Dell PowerProtect Cyber Recovery 19.12 Installation Guide

Installing and configuring Cygwin

Set up Cygwin to run an automated disaster recovery (DR) for NetWorker on Windows.

1. Install Cygwin and configure SSH by following the instructions at https://cygwin.com/install.html.
2. Add the OpenSSH package.
3. Open a Cygwin terminal and run ssh-host-config to install sshd as a service, as shown in the following example:

   $ ssh-host-config
   
   *** Info: Generating missing SSH host keys
   ssh-keygen: generating new host keys: RSA DSA ECDSA ED25519
   *** Info: Creating default /etc/ssh_config file
   *** Info: Creating default /etc/sshd_config file
   
   *** Info: StrictModes is set to 'yes' by default.
   *** Info: This is the recommended setting, but it requires that the POSIX
   *** Info: permissions of the user's home directory, the user's .ssh
   *** Info: directory, and the user's ssh key files are tight so that
   *** Info: only the user has write permissions.
   *** Info: