powerprotect data manager cloud disaster …...deploy cloud disaster recovery the following...

PowerProtect Data Manager CloudDisaster RecoveryVersion 19.3

User GuideRev 01

December 2019

Copyright © 2019 Dell Inc. or its subsidiaries. All rights reserved.

Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.

THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS-IS.” DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND

WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF

MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. USE, COPYING, AND DISTRIBUTION OF ANY DELL SOFTWARE DESCRIBED

IN THIS PUBLICATION REQUIRES AN APPLICABLE SOFTWARE LICENSE.

Dell Technologies, Dell, EMC, Dell EMC and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property

of their respective owners. Published in the USA.

Dell EMCHopkinton, Massachusetts 01748-91031-508-435-1000 In North America 1-866-464-7381www.DellEMC.com

2 PowerProtect Data Manager Cloud Disaster Recovery User Guide

5

Preface 7

PowerProtect Data Manager for Cloud Disaster Recovery overview9

Overview........................................................................................................... 10Prerequisites..................................................................................................... 10

PowerProtect Data Manager for Cloud DR with AWS 11Deploy Cloud Disaster Recovery........................................................................12Add cloud targets.............................................................................................. 14Edit cloud account.............................................................................................14

PowerProtect Data Manager for Cloud DR with Azure 15Deploy Cloud Disaster Recovery........................................................................16Add cloud targets.............................................................................................. 17Edit cloud account............................................................................................. 17

Cloud DR in PowerProtect Data Manager 19Protection policies............................................................................................ 20Define protection policy....................................................................................20Edit existing policy to change retention or cloud target.................................... 22Service Level Agreement.................................................................................. 23

Add a Policy type Service Level Agreement......................................... 23Add a Cloud DR type Service Level Agreement.................................... 24

Recovery...........................................................................................................24Recover assets in Cloud DR................................................................. 24

Define recovery staging area............................................................................ 25Failback to on-premises vCenter.......................................................................25Monitor Cloud Disaster Recovery jobs.............................................................. 26Cloud Disaster Recovery security..................................................................... 26

Firewall................................................................................................ 26Upgrade Cloud Disaster Recovery.................................................................... 26

29

Tables

Chapter 1

Chapter 2

Chapter 3

Chapter 4

Index

CONTENTS

PowerProtect Data Manager Cloud Disaster Recovery User Guide 3

Contents


Revision history...................................................................................................................71

TABLES


Tables


Preface

As part of an effort to improve its product lines, Dell EMC periodically releases revisions of itssoftware and hardware. Some functions that are described in this document might not besupported by all versions of the software or hardware in use. The product release notes providethe most up-to-date information about product features.

Contact your technical support professional if a product does not function properly or does notfunction as described in this document.

Note: This document was accurate at publication time. Go to Online Support (https://www.dell.com/support/) to find the latest version of this document.

Purpose

This document describes how to install, deploy, and use the Cloud Disaster Recovery (Cloud DR)solution from PowerProtect Data Manager.

Audience

This document is for backup administrators and operators, and cloud administrators who managebackup and recovery of VMs to the cloud and plan to deploy the Cloud DR solution. Experience innetwork administration is required for building the network infrastructure to support the Cloud DRsolution. Training and certification for cloud provider services, for example, Microsoft Azure orAmazon Web Services (AWS), is recommended.

Revision history

The following table presents the revision history of this document:

Table 1 Revision history

Revision Date Description

01 December 2019 Release of this document for PowerProtectData Manager 19.3.

Related documentation

The following publications provide additional information:

l Cloud Disaster Recovery Release Notes

l Cloud Disaster Recovery Installation and Administration Guide

Where to get help

Support, product, and licensing information can be obtained as follows:

Product information

For documentation, release notes, software updates, or further information, go to OnlineSupport at https://www.dell.com/support/.

Technical support

There are several options for contacting Technical Support. To open a service request, youmust have a valid support agreement. Contact your sales representative for details aboutobtaining a valid support agreement or with questions about your account.


https://www.dell.com/support/



Comments and suggestions

Comments and suggestions help us to continue to improve the accuracy, organization, and overallquality of the user publications. Send comments and suggestions about this document to [email protected].

Please include the following information:

l Product name and version

l Document name, part number, and revision (for example, 01)

l Page numbers

l Other details to help address documentation issues

Preface


mailto:[email protected]

CHAPTER 1

PowerProtect Data Manager for Cloud DisasterRecovery overview

This chapter contains the following topics:

l Overview................................................................................................................................10l Prerequisites..........................................................................................................................10


OverviewThis guide provides information about how to deploy and configure Cloud Disaster Recovery inPowerProtect Data Manager to back up and run disaster recovery (DR) of virtual machines.

Cloud Disaster Recovery is integrated into PowerProtect Data Manager. Cloud DR supportsPowerProtect Data Manager as an on-premises backup source. This feature enables users toprotect VMs by uploading VM image backups to the public cloud object storage, and runautomated DR operations on those copies, while providing DR orchestration capabilities. UsingCloud DR customers can add the cloud as another cost-effective DR site, which eliminates theneed to maintain an offsite data center. From PowerProtect Data Manager UI, you can configureCloud DR to move backups to the cloud, and perform disaster recovery of these backups. CloudDR in PowerProtect Data Manager supports Amazon Web Services (AWS) and Microsoft Azure.

PrerequisitesThe prerequisites for Cloud Disaster Recovery in PowerProtect Data Manager are as follows:

l Register the vCenter Server, where the PowerProtect Data Manager is deployed, in AssetSources section of Infrastructure pane.

l Configure an NTP server in the Systems section of the Settings menu.

l Regions and supported operating systems for CDRS deployment are listed on Cloud DR SimpleSupport Matrix, which is available on Dell EMC Online Support.

l The Cloud Disaster Recovery for PowerProtect Data Manager has the following scalelimitations:

n 1000 Virtual Machines

n 100 TB FE Capacity

l Ensure that you observe the VM specifications (including CPU and memory) for Cloud DR. Thelatest requirements (for AWS and Azure) are listed in the Cloud Disaster Recovery Installationand Administration Guide.

l Ensure that you understand and observe the prerequisite requirements for the cloud servicethat you are deploying. The latest prerequisites (for AWS and Azure) are listed in the CloudDisaster Recovery Installation and Administration Guide.

PowerProtect Data Manager for Cloud Disaster Recovery overview


https://www.dell.com/support

CHAPTER 2

PowerProtect Data Manager for Cloud DR withAWS

Learn about deployment, protection, and recovery work flows for Cloud DR with AWS.

l Deploy Cloud Disaster Recovery............................................................................................ 12l Add cloud targets...................................................................................................................14l Edit cloud account................................................................................................................. 14


Deploy Cloud Disaster RecoveryThe following procedure describes how to deploy Cloud Disaster Recovery in AWS fromPowerProtect Data Manager UI.

Before you begin

Ensure that you have:

l An AWS account that is configured before connecting to the cloud account

l A Data Domain system that is configured at the production site

l Reviewed the prerequisite requirements for the cloud service that you are deploying. Thelatest prerequisites are listed in the Cloud Disaster Recovery Installation and Administration Guide.

l Reviewed the requirements for managing access keys for IAM users as described in the AWSdocumentation

Procedure

1. In the PowerProtect Data Manager home page, select Infrastructure > Storage

The Storage page appears.

2. In the Cloud Disaster Recovery tab, click Configure.

A warning message is displayed with the information about the time that is taken tocomplete the deployment process.

3. Click Yes to proceed with the deployment process.

The Cloud DR initialization process starts.

4. The Cloud Disaster Recovery wizard opens after the Cloud DR initialization processcompletes.

5. In the Cloud Account page, select AWS.

The Enter AWS account credentials page appears.

6. Specify the following fields in the Enter AWS account credentials page:

l Access Key ID

l Secret Key ID

For more information about obtaining the access and secret keys for AWS users, seeManaging Access Keys for IAM Users in AWS documentation.

7. Click Show IAM Policy to view the Identity and Access Management policy that is requiredfor Cloud DR implementation.

The Define the AWS IAM policy section of Cloud Disaster Recovery Installation andAdministration Guide provides instructions for creating an AWS policy that uses this IAMpolicy.

8. Select Accept AWS Terms to accept the AWS marketplace terms, and click Connect.

Cloud DR is connected to the AWS account.

9. Click Next.

The Cloud DR Targets page is displayed.

10. In Configure Cloud DR Server Target, select the Bucket Name from the Select ALocation To Deploy DR Server list.

The region of the bucket determines the location where CDRS is deployed.

PowerProtect Data Manager for Cloud DR with AWS


11. To connect the cloud target, click Connect.

12. To reconfigure the cloud target details, click Disconnect.

13. Click Next.

The Cloud Admin page is displayed.

14. In Specify Cloud Admin, specify the following fields:

a. Email Address

When Cloud DR Server is successfully deployed, AWS sends an email message to thisaddress for verification. Follow the instructions in the email within 24 hours ofdeployment.

b. Password

c. Confirm Password

15. Click Next.

The Configure Cloud DR Server summary page appears.

16. Review the Cloud DR server details.

a. To change the details of the Cloud DR server, click Back, and repeat the appropriatesteps.

b. To deploy Cloud DR in PowerProtect Data Manager, click Deploy Cloud DR Server.

The deployment of Cloud DR Server to Cloud DR target begins. Deploying Cloud DR Servercan take about 20 minutes.

17. The Cloud Disaster Recovery Setting Information appears on the Storage page, and aninformational dialog box confirms that Cloud DR server is deploying.

a. To monitor the deployment from the Jobs page, click Go to Jobs.

b. To monitor the deployment from the Storage page, click OK. When the deployment iscomplete, the public address of the Cloud DR Server hostname is displayed. If you wantto open the Cloud DR Server UI in a new tab, click the Server Hostname link.



Add cloud targetsYou can add one or more cloud targets to the cloud account by selecting the appropriate AWS S3bucket.

Before you begin

Note: You can add (or remove) cloud targets only after the Cloud DR Server is deployed.

Procedure

1. Select Infrastructure > Storage.

The Storage window is displayed.

2. In the Cloud Diaster Recovery tab, click Add in the Cloud Targets section.

The Add Cloud Target window is displayed.

3. Select the appropriate bucket from Bucket Name list. Click Save to add the cloud target.

4. For each Cloud DR target that you want to add, repeat the steps in this procedure.

5. To remove an unwanted cloud target, select the cloud target, and click Remove.

Note: You cannot remove the cloud target that was used for the Cloud DR Serverdeployment.

After you finish

You can also add cloud targets when you define a protection policy.

Edit cloud accountYou can change the Access Key and Secret Key in the Edit Cloud Account page.

Procedure


The Storage window appears.

2. In the Cloud Diaster Recovery tab, click Edit in the Cloud Account section.

The Edit Cloud Account page appears.

3. Enter the new Access Key and Secret Key.

4. Click Save to save the new cloud account details.



CHAPTER 3

PowerProtect Data Manager for Cloud DR withAzure

Learn about deployment, protection, and recovery work flows in PowerProtect Data Manager forCloud DR with Azure.

l Deploy Cloud Disaster Recovery............................................................................................ 16l Add cloud targets...................................................................................................................17l Edit cloud account................................................................................................................. 17


Deploy Cloud Disaster RecoveryThe following procedure describes how to deploy Cloud Disaster Recovery in Microsoft Azureusing PowerProtect Data Manager UI:

Before you begin

Ensure that you have:

l An Azure account that is configured before connecting to the cloud account

l A Data Domain system that is configured at the production site

l Reviewed the prerequisite requirements for the cloud service that you are deploying. Thelatest prerequisites are listed in the Cloud Disaster Recovery Installation and Administration Guide.

l Reviewed the requirements for managing access keys for IAM users as described in the Azuredocumentation

Procedure

1. In the PowerProtect Data Manager home page, select Infrastructure > Storage.

The Storage page appears.

2. In the Cloud Disaster Recovery tab, click Configure.

A warning message is displayed with the information about the time that is taken tocomplete the deployment process.

3. Click Yes to proceed with the deployment process.

The Cloud DR initialization process starts.

4. The Cloud Disaster Recovery wizard opens after the Cloud DR initialization processcompletes.

5. In the Cloud Account page, select Azure.

The Enter AZURE account credentials page appears.

6. Specify the following fields in the Enter AZURE account credentials page:

l Directory ID

l Application ID

l Client Secret

7. Click Select Subscription, and select a subscription from the list.

8. Click Connect.

Cloud DR is connected to the Azure account.

9. Click Next.

The Cloud DR Targets page appears.

