemetry data Real-time troubleshooting Customer support

Configure SupportAssist to receive automated support capabilities for your PowerProtect Data Manager system.

SupportAssist cannot be configured when PowerProtect Data Manager uses a trial license.

Migrating to SupportAssist

SupportAssist provides automated support capabilities for PowerProtect Data Manager systems. SupportAssist replaces Secure Remote Services (SRS) and SupportAssist Enterprise (SAE) in this release of PowerProtect Data Manager

If you have configured the SRS or SAE gateway previously, you must update the SRS or SAE gateway to Secure Connect Gateway (SCG) version 5.0 or higher.

34 Configuration

The PowerProtect Data Manager system automatically migrates SCG to SupportAssist when you update PowerProtect Data Manager.

If you do not have the SRS or SAE gateway configured, you can configure SupportAssist directly.

Use the following procedures to configure SupportAssist.

Generate SupportAssist access key and PIN

An access key and PIN are required to configure a secure connection between PowerProtect Data Manager and SupportAssist. You only need to apply the access key and PIN once.

About this task

Use the following procedure to generate your SupportAssist access key and PIN:

Steps

1. Go to the Customer Support website and log in to your account.

2. In the search box, type PowerProtect Data Manager and click Search.

3. Click Generate Access Key in the Quick links pane.

4. Enter the product ID (serial number) in the search box.

5. In the Create PIN field, enter a 4-digit PIN.

Record the PIN for later use.

6. Click Generate Access Key.

The access key is sent to the email address for your account.

NOTE: It might take up to 5 minutes to receive the access key in your email.

Connect to support services through SupportAssist

Establish a connection through SupportAssist to ensure access to Customer Support. SupportAssist enables PowerProtect Data Manager to connect to support services directly or through a gateway server.

Prerequisites

Apply a valid PowerProtect Data Manager license. If you are connecting through the gateway server, the SCG gateway version must be 5.0 or later. Apply a valid access key and PIN. HTTPS port 443 of esrs3-core.emc.com and esrs3-coredr.emc.com is not blocked by the network firewall.

Steps

1. From the PowerProtect Data Manager UI, click , select Support, and then click SupportAssist. The Support window opens to the SupportAssist page.

2. On the Connection tab, click Connect Now.

3. Select one of the following options: Connect Directly

Select this option to connect PowerProtect Data Manager directly, and then enter the SupportAssist Access Key and PIN.

NOTE: Remote Support functionality is currently not supported for PowerProtect Data Manager systems using a

direct connection

Connect via Gateway

Select this option to connect PowerProtect Data Manager through a gateway server, and then enter the gateway server IP address and port number.

4. Enter the SupportAssist Access Key and PIN.

Configuration 35

5. Click Enable Connect.

Results

PowerProtect Data Manager is connected to support services.

Update or configure contact data

Provide contact information for the person that Customer Support will contact with diagnostic reports. You can add or update contact data for SupportAssist at any time.

Steps

1. From the PowerProtect Data Manager UI, click , select Support, and then click SupportAssist. The Support window opens to the SupportAssist page.

2. Select the Contacts tab.

3. To add a primary contact, complete the following steps:

a. Enter the following information:

First Name Last Name Email Phone

b. Select the Preferred Language from the list. c. Click Save.

4. To add a secondary contact, click + Add Secondary Contact and enter the required information.

Add AutoSupport

When AutoSupport is enabled, automated support information, telemetry reports, alert summaries, and CloudIQ reports are sent.

About this task

If SupportAssist and SMTP are both configured, this information is sent using the option that you choose in the System Settings > Support > AutoSupport window.

Steps

1. From the PowerProtect Data Manager UI, click , select Support, and then click AutoSupport.

The AutoSupport window appears.

2. Change the Enable AutoSupport option to Disabled or Enabled, and click Save.

When you enable AutoSupport, select whether to receive the AutoSupport communications through SupportAssist or email server.

When you enable AutoSupport, the Telemetry Software Terms page displays. Review and scroll down to the bottom of the page to accept the terms, and then click Save to save your changes.

When you disable AutoSupport, PowerProtect Data Manager stops sending error and telemetry data to SupportAssist or the SMTP server. PowerProtect Data Manager continues to send information for updates and other information.

NOTE: To disable SupportAssist, clear the SupportAssist option in the AutoSupport window.

36 Configuration

Change SupportAssist connection settings

Use the following procedure to change SupportAssist connection settings.

Steps

1. From the PowerProtect Data Manager UI, click , select Support, and then click SupportAssist. The Support window opens to the SupportAssist page.

2. Select one of the following connection options: Connect Directly Connect via Gateway

To add a new gateway connection, complete the following steps:

a. Enter the gateway IP address and port number. b. Click Test.

Wait until the connection test is complete. If the connection is successful, a green check mark is displayed next to the gateway IP address and port number.

3. Enter the SupportAssist Access Key and PIN.

NOTE: If you are not connecting with a new access key, skip this step.

