PowerProtect Data Manager 19.9 Amazon Web Services Deployment Guide

Deploy PowerProtect Data Manager to AWS

Use this procedure to deploy PowerProtect Data Manager and DDVE to AWS.

1. In a browser, navigate to https://aws.amazon.com/marketplace.
2. Search for PowerProtect Data Manager and Data Domain Virtual Edition.
3. Select Dell EMC PowerProtect Data Manager, and then click Continue to Subscribe.
4. Click Continue to Configuration.
5. Select the following configuration, and then click Continue to Launch.
   • Fulfillment Option—Select Cloud Formation Template.
   • Software Version—Select the correct version.
   • Region—Select where to deploy PowerProtect Data Manager and DDVE.
6. Review the configuration details, select Launch the Cloud Formation template, and then select Launch.
   The template URL is populated.
7. From the CloudFormation > Stacks > Create stack pane, click Next
8. From the CloudFormation > Stacks > Create stack > Specify stack details pane, enter a name for the PowerProtect Data Manager and DDVE instances in the Stack name text box, and then specify additional stack details as described in the tables below.

   Table 1. PowerProtect Data Manager Instance and Network ConfigurationPowerProtect Data Manager Instance and Network Configuration

   Parameters	Description
   IAM Role	The IAM Role that grants access to resources for the PowerProtect Data Manager instance. This field can be empty.
   VPC ID	The VPC ID of your existing Virtual Private Cloud.
   Subnet ID	The ID of the subnet within your Virtual Private Cloud to which the PowerProtect Data Manager instance will be deployed.
   Private IP Address (Optional)	Assign the PowerProtect Data Manager instance a private IP address in your Virtual Private Cloud. A private IP address will be automatically generated for you if this field is left blank. NOTE If you wish to use your own DNS servers, you must provide a value.
   Security Group ID (Optional)	Assign the PowerProtect Data Manager instance a security group used to access it. A security group will be automatically generated for you if this field is left blank.
   IP Range Permitted for Inbound Communication	The IP address ranges allowed to connect to the PowerProtect Data Manager instance. Specify a single IP address or an IP address range in CIDR notation (for example, 192.160.8.0/16). The default is 0.0.0.0/0, which allows unrestricted access. Any range entered here will be the default for all inbound ports. NOTE It is recommended that this be changed after PowerProtect Data Manager is deployed. For more information, see Configure network traffic rules
   Key Pair	A key pair that can be used to access the PowerProtect Data Manager instance.

   Table 2. PowerProtect Data Manager DNS ConfigurationPowerProtect Data Manager DNS Configuration

   Parameters	Description
   Enable DNS Configuration	Select Yes to use one or more of your own DNS servers, which allows for reverse DNS lookups of IP addresses to hostnames. Otherwise, leave the default selection of No to use the AWS DNS server. Make note of the following: If the selection is Yes, ensure the following prerequisites. Your DNS servers already have entries for the IP address and fully qualified domain name of the PowerProtect Data Manager instance. Your DNS servers are able to resolve Amazon-provided hostnames to IP addresses. Either add the default AWS DNS server as a forwarder, or enter its IP address as one of the three entries of the following DNS Server parameter. If the selection is No, leave the following two parameters empty.
   DNS Server	Enter the IP addresses of up to 3 DNS servers, separated by commas.
   FQDN	Enter the fully qualified domain name of the PowerProtect Data Manager instance.

   Table 3. DDVE Instance ConfigurationDDVE Instance Configuration

   Parameters	Description
   Launch DDVE Instance	Select Yes to deploy and launch a DDVE instance in the same subnet as PowerProtect Data Manager. The values entered for the PowerProtect Data Manager instance for IP Range Permitted for Inbound Communication and Key Pair will be applied to the DDVE instance.
   DDVE Model	The instance type and storage capacity of the DDVE instance. 16TB-Model--m5.xlarge 32TB-Model--m5.2xlarge 96TB-Model--m5.4xlarge 256TB-Model--m58xlarge
   Override default Metadata disks	You can override the default number of metadata disks assigned to the DDVE instance. By default, the number of metadata disks provides 10% of the total storage capacity of the DDVE instance. 16TB-Model--m5.xlarge—Two 1 TB metadata disks 32TB-Model--m5.2xlarge—Four 1 TB metadata disks 96TB-Model--m5.4xlarge—Ten 1 TB metadata disks 256TB-Model--m58xlarge—Thirteen 2 TB metadata disks
   IAM Role for S3 access	The IAM role that enables DDVE access to S3.
   Security Group ID (Optional)	Assign the DDVE instance a security group used to access it. A security group will be automatically generated for you if this field is left blank.