10. Select the appropriate storage account from the Storage Account list.

The cloud target contains the installation files and determines the region in which CDRS isdeployed.

11. Click Connect.

The Cloud Target Details page appears.

12. Click Next.

The Cloud Admin page is displayed.

PowerProtect Data Manager for Cloud DR with Azure


13. In Specify Cloud Admin page, specify the following fields:

a. Email Address

The email address is used to recover forgotten password.

b. Password

c. Confirm Password

14. Click Next.

The Configure Cloud DR Server summary page appears.

15. Review the Cloud DR server details.

a. To change the details of the Cloud DR server, click Back, and repeat the appropriatesteps.

b. To deploy Cloud DR in Azure, click Deploy Cloud DR Server.

The deployment of Cloud DR Server to Cloud DR target begins. Deploying Cloud DR Servercan take about 20 minutes.

16. The Cloud Disaster Recovery Setting Information appears on the Storage page, and aninformational dialog box confirms that Cloud DR server is deploying.

a. To monitor the deployment from the Jobs page, click Go to Jobs.

b. To monitor the deployment from the Storage page, click OK. When the deployment iscomplete, the public address of the Cloud DR Server hostname is displayed. If you wantto open the Cloud DR Server UI in a new tab, click the Server Hostname link.

Add cloud targetsYou can add one or more cloud targets to the cloud account by selecting the appropriate Azurestorage account. You can also add cloud targets when you a define protection policy. Addition ofmore cloud targets is available only after you deploy CDRS.

Procedure



2. In the Cloud Diaster Recovery tab, click Add in the Cloud Targets section.

The Add Cloud Target window appears.

3. Select the appropriate storage account from Storage Account list. Click Save to add thecloud target.

4. For each Cloud DR target that you want to add, repeat the steps in this procedure.

5. To delete the unwanted cloud targets, select the cloud target, and click Remove.

Edit cloud accountYou can change the Application ID and Client Secret in the Edit Cloud Account page.

Procedure



2. In the Cloud Diaster Recovery tab, click Edit in the Cloud Account section.



The Edit Cloud Account page appears.

3. Enter the new Application ID and Client Secret.

4. Click Save to save the new cloud account details.



CHAPTER 4

Cloud DR in PowerProtect Data Manager

This chapter contains the following topics:

l Protection policies.................................................................................................................20l Define protection policy........................................................................................................ 20l Edit existing policy to change retention or cloud target.........................................................22l Service Level Agreement.......................................................................................................23l Recovery............................................................................................................................... 24l Define recovery staging area.................................................................................................25l Failback to on-premises vCenter........................................................................................... 25l Monitor Cloud Disaster Recovery jobs...................................................................................26l Cloud Disaster Recovery security..........................................................................................26l Upgrade Cloud Disaster Recovery......................................................................................... 26


Protection policiesProtection policies define sets of objectives that apply to specific time periods. These objectivesdrive the configuration, active protection, and copy-data-management operations. You define thepurpose of the policy, the assets that need to be protected, and the backup schedule.

Cloud DR supports only Virtual Machine policy type.

Define protection policyDefine a protection policy to create a schedule for the protection of the primary backup and thecloud copy.

Before you begin

Recommendations for virtual machine protection policies in the PowerProtect Data ManagerAdministration and User Guide apply to protection policies for Cloud DR.

Procedure

1. Log in to the PowerProtect Data Manager and select Protection > Protection Policies.

The Protection Policies window appears

2. Click Add.

The Add Policy wizard opens.

3. On the Type page, specify the following fields and click OK:

a. Name

b. Description

c. Type. Cloud DR supports only Virtual Machine policy type.

4. On the Purpose page, select Crash Consistent (the only supported option for Cloud DR).

5. In the Assets page, select the unprotected assets that you want to back up as part of thisprotection policy. If you do not see the virtual machines that you want to protect, click FindMore Assets to add more vCenter assets. The window enables you to filter by asset nameto locate the required assets.

6. Click Next.

The protection policy Schedule page appears. No default schedule is provided. If a backuphas not been performed, no schedules are displayed.

7. Click + Backup to create a schedule to protect the assets.

The Add Primary Backup dialog box appears.