4. Click Reconnect.

Enable or disable SupportAssist

Enable the SupportAssist feature to automatically detect issues and collect diagnostic and usage data. You can also disable SupportAssist at any time.

Steps

1. From the PowerProtect Data Manager UI, click , select Support, and then click SupportAssist. The Support window opens to the SupportAssist page.

2. To enable SupportAssist, move the Connect to SupportAssist slider to the right. To disable SupportAssist, move the Connect to SupportAssist slider to the left.

The operation might take up to 5 minutes to complete.

Troubleshooting SupportAssist

Review the following information that is related to troubleshooting SupportAssist.

Failed to establish a SupportAssist connection

If you are connecting to SupportAssist with an access key and PIN that is already in use, the connection fails with error:

Connection is failed: Get universalkey error: Access Key and Pin used If this issue occurs, obtain a new access key and PIN from Customer Support. Generate SupportAssist access key and PIN provides instructions.

The following error might display if the SWID is not added to the PowerProtect Data Manager back-end: Connection is failed: Get universalkey error: Invalid Access Key and Pin If this issue occurs, contact Customer Support and ask them to check whether the SWID has been added to the PowerProtect Data Manager back-end.

Configuration 37

Test gateway connection failed

If you are using a gateway that is not Secure Connect Gateway (SCG), the connection to the gateway might fail. As a result, the SCG gateway configuration is not transferred to SupportAssist after you update PowerProtect Data Manager.

When updating PowerProtect Data Manager, the precheck dialog box displays a warning indicating that the SCG gateway version 5.0 or higher is required. Make sure that you update the Secure Remote Services (SRS) or SupportAssist Enterprise (SAE) gateway to a version compatible with the SCG version.

If you are using a SCG or SAE gateway, the update fails with the following error:

SYS0034 Unable to upgrade from Secure Remote Services to SupportAssist.

Details The upgrade to SupportAssist is unsuccessful for one or more of the following reasons: 1) The SupportAssist service cannot start. 2) The gateway is not accessible. 3) An issue occurs during Gen3 key upgrade.

Recommended Action In the PowerProtect Data Manager UI: 1) To open the Support dialog, click Settings and select Support. 2) In the left pane, select SupportAssist to set up SupportAssist. If this issue occurs, perform the following:

1. Check that you are using the SCG gateway and that the version is 5.0 or higher.

2. Set up SupportAssist. In the PowerProtect Data Manager UI, click , select Support, and then click SupportAssist.

Connection status changes to "Not Connected"

If the connection status changes to "Not Connected":

1. Ensure that all prerequisites are met in Connect to support services through SupportAssist . 2. If the issue persists, contact Customer Support.

38 Configuration

Performing Updates

Topics:

Managing update packages Updating the version of PowerProtect Data Manager Updating from a released version of PowerProtect Data Manager that has been updated Update PowerProtect Data Manager from version 19.9 or 19.10 to version 19.11 Update PowerProtect Data Manager from version 19.8 to version 19.11 Update PowerProtect Data Manager from version 19.7 to version 19.11

Managing update packages You manage update packages from the Sofware Update window.

The Software Update window allows you to perform the following operations:

Automatically or manually check for an update package Download an update package Upload an update package Delete an update package Perform a precheck on an update package Install an update package

Only the Administrator role can manage and perform updates.

Automatically check for an update package

You can configure PowerProtect Data Manager to automatically check for a new update package once a day. If a new update package is available, you can either be alerted or have it automatically downloaded.

Prerequisites

SupportAssist must be enabled. For more information, see Configuring SupportAssist for PowerProtect Data Manager and Enable or disable SupportAssist.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

3. In the Software Update window, click Check for Updates.

4. In the Software Update > Check for Updates pane, click .

5. In the Configure Updates window, choose what happens if a new package update is available. To only be notified of the package update, select Check and notify. To automatically download the package update, select Check and automatically download.

6. Click Save.

5

Performing Updates 39

Troubleshooting automatic downloads

Even if PowerProtect Data Manager has been configured to automatically download any new update package, there are a couple of conditions that disable this feature.

The following table describes the common issues with automatic downloads and how to resolve them.

Table 20. Common issues with automatic downloads

Issue Reason Resolution

Automatic downloads are disabled. There is already an update package ready to install and displayed in the Software Update > Install Update pane.

Delete or install the existing update package.

The wrong update package was automatically downloaded.

If there is more than one new package update available, the most recent one is automatically downloaded.

Delete the update package that was automatically downloaded, and then manually download and install the desired update package.

Manually check for an update package

You can use the PowerProtect Data Manager user interface to manually check for a new update package.

Prerequisites

SupportAssist must be enabled. For more information, see Configuring SupportAssist for PowerProtect Data Manager and Enable or disable SupportAssist.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

3. From the Software Update window, click Check for Updates.

4. From the Software Update > Check for Updates pane, click Check Now.

Results

All available update packages are displayed in the Software Update > Check for Updates pane. If there is more than one update package available, more information about each can be seen.

Download an update package

If an update package is available, you can download it to PowerProtect Data Manager for later installation.

About this task

The Software Update > Install Update pane displays any update package ready to install. If an update package is already ready to install, it will be overwritten by this procedure.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

3. From the Software Update window, click Check for Updates. All available update packages are displayed. If there is more than one update package available, more information about each can be seen.

4. From the Software Update > Check for Updates pane, select the update package to download, and then click Download.

40 Performing Updates

NOTE: If an update package is already ready to install, you will be asked to confirm if you want to overwrite it.

Results

The update package is downloaded to PowerProtect Data Manager and displayed as ready to install in the Software Update > Install Update pane.

Upload an update package

If SupportAssist is not enabled, you do not want to enable it, and you know there is a new update package available that you want to install, then you need to manually upload it to PowerProtect Data Manager.

About this task

The Software Update > Install Update pane displays any update package ready to install. If an update package is already ready to install, it will be overwritten by this procedure.

Steps

1. Download the update package from the Support Drivers & Downloads website.

2. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

3. Click , and then select Software Update.

4. From the Software Update window, click Install Update.

5. From the Software Update > Install Update pane, click Upload Package, and select the upload package to upload.

NOTE: If an update package is already ready to install, you will be asked to confirm if you want to overwrite it.

Results

The update package is uploaded to PowerProtect Data Manager and displayed as ready to install in the Software Update > Install Update pane.

Delete an update package

If you decide you are not going to install an update package that is ready to install, you can delete it.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

3. From the Software Update window, click Install Update. The Software Update > Install Update pane displays the update package ready to install.

4. From the Software Update > Install Update pane, click Delete.

Results

The Software Update > Install Update pane is empty, and the update package is no longer ready to install.

Perform a precheck on an update package

After an update package has been downloaded or uploaded, you can perform a precheck on it to verify it is compatible with the current configuration of PowerProtect Data Manager.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

Performing Updates 41

2. Click , and then select Software Update. The Software Update > Install Update pane displays the update package ready to install.

3. From the Software Update > Install Update pane, click Precheck.

Results

The results of the precheck are displayed in the Precheck Results window.

Install an update package

After an update package has been downloaded or uploaded, you can install it to PowerProtect Data Manager.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

3. From the Software Update window, click Install Update. The Software Update > Install Update pane displays the update package ready to install.

4. From the Software Update > Install Update pane, click Install. The update wizard is displayed.

5. Depending on the nature of the update package, the update wizard can consist of a different number of stages. Click Next at all but the last stage, and click Finish at the last stage. You can also click Back or Cancel at any stage.

NOTE: If you are installing an update package to update PowerProtect Data Manager to the latest version, follow the

more detailed instructions later in this chapter.

a. Precheck. This is displayed when a precheck is automatically performed.

If a critical issue is found, the update is cancelled. Fix any issues and run the precheck to ensure that the issue is fixed.

If non-critical issues are found, it is recommended that you fix any issues and run the precheck before proceeding with the update.

NOTE: For information about leaving Take snapshot selected, see Taking a snapshot when installing an update

package.

b. Summary. Review the details of the update.

Results

If the installation succeeds, the update package is removed from the Software Update > Install Update pane. However, you can click the History tab from Software Update > Install Update pane to see a history of all successful updates.

If the installation fails, the update package remains in the Software Update > Install Update pane, along with details of the failure.

Taking a snapshot when installing an update package

When installing an update package, you can choose to take a snapshot of PowerProtect Data Manager before the update is installed.

It is recommended you leave Take Snapshot selected. If there is a problem with the update, you can use the snapshot to restore the system to its preupdate state. If Take snapshot is not selected by default, it means that a vCenter server has not been specified as the PowerProtect Data Manager host. For more information about specifying the PowerProtect Data Manager host, see the PowerProtect Data Manager Administration and User Guide.

CAUTION: If this option is selected, verify that the datastore used by the vCenter server hosting PowerProtect

Data Manager has enough free space to save the virtual machine snapshot. A lack of free space can result in the

update failing.

42 Performing Updates

Updating the version of PowerProtect Data Manager This section provides instructions for updating PowerProtect Data Manager from an older version to the most recent version. If you are updating PowerProtect Data Manager from version 19.9 or 19.10 to version 19.11, follow the steps in Update

PowerProtect Data Manager from version 19.9 or 19.10 to version 19.11. If you are updating PowerProtect Data Manager from version 19.8 to version 19.11, follow the steps in Update PowerProtect

Data Manager from version 19.8 to version 19.11. If you are updating PowerProtect Data Manager from version 19.7 to version 19.11, follow the steps in Update PowerProtect

Data Manager from version 19.7 to version 19.11.

Migrating to SupportAssist

SupportAssist provides automated support capabilities for PowerProtect Data Manager systems. SupportAssist replaces Secure Remote Services (SRS).

If you have configured SRS previously, the PowerProtect Data Manager system automatically migrates SRS to SupportAssist when you update PowerProtect Data Manager.

If you do not have SRS configured, you can configure SupportAssist directly. For instructions on configuring SupportAssist, see Connect to support services through SupportAssist .

Updating DD or DDVE

If you are updating DD or DDVE software simultaneously with PowerProtect Data Manager, ensure that the following sequence of events is followed:

1. Disable all protection policies that use the affected DD or DDVE storage systems. 2. If any jobs started by protection policies are running, wait for them to complete.

NOTE: Any scheduled replication, cloud tier, or extended replication jobs continue to run, and might fail during the

update.

3. Update the DD or DDVE software. 4. Enable all protection policies that were disabled.

Updating from version 19.7 and the lockbox password

The lockbox password is required if you have not previously updated the system and accepted the update-package certificate.

Updating from version 19.9 or earlier in a GCVE environment

CAUTION: If you do not have certain vCenter permissions set before the update, discovery fails.

If you are updating from version 19.9 or earlier, ensure the following permissions of every GCVE-located vCenter server that has been added as an asset source:

The GVE.LOCAL\CloudOwner user is mapped to the Cloud-Owner-Role role at the vCenter level. The GVE.LOCAL\CloudOwner to Cloud-Owner-Role mapping is not restricted to a lower-level container object in the

vSphere object hierarchy.

Updating from version 19.9 or earlier in a Kubernetes environment

CAUTION: If you do not follow a Kubernetes-specific update procedure, PowerProtect Data Manager might fail

to function properly.

If you are updating from version 19.9 or earlier and have Kubernetes configured, see the PowerProtect Data Manager Kubernetes User Guide for Kubernetes-specific considerations.

Performing Updates 43

Updating from version 19.10 and the reporting engine

CAUTION: If you do not follow a reporting enginespecific update procedure, the reporting engine fails to

update when the PowerProtect Data Manager update package is installed.

If you are updating from version 19.10 and have deployed the reporting engine, see the PowerProtect Data Manager Administration and User Guide for reporting engine-specific considerations.

Memory requirements

An update package accounts for any new memory requirements. If additional memory is required, it attempts to automatically increase the memory that is assigned to PowerProtect Data Manager. If the amount of memory cannot be automatically increased, a precheck warning asks you to manually increase it.

To review memory requirements, see the PowerProtect Data Manager Administration and User Guide.

Cluster Shared Volume assets

After PowerProtect Data Manager is updated, any Cluster Shared Volume asset with a backup copy is listed twice in Assets pages, once with a status of Deleted and once with a status of Available. The Deleted entry continues to exist until the backup copy expires.

Updating from a released version of PowerProtect Data Manager that has been updated If an update to PowerProtect Data Manager has been made available for a released version of PowerProtect Data Manager, it is only supported to update from that version to 19.11.

NOTE: If more than one update has been made available, it is only supported to update to 19.11 from the most recent

update.

The following table shows the specific software versions the PowerProtect Data Manager 19.11 release supports in its update path.

Table 21. Supported releases and software versions

Released version Software version

19.7 19.7.0-12

19.8 19.8.0-10

19.9 19.9.0-19

19.10 19.10.0-20

If your software version of PowerProtect Data Manager is less than the supported version, you must update to the supported version before updating to PowerProtect Data Manager 19.11.

You manage update packages from the Sofware Update window.

Update PowerProtect Data Manager from version 19.9 or 19.10 to version 19.11 Use this procedure to update PowerProtect Data Manager from version 19.9 or 19.10 to version 19.11 or to apply critical updates.

Prerequisites

The software version of PowerProtect Data Manager 19.9 is 19.9.0-19.

44 Performing Updates

The software version of PowerProtect Data Manager 19.10 is 19.10.0-20. Only the Administrator role can perform updates. Check for running tasks and cancel them or allow them to complete. For on-premises deployments, it is recommended you take a snapshot of PowerProtect Data Manager before the update

package is installed. For more information, see Taking a snapshot when installing an update package. For cloud-based deployments, perform a backup of the AWS, Azure, or GCP virtual machine. For instructions, see the

Amazon, Microsoft, or Google documentation.

About this task

You manually or automatically download an update package from the Software Update window, or you can directly download it from the Support Drivers & Downloads website. To manually or automatically download an update package, see Managing update packages.

An update package can update one or more of the following:

The PowerProtect Data Manager, including application agent installers stored on the PowerProtect Data Manager virtual machine

External VM Direct appliance Kubernetes support PowerProtect Search software Remote Cloud Disaster Recovery Server

NOTE: If you have your own SSL certificate that you wish to continue using, see the PowerProtect Data Manager Security

Configuration Guide for more information.