9. You can enter configuration settings that will be automatically applied to the PowerProtect Data Manager and DDVE instances when the stack is deployed.

   Table 4. Automatic Configuration Settings (Optional)Automatic Configuration Settings (Optional)

   Parameters	Description
   Enable Automatic Configuration and Accept Product End User License Agreement (EULA)	Confirm if automatic configuration is enabled and the terms and conditions outlined in the product End User License Agreement (EULA) accepted. Select Yes to accept the EULA. NOTE Do not select Yes if you need to restore a PowerProtect Data Manager disaster-recovery backup. Select No if you do not accept the EULA. If you select No, automatic configuration is disabled. To configure the instances manually after deployment, see Configure the PowerProtect Data Manager virtual appliance.
   Allow Stack Optimization	Confirm if stack optimization is allowed. Selecting Yes is recommended. It allows you to view the deployment status of the PowerProtect Data Manager and DDVE instances from the AWS Marketplace Management Portal, and to know when their user interfaces are available. NOTE Before selecting Yes, a gateway endpoint must be set up. To create a gateway endpoint, see Gateway VPC endpoints.
   Data Manager Common Password	Enter the password for the PowerProtect Data Manager instance. The password must contain at least 9 characters, 1 lowercase letter, 1 uppercase letter, 1 numeral, 1 special character, and be no more than 128 characters in length. The same password will be used by the PowerProtect Data Manager instance for all system accounts, including the lockbox and administrator user.
   Data Manager Common Password Confirmation
   Data Manager Timezone	Select a timezone for the PowerProtect Data Manager instance.
   Data Manager NTP Server	Enter the IP address or FQDN of one or two NTP servers for the PowerProtect Data Manager instance. Separate NTP servers with commas.
   DDVE Common Password	Enter the password for the DDVE instance. The password must contain at least 9 characters, 1 lowercase letter, 1 uppercase letter, 1 numeral, 1 special character, no spaces, and be no more than 100 characters in length. The same password will be used by the DDVE instance for the sysadmin account and the object store passphrase.
   DDVE Common Password Confirmation
   DDVE S3 Bucket name	Enter the name of an empty S3 bucket that already exists. To create an S3 bucket, see the PowerProtect DD Virtual Edition in Amazon Web Services Installation and Administration Guide at Customer Support.

10. From the CloudFormation > Stacks > Create stack > Configure stack options page:
    1. Either enable or disable Rollback on failure.

       Selecting Disabled is recommended.

       • If you select Enabled, stack optimization was enabled, and automatic configuration was enabled but fails, then the deployment of PowerProtect Data Manager will be aborted.
       • If you select Disabled and automatic configuration was enabled but fails, then the instances must be manually configured after deployment, see Configure the PowerProtect Data Manager virtual appliance .
    2. Click Next.
11. From the CloudFormation > Stacks > Create stack > Review Stack Name pane, where Stack Name is replaced by the name of the PowerProtect Data Manager instance you provided in step 5:
    1. Review the information provided for accuracy and edit anything that is incorrect.
       NOTE Incorrect information can cause the automatic configuration of PowerProtect Data Manager and DDVE to fail.
    2. Click Create Stack at the bottom of the page to create the PowerProtect Data Manager instance.
12. From the CloudFormation > Stacks > Stack Name pane, wait until CREATE_COMPLETE is displayed.
    Note that Stack Name is replaced by the name of the PowerProtect Data Manager instance you provided in step 5.
13. From the EC2 Instance Management Console, wait until the PowerProtect Data Manager instance is initialized. Also note the automatically generated security group for the instance.