8. Specify the following backup schedule fields:

a. Recurrence

The Recurrence option enables the user to determine how often the backups occur.Choose from Hourly, Daily, Weekly, or Monthly. If you select the Hourly option, theRecurrence depends on the Start Time and End Time fields . For example, if the StartTime is 8 pm and the End Time is 6 am, and you select Hourly, backups are performedhourly during that 10-hour window.

When you select Weekly and Monthly recurrence, you are selecting the interval at whichthe backup job runs within the window that you specify.



b. Create Copy determines how often a backup occurs during the backup window,depending on the Recurrence option you selected. Hourly, Weekly, and Monthlyrecurrences are allowed.

c. Keep For determines the retention period of the backup.

d. Start Time and End Time determine the backup window.

End Time means that no new backup will be initiated in this policy after this time. It doesnot mean that any policy that is running is stopped. If the user is within the End Timespecified, the protection process starts once the policy creation process ends.

e. Select Create Full to set the frequency for a full scale backup.

f. Click OK.

The Schedule page updates with the added backup schedule. After completing a backupschedule, you can change any schedule details by selecting the check box next to theadded schedule and clicking Edit.

9. (Optional) In the Schedule page, select an existing service level agreement that you want toapply to the primary backup schedule from the SLA list. Or, select Add to create a SLAwithin the Add Backup Service Level Agreement window.

10. Select the checkbox next to the added primary backup schedule, and click Cloud DR.

The Add Cloud DR dialog box appears.

11. Specify the Retention Period for the cloud (this retention is different than the primarybackup retention period). Click OK.

12. (Optional) Select an existing service level agreement that you want to apply to the cloudschedule from the SLA list. Alternatively, select Add to create an SLA within the Add CloudDR Service Level Agreement window. Provide an SLA name and RPO value, and clickSave.

Cloud Target is displayed in the Target column in a list that shows the cloud target and itslocation (for example, eu-west-1).

Note: The cloud target appears also in the Cloud DR Server UI on the System page,where the PowerProtect Data Manager it belongs to and its vCenter are displayed.

13. If you want to add a cloud target, from the Cloud Target list, click Add.

The Add Cloud Target dialog appears.

14. In the Add Cloud Target dialog, select a Bucket Name from the list. If you know the bucketname, begin typing the name to shorten the list of possible matches. After selecting thebucket name, click Save.

The cloud target and its region are added to the Target column. The cloud target appearsalso in the Cloud Targets section of the Infrastructure > Storage > Cloud DisasterRecovery page.

Note: It is possible to add multiple cloud targets when editing the CDR stage in thepolicy. However, it is not possible to use multiple cloud targets simultaneously.



15. Click Next.

The Summary page appears.

16. Review the protection policy group configuration details. To change protection policydetails, click Edit for the category that you want to change. Click Finish.

A message is displayed to confirm that PowerProtect Data Manager saved the protectionpolicy.

17. To exit the window, click OK. To open the Jobs window and monitor the backup of the newprotection policy group, click Go to Jobs .

After you finish

When the local backup is available on the Data Domain system, the backup copy files areautomatically sent to the cloud based on the policy.

You can also view the protection status by logging in to the Cloud DR Server UI and clicking theProtection menu. From there, you can view the protected VMs, their upload status, and the latestbackup copy that is available in the cloud. You can also select individual VMs that you want toenable for rapid recovery operation. For more information, see the Cloud Disaster RecoveryInstallation and Administration Guide.

Note: If the protection job fails, the workflow cancels the Cloud DR job. The retry option forthe Cloud DR job is not supported. If a protection job with protection stage and Cloud DRstage fails, the Cloud DR is canceled and cannot be restarted.

When an asset has a policy in which protection and CDR stages are outside the activity window,protection is not triggered for VMware Data Manager. The CDR job produces an empty copy.

Edit existing policy to change retention or cloud targetPowerProtect Data Manager enables you to edit an existing Cloud DR policy to change theretention period or cloud target.

Procedure

1. In the PowerProtect Data Manager home page, select Protection > Protection Policies.

The Protection Policy window appears.

2. Select the protection policy for Cloud DR, and click Edit.

The Edit Policy window opens on the Summary page.

3. In the Schedule row, click Edit.

The Schedule page appears.



4. Select the checkbox next to the schedule for Cloud DR, and click Edit.

The Add Cloud DR dialog box appears.