In PowerProtect Data Manager, the update process automatically stops and removes most running jobs and puts the system into maintenance mode. If server Disaster Recovery is enabled, the system performs a Server DR backup.

You can check if the PowerProtect Data Manager system is ready to update by performing a precheck. For more information, see Perform a precheck on an update package.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

3. If an update package is already ready to install, click Install Update, and then skip to step 6.

4. If you have SupportAssist enabled, perform the following steps.

For information about enabling SupportAssist, see Enable or disable SupportAssist.

a. From the Software Update window, click Check for Updates. All available update packages are displayed. If there is more than one update package available, more information about each can be seen.

b. From the Software Update > Check for Updates pane, select the update package to download, and then click Download.

NOTE: If an update package is already ready to install, you will be asked to confirm if you want to overwrite it.

The update package is downloaded to PowerProtect Data Manager and displayed as ready to install in the Software Update > Install Update pane.

5. If you have an update package directly downloaded from the Support Drivers & Downloads website, perform the following steps.

a. From the Software Update window, click Install Update. b. From the Software Update > Install Update pane, click Upload Package, and select the upload package to upload.

NOTE: If an update package is already ready to install, you will be asked to confirm if you want to overwrite it.

The update package is uploaded to PowerProtect Data Manager and displayed as ready to install in the Software Update > Install Update pane.

6. From the Software Update > Install Update pane, click Install. The update wizard is displayed.

7. The update wizard consists of 3 stages. Click Next at the first two stages, and Finish at the last stage. You can also click Back or Cancel at any stage.

Performing Updates 45

a. Precheck. A precheck is automatically performed.

If a critical issue is found, the update is cancelled. Fix any issues and run the precheck to ensure that the issue is fixed.

If non-critical issues are found, it is recommended that you fix any issues and run the precheck before proceeding with the update.

NOTE: For information about leaving Take snapshot selected, see Taking a snapshot when installing an update

package.

b. Security. Review the details of the security certificate.

NOTE: You will not see this stage of the wizard if you accepted the security certificate during a previous update.

c. Summary. Review the details of the update.

The update begins. The browser is redirected to the PowerProtect Data Manager Software Update website on port 14443. This action enables you to monitor update progress while the PowerProtect Data Manager components are shutdown for the update.

NOTE: To monitor the update status if the connection to the appliance closes, connect to https:// IP_address_appliance:14443, where IP_address_appliance is the IP address of the PowerProtect Data Manager

appliance .

You can click Abort and Rollback to abort the update, if necessary.

When the update completes successfully, the browser is redirected back to the main PowerProtect Data Manager user- interface login page.

Results

If the update fails, perform the following troubleshooting steps: If PowerProtect Data Manager is still running:

1. Wait for the update to finish processing. 2. Click Return to Dashboard and log in to view the issue.

3. Click , and then select Software Update. 4. Expand the package that failed to fully install to view the issue that caused the failure:

If one or more core updates fail, the status of the update package is Failed. If all core updates complete, but a VM Direct Engine, the Search Cluster, or another non-core component is still

processing, the update package status is Installed (Core). If all core updates complete, but a VM Direct Engine, the Search Cluster, or another non-core component fails to

update, the update package status is Installed With Errors. 5. Fix the issue that caused the failure, and then perform a precheck.

If the precheck is successful, the package status changes to Available and the update can be retried. 6. Retry the update.

When you retry the update, PowerProtect Data Manager only retries the components that failed. If PowerProtect Data Manager is not running:

1. Click Export Logs to download the log files for troubleshooting. 2. If a snapshot was taken, click Rollback to snapshot to restore the core PowerProtect Data Manager system to its state

before the update. 3. Review the log files to determine the cause of the failure.

If you can resolve the issues manually, try the update again. If you cannot resolve the issues, contact Customer Support.

46 Performing Updates

Update PowerProtect Data Manager from version 19.8 to version 19.11 Use this procedure to update PowerProtect Data Manager from version 19.8 to version 19.11 or to apply critical updates.

Prerequisites

The software version of PowerProtect Data Manager 19.8 is 19.8.0-10. Download the update package from the Support Drivers & Downloads website. Only the Administrator role can perform updates. Check for running tasks and cancel them or allow them to complete. For on-premises deployments, either take a manual snapshot of the virtual machine in vCenter or enable automatic

snapshots. To enable automatic snapshots, add the vCenter server that hosts PowerProtect Data Manager as an asset source. Also, ensure that the user account associated with the vCenter server has the following permissions:

Setting vCenter 6.0 and later required privileges PowerCLI equivalent required privileges

Global Manage custom attributes Set custom attributes

Global.ManageCustomFields Global.SetCustomField

Virtual Machine Snapshot Management

Create snapshot Revert to snapshot Remove snapshot Rename snapshot

VirtualMachine.State.CreateSnapshot VirtualMachine.State.RevertToSnapshot VirtualMachine.State.RemoveSnapshot VirtualMachine.State.RenameSnapshot

For cloud-based deployments, perform a backup of the AWS, Azure, or GCP virtual machine. For instructions, see the Amazon, Microsoft, or Google documentation.

