PowerProtect Data Manager: Adding SQL Assets to Policy Fails With ACS0001

The Backup Administrator adds SQL assets to a protection policy in PPDM. The configuration job fails with the following error:

Unable to verify the DD Boost credentials for access to the Data Domain storage unit on Data Domain host.

The configuration job log on the SQL host shows the ACS0001 error with a storage validation failure:

AddOnConfiguration_8344bfec3ff65225-04Sep2026_10_52_07_684978-42521788544978.571992.log: [2026-09-04 18:02:58,554 GMT| 2026-09-04 11:02:58,554153 Yukon Standard Time| ADDONCONFIGURATION_8344BFEC3FF65225| PID-4252| TID-7028| INFO| TraceContext-TRACE_ID:8344bfec3ff65225;EXEC_ID:88c8c6ea909d4faa] C:\Program Files\DPSAPPS\AgentService\tmp\_MEI74082\JobManager\JobManager.py-_runProcess()-Line 1686- The /v1/agent/configuration-sessions job returns - Errors:[],
Response:{'status': 'FAILURE', 'errorMessage': '', 'remediation': '', 'output': '', 'errorCode': 'ACS0001', 'alertArguments': [{'argumentName': 'StorageUnit', 'argumentValue': '/StorageUnit-Name/Storage-Folder'}, {'argumentName': 'DDHost', 'argumentValue': '192.168.0.100'}], 'vendorSpecificErrorMessage': '', 'stats': [{'id': '1ebc9817-b915-4064-9849-2a13ff1e3f8d', 'status': 'FAILURE', 'errorCode': 'ACS0001', 'errorMessage': '', 'warningMessage': '', 'remediation': '', 'vendorSpecificErrorMessage': '', 'alertArguments': [{'argumentName': 'StorageUnit', 'argumentValue': '/StorageUnit-Name/Storage-Folder'}, {'argumentName': 'DDHost', 'argumentValue': '192.168.0.100'}], 'steps': [{'name': 'Validating the storage connection for storage unit StorageUnit-Name', 'status': 'STEP_FAILED', 'startTime': '2026-09-04T17:52:10Z', 'endTime': None, 'duration': None

The /var/log/brs/adm/adm.log on the PPDM appliance shows the configuration session completed with ACS0001:

adm.log: 2026-09-04T18:04:00.233Z INFO [] [adm-common-session-monitoring-interceptor-14] [00000000-0000-4000-a000-000000000000][][][TRACE_ID:8344bfec3ff65225;EXEC_ID:88c8c6ea909d4faa][] [c.d.p.a.n.d.e.b.s.m.MonitorTaskProgress.setTaskApiForAgentCall(344)] - Session completed. Agent Service Task API response received from host 192.168.0.101 for sessionId 1038e3f85e0249fd9aa33e9a32d2637f with context id:003a37ba-734f-4327-9054-ba97a58663e1, Task Api response:class TaskOutput {
    nextPageToken: null
    content: [class Operation {
        id: 1ebc9817-b915-4064-9849-2a13ff1e3f8d
        type: CONFIGURATION
        assetNaturalId: null
        status: FAILURE
        parentSessionId: 1038e3f85e0249fd9aa33e9a32d2637f
        errorCode: ACS0001
        errorMessage: 
        remediation: 
        result: null

Port communication from the backup client to the Data Domain data interface IP address is blocked. The SQL agent validates the storage connection during policy configuration. The validation requires connectivity to the Data Domain on ports 111, 2049, and 2052. When these ports are blocked, the validation fails with ACS0001.

The Data Domain IP address in the error log identifies the specific interface that is unreachable.

Open ports 111, 2049, 2052 from the backup client to the Data Domain for all addresses belonging to the Data Domain. Specifically, ensure the ip adress found in the log messages has ports opened from the asset source host.

Required ports can be found in the PowerProtect Data Manager Security Configuration Guide for the version in use. You can find guides by selecting the desired version in the following KB article:

PowerProtect Data Manager: Info Hub Product Documents and Information

See PowerProtect Data Manager Security Configuration Guide -> Network Security -> Port Usage.