5. Select a Retention Period, and click OK.

6. From the Cloud Target list, select a different cloud target, and click OK.

A warning message reminds you that changing the cloud target starts a full backup of allVMs to the new cloud target. To acknowledge the message and change the cloud target,click OK.

7. Click Next.

The Summary page appears.

8. Click Finish.

An informational message confirms that PowerProtect Data Manager has saved theprotection policy.

9. Click OK to exit the window, or click Go to Jobs to open the Jobs window.

Service Level AgreementThe SLA Compliance window in the PowerProtect Data Manager UI enables you to add a servicelevel agreement (SLA) that identifies your Service Level Objectives (SLOs). You use the SLOs toverify that your protected assets are meeting the Service Level Agreements (SLAs).

The SLAs that are configured in the CDR stage appear on the CDRS dashboard. If a policy that isenabled for Cloud DR has a configured SLA, and the latest cloud backup copy is older than theconfigured SLA value, the CDRS dashboard indicates that the policy is not SLA-compliant. CloudDR in PowerProtect Data Manager supports two types of Service Level Agreement.

l Policy type SLA

l Cloud DR SLA

The Policy type SLA does not appear in the CDRS dashboard.

Add a Policy type Service Level AgreementThe SLA Compliance window in the PowerProtect Data Manager UI enables you to add a servicelevel agreement (SLA). The Service Level Agreement identifies your Service Level Objectives(SLOs). You can use the SLOs to verify that your protected assets are meeting the Service LevelAgreements (SLAs).

Procedure

1. Select Protection > SLA Compliance.

The SLA Compliance window appears.

2. Click Add button. The Add Service Level Agreement wizard opens.

3. Select Cloud DR in the Type section, and then click Next.

4. In the Objectives section, specify the following fields:

a. The SLA name.

b. Select Minimum Copies, and specify the number of Cloud DR backups.

c. Select Maximum Copies, and specify the number of Cloud DR backups.

5. Click Finish.

The SLA is displayed on the SLA Compliance page.



Add a Cloud DR type Service Level AgreementThe Policy type SLA sets the SLA for the entire policy.

About this task

Do the following steps to add Policy type SLA:

Procedure

1. Select Protection > SLA Compliance.

The SLA Compliance window appears.

2. Click Add.

The Add Service Level Agreement window appears.

3. Select Cloud DR in the Type section, and then click Next.

4. In the Objectives section, specify the SLA name.

5. If applicable, select the Recovery Point Objective (RPO), and then set the duration.

The RPO is defined in RecoverPoint for VMs RPO setting of each cloud copy.

6. Click Finish.

The SLA appears on the SLA Compliance page.

RecoveryThe recovery operation in Cloud DR within PowerProtect Data Manager follows the same processas the stand-alone Cloud DR installation.

Click the Cloud DR Sessions tab in Recovery > Running Sessions to view the DR sessions inrunning state. The recovery operations are also done using the Cloud DR Server (CDRS) UI. Seethe Dell EMC Cloud Disaster Recovery Installation and Administration Guide for more informationabout the recovery process in the CDRS UI.

Recover assets in Cloud DRYou can use PowerProtect Data Manager to run disaster recovery for cloud-protected virtualmachines.

Procedure

1. Log in to PowerProtect Data Manager, and select Recovery > Assets.

The Recovery window is displayed. The Recovery window displays all the assets withcopies.

2. In the Virtual Machines tab, select the checkbox next to the virtual machine that you wantto restore (that is, recover), and click View Copies.

If the selected virtual machine has copies in the cloud, the CDR icon is displayed.

3. Click the CDR icon.

The CDR details pane shows a list of the cloud copies.

4. Select the checkbox next to the VM copy that you want to recover, and click Test orFailover. The Test or Failover dialog box is displayed.

5. In the Network section on the cloud account, and click Next.



6. In the Security Groups section, select a security group to attach to the recovered instance,and click Next.

The Summary page is displayed.

7. Click Start Test or Start Failover.

Results

The test or failover process begins. You can monitor the progress on the Jobs window. You canalso follow the recovery process that is described in the Dell EMC Cloud Disaster RecoveryInstallation and Administration Guide.