About this task

You can update the system by manually downloading update packages or by connecting to a Secure Remote Services (SRS) gateway. When PowerProtect Data Manager is licensed and you have registered the SRS gateway host with PowerProtect Data Manager, you can update using SRS. When an update package is available, the packages are uploaded to the SRS gateway. The appliance checks the SRS gateway once a day for available update packages or you can manually check the the Support Drivers & Downloads website for update packages.

NOTE: If SRS is configured and a critical update is available in the SRS gateway, a notification appears in the user

interface. You can also download available critical updates that appear in the Support Site section of the Upgrade page.

An update package can update one or more of the following:

The PowerProtect Data Manager, including application agent installers stored on the PowerProtect Data Manager virtual machine

External VM Direct appliance Kubernetes support PowerProtect Search software Remote Cloud Disaster Recovery Server

NOTE: If you have your own SSL certificate that you wish to continue using, the PowerProtect Data Manager Security

Configuration Guide provides more information.

In PowerProtect Data Manager, the update process automatically stops and removes most running jobs and puts the system into maintenance mode. If server Disaster Recovery is enabled, the system performs a Server DR backup. If automatic snapshots are configured, the update process creates a VM snapshot of the system. If the update fails or is aborted, the system uses the snapshot to roll back to the previous state. Once the system is rolled back or updated successfully, the snapshot is automatically deleted.

You can check if the PowerProtect Data Manager system is ready to update by performing a manual precheck. For more information, see Perform a precheck on an update package.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

Performing Updates 47

2. Click , and then select Software Update.

The Software Update window lists any packages that have already been downloaded, in descending date order. If you have registered SRS, the latest available PowerProtect Data Manager update package appears in the Support Site section of the window. For any package, you can click the down arrow next to the package name to view details about the contents.

NOTE: When the PowerProtect Data Manager system is configured to automatically check for updates, the download

of any newly discovered update package cannot proceed if there is already an update package in local storage.

To download the latest available update package, remove the existing package.

3. If you have registered SRS, in the row for the update package, click Download.

If you enabled PowerProtect Data Manager to automatically download update packages in System Settings > Support > Secure Remote Services, PowerProtect Data Manager downloads the update package automatically.

When the download is complete, the update package appears in the Packages section.

4. If you have not registered SRS and you are using the manual package download method:

a. Click Upload Package. b. Browse to the path that contains the update package, select the package, and then click Open. c. Wait until the package has fully downloaded, and then click OK.

5. When the update package status indicates Available, click to start the update wizard.

6. The update wizard consists of 3 stages. Click Next at the first two stages, and Finish at the last stage. You can also click Back or Cancel at any stage.

a. Precheck. The update manager runs a precheck.

If a critical issue is found, the update is cancelled. Fix any issues and run the precheck to ensure that the issue is fixed.

If non-critical issues are found, it is recommended that you fix any issues and run the precheck before proceeding with the update.

b. Security. Review the details of the security certificate.

NOTE: You will not see this stage of the wizard if you accepted the security certificate during a previous update.

c. Summary. Review the details of the update.

The update begins. The browser is redirected to the PowerProtect Data Manager Software Update website on port 14443. This action enables you to monitor update progress while the PowerProtect Data Manager components are shutdown for the update.

NOTE: To monitor the update status if the connection to the appliance closes, connect to https:// IP_address_appliance:14443, where IP_address_appliance is the IP address of the PowerProtect Data Manager

appliance .

You can click Abort and Rollback to abort the update, if necessary.

When the update completes successfully, the browser is redirected back to the main PowerProtect Data Manager user- interface login page.

Results

If the update fails, perform the following troubleshooting steps: If PowerProtect Data Manager is still running:

1. Wait for the update to finish processing. 2. Click Return to Dashboard and log in to view the issue.

3. Click , and then select Software Update. 4. Expand the package that was installed to view the issue that caused the failure:

If one or more core updates fail, the status of the update package is Failed. If all core updates complete, but a VM Direct Engine, the Search Cluster, are another non-core component is still

processing, the update package status is Installed (Core). If all core updates complete, but a VM Direct Engine, the Search Cluster, or another non-core component fails to

update, the update package status is Installed With Errors. 5. Fix the issue that caused the failure and perform a precheck .

48 Performing Updates

If the precheck is successful, the package status changes to Available and the update can be retried. 6. Retry the update.

When you retry the update, PowerProtect Data Manager only retries the components that failed. If PowerProtect Data Manager is not running:

1. Click Export Logs to download the log files for troubleshooting. 2. If an automatic snapshot was taken, click Rollback to snapshot to restore the core PowerProtect Data Manager

system to its state before the update. 3. Review the log files to determine the cause of the failure.

If you can resolve the issues manually, try the update again. If you cannot resolve the issues, contact Customer Support.