Note: More Cloud DR orchestration capabilities are available in the Cloud DR Server (CDRS)UI. Examples of these operations include enabling rapid recovery, creating DR plans, and failingover to a vCenter. See the Dell EMC Cloud Disaster Recovery Installation and AdministrationGuide for more information.

Define recovery staging areaLearn how to define a recovery staging area.

About this task

You define a recovery staging area before you run a failback operation (or fail over to a vCenter).

Procedure

1. In the PowerProtect Data Manager, select Infrastructure > Asset Sources.

2. Select the vCenter you want to fail back to and click Edit.

3. In the Edit vCenter dialog, click Define Recovery Staging Area, and then click Configure.

a. Select the datastores for the failed back VM, and click Next.

b. Select the network for the VM. Click Next.

c. Enter a range of IP addresses, a subnet mask address, and a gateway address for thefailback.

To enable multiple concurrent failbacks, click Add Another.

d. Click Next.

e. Review the Summary, and click Save.

Failback to on-premises vCenterFailing back a failed-over instance enables you to send the instance and its changes to an on-premises vCenter. The failback operation occurs in the Cloud Disaster Recovery Server (CDRS)UI.

Before you begin

Configure the recovery staging area in the PowerProtect Data Manager.

Procedure

1. In the PowerProtect Data Manager, select Infrastructure > Storage > Cloud DisasterRecovery.

2. In the Cloud Disaster Recovery Server pane, the public address of the Cloud DR Serverhostname is displayed. To open the CDRS UI in a new tab, click the Server Hostname link.

3. From the CDRS UI, select Recovery > DR Activities, select a running failover, and clickFailback.



You can select the default target (the original, on-premises VM and vCenter) or a differenttarget.

Results

Failback operation begins. When the failback operation completes, you can vMotion the failed backVM on the vCenter to the production area and change its IP address. For more information aboutthe failback operation, see the Cloud Disaster Recovery Installation and Administration Guide.

Monitor Cloud Disaster Recovery jobsThe Jobs window in the PowerProtect Data Manager enables you to monitor the status of CloudDisaster Recovery and view details. To perform analysis or troubleshooting, you can view adetailed log of a failed job.

To view more details about job progress, click the link for the job in the Completed Tasks column.In the job window that appears, click the details icon in the Details column. Job steps with actiondescriptions and durations are shown.

When the job is successful, the success status appears on the Jobs page.

To view the running DR activities, from the Jobs page, select the Completed tab, select the jobfrom the list, and select Recovery > Running Sessions > Cloud DR Sessions.

See the PowerProtect Data Manager Administration and User Guide for more information aboutmonitoring and viewing jobs.

Cloud Disaster Recovery securityFor data that Cloud DR solution transfers, the communication between customer data centers andAmazon Web Services or Azure must use SSL protocols.

Identity and Access Management (IAM) handles all the AWS or Azure user permissions. See Userpermissions section of Cloud Disaster Recovery Installation and Administration Guide.

FirewallThe following ports must be opened for communication between the specified components:

Port Description

111 Communication between Data Domain and PowerProtect Data Manager

443 Communication between PowerProtect Data Manager and CDRS

443 Communication between PowerProtect Data Manager and the cloud

443 Communication between PowerProtect Data Manager and vCenter

443 Communication between local restore VM and the cloud

2049 Communication between Data Domain and PowerProtect Data Manager

Upgrade Cloud Disaster RecoveryThe on-premises component of Cloud DR is upgraded when you upgrade PowerProtect DataManager. PowerProtect Data Manager then triggers an upgrade of the Cloud DR Server (CDRS),



the cloud-based component. Active recovery operations can block this part of the upgrade andmay require a manual upgrade of the CDRS.

See the PowerProtect Data Manager Administration and Use Guide for more information aboutupgrading the CDRS.

Note: Cloud DR operations are unavailable when the PowerProtect Data Manager upgradeprocess is in progress.

Note: If the PowerProtect Data Manager version and the CDRS version are mismatched, DRoperations from the PowerProtect Data Manager are not possible, but you can run disasterrecovery from the CDRS UI.



INDEX

Aaudience 7

Ccomments 7conventions for publication 7

Ppreface 7protection policy 19

Rrecovery 24related documentation 7

Sservice level agreement 23Service Level Agreement 23, 24support information 7


Index


powerprotect data manager cloud disaster …...deploy cloud disaster recovery the following...

Documents