Update PowerProtect Data Manager from version 19.7 to version 19.11 Use this procedure to update PowerProtect Data Manager from version 19.7 to version 19.11 or to apply critical updates.

Prerequisites

The software version of PowerProtect Data Manager 19.7 is 19.7.0-12. Download the update package from the Support Drivers & Downloads website. Only the Administrator role can perform updates. Check for running tasks and cancel them or allow them to complete. For on-premises deployments, either take a manual snapshot of the virtual machine in vCenter or enable automatic

snapshots. To enable automatic snapshots, add the vCenter server that hosts PowerProtect Data Manager as an asset source. Also, ensure that the user account associated with the vCenter server has the following permissions:

Setting vCenter 6.0 and later required privileges PowerCLI equivalent required privileges

Global Manage custom attributes Set custom attributes

Global.ManageCustomFields Global.SetCustomField

Virtual Machine Snapshot Management

Create snapshot Revert to snapshot Remove snapshot Rename snapshot

VirtualMachine.State.CreateSnapshot VirtualMachine.State.RevertToSnapshot VirtualMachine.State.RemoveSnapshot VirtualMachine.State.RenameSnapshot

For cloud-based deployments, perform a backup of the AWS or Azure virtual machine. For instructions, see the Amazon or Microsoft documentation.

About this task

You can update the system by manually downloading update packages or by connecting to a Secure Remote Services (SRS) gateway. When PowerProtect Data Manager is licensed and you have registered the SRS gateway host with PowerProtect Data Manager, you can update using SRS. When an update package is available, the packages are uploaded to the SRS gateway. The appliance checks the SRS gateway once a day for available update packages or you can manually check the Support Drivers & Downloads website for update packages.

NOTE: If SRS is configured and a critical update is available in the SRS gateway, a notification appears in the user

interface. You can also download available critical updates that appear in the Support Site section of the Upgrade page.

An update package can update one or more of the following:

The PowerProtect Data Manager, including application agent installers stored on the PowerProtect Data Manager virtual machine

External VM Direct appliance Kubernetes support PowerProtect Search software Remote Cloud Disaster Recovery Server

NOTE: If you have your own SSL certificate that you wish to continue using, the PowerProtect Data Manager Security

Configuration Guide provides more information.

Performing Updates 49

In PowerProtect Data Manager, the update process automatically stops and removes most running jobs and puts the system into maintenance mode. If server Disaster Recovery is enabled, the system performs a Server DR backup. If server Disaster Recovery is enabled, the system performs a Server DR backup. If automatic snapshots are configured, the update process creates a VM snapshot of the system. If the update fails or is aborted, the system uses the snapshot to roll back to the previous state. Once the system is rolled back or updated successfully, the snapshot is automatically deleted.

You can check if the PowerProtect Data Manager system is ready to update by running a manual precheck. For more information, see Perform a precheck on an update package.

Steps

1. Log in to the PowerProtect Data Manager user interface as a user with the Administrator role.

2. Click , and then select Software Update.

The Software Update window lists any packages that have already been downloaded, in descending date order. If you have registered SRS, the latest available PowerProtect Data Manager update package appears in the Support Site section of the window. For any package, you can click the down arrow next to the package name to view details about the contents.

NOTE: When the PowerProtect Data Manager system is configured to automatically check for updates, the download

of any newly discovered update package cannot proceed if there is already an update package in local storage.

To download the latest available update package, remove the existing package.

3. If you have registered SRS, in the row for the update package, click Download.

If you enabled PowerProtect Data Manager to automatically download update packages in System Settings > Support > Secure Remote Services, PowerProtect Data Manager downloads the update package automatically.

When the download is complete, the update package appears in the Packages section.

4. If you have not registered SRS and you are using the manual package download method:

a. Click Upload Package. b. Browse to the path that contains the update package, select the package, and then click Open. c. Wait until the package has fully downloaded, and then click OK.

5. When the update package status indicates Available, click to start the update wizard.

6. The update wizard consists of 3 stages. Click Next at the first two stages, and Finish at the last stage.

NOTE: You can also click Back or Cancel at any stage.

a. Precheck. The update manager runs a precheck.

If a critical issue is found, the update is cancelled. Fix any issues and run the precheck to ensure that the issue is fixed.

If non-critical issues are found, it is recommended that you fix any issues and run the precheck before proceeding with the update.

b. Authentication. Enter the lockbox passphrase if required. c. Summary. Review the details of the update.

The update begins. The browser is redirected to the PowerProtect Data Manager Software Update website on port 14443. This action enables you to monitor update progress while the PowerProtect Data Manager components are shutdown for the update.

NOTE: To monitor the update status if the connection to the appliance closes, connect to https:// IP_address_appliance:14443, where IP_address_appliance is the IP address of the PowerProtect Data Manager

appliance .

You can click Abort and Rollback to abort the update, if necessary.

When the update completes successfully, the browser is redirected back to the main PowerProtect Data Manager user- interface login page.

Results

If the update fails, perform the following troubleshooting steps: If PowerProtect Data Manager is still running:

1. Wait for the update to finish processing. 2. Click Return to Dashboard and log in to view the issue.

50 Performing Updates

3. Click , and then select Software Update. 4. Expand the package that was installed to view the issue that caused the failure:

If one or more core updates fail, the status of the update package is Failed. If all core updates complete, but a VM Direct Engine, the Search Cluster, are another non-core component is still

processing, the update package status is Installed (Core). If all core updates complete, but a VM Direct Engine, the Search Cluster, or another non-core component fails to

update, the update package status is Installed With Errors. 5. Fix the issue that caused the failure and perform a precheck .

If the precheck is successful, the package status changes to Available and the update can be retried. 6. Retry the update.

When you retry the update, PowerProtect Data Manager only retries the components that failed. If PowerProtect Data Manager is not running:

1. Click Export Logs to download the log files for troubleshooting. 2. If an automatic snapshot was taken, click Rollback to snapshot to restore the core PowerProtect Data Manager

system to its state before the update. 3. Review the log files to determine the cause of the failure.

If you can resolve the issues manually, try the update again. If you cannot resolve the issues, contact Customer Support.

Performing Updates 51

Deployment Best Practices and Troubleshooting

Topics:

Best practices for deploying PowerProtect Data Manager Troubleshooting PowerProtect Data Manager software updates

Best practices for deploying PowerProtect Data Manager Review the following information related to deploying the PowerProtect Data Manager software.

ESXi host storage

For optimal performance, it is recommended to deploy PowerProtect Data Manager to an ESXi host with the following storage configuration:

an SSD read and write latency less than 5 ms

Troubleshooting PowerProtect Data Manager software updates Review the following information related to updating the PowerProtect Data Manager software.

Attempting to update PowerProtect Data Manager fails with a certificate error

An attempt to update PowerProtect Data Manager from an earlier version fails, and a certificate error similar to the following is displayed.

2021-09-30T20:17:34.319Z [] Creating keystore from UI certs 2021-09-30T20:17:34.320Z [] Generating keystore from /etc/ssl/certificates/custom/ custom.pem and /etc/ssl/certificates/custom/customkey.pem 2021-09-30T20:17:34.326Z [] Enter pass phrase for /etc/ssl/certificates/custom/ customkey.pem: 2021-09-30T20:17:34.327Z [] User interface error2021-09-30T20:17:34.328Z [] unable to load private key 2021-09-30T20:17:34.329Z [] 139938797381264:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:594: 2021-09-30T20:17:34.330Z [] 139938797381264:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:476:

To resolve this, contact Customer Support.

A

52 Deployment Best Practices and Troubleshooting

Mounting a read-only file system results in a failed update

If you mount a read-only file system under the /home/admin or /home/sysadmin directories on the PowerProtect Data Manager node, the update cannot complete successfully. Ensure that you remove read-only file system mounts before updating PowerProtect Data Manager.

Automatic vCenter server discovery fails immediately after an update

An automatic vCenter server discovery might run shortly after an update, when the system is still in maintenance mode. If this occurs, discovery fails without an error.

To determine the status of the vCenter server discovery, go to the Infrastructure > Asset Sources window. If the discovery fails, it is restarted every 30 minutes until the vCenter server is successfully added as an asset source. You can also manually discover the vCe

Manualsnet FAQs

If you want to find out how the PowerProtect Dell works, you can view and download the Dell PowerProtect 19.11 Data Manager Deployment Guide on the Manualsnet website.

Yes, we have the Deployment Guide for Dell PowerProtect as well as other Dell manuals. All you need to do is to use our search bar and find the user manual that you are looking for.

The Deployment Guide should include all the details that are needed to use a Dell PowerProtect. Full manuals and user guide PDFs can be downloaded from Manualsnet.com.

The best way to navigate the Dell PowerProtect 19.11 Data Manager Deployment Guide is by checking the Table of Contents at the top of the page where available. This allows you to navigate a manual by jumping to the section you are looking for.

This Dell PowerProtect 19.11 Data Manager Deployment Guide consists of sections like Table of Contents, to name a few. For easier navigation, use the Table of Contents in the upper left corner.

You can download Dell PowerProtect 19.11 Data Manager Deployment Guide free of charge simply by clicking the “download” button in the upper right corner of any manuals page. This feature allows you to download any manual in a couple of seconds and is generally in PDF format. You can also save a manual for later by adding it to your saved documents in the user profile.

To be able to print Dell PowerProtect 19.11 Data Manager Deployment Guide, simply download the document to your computer. Once downloaded, open the PDF file and print the Dell PowerProtect 19.11 Data Manager Deployment Guide as you would any other document. This can usually be achieved by clicking on “File” and then “Print” from the menu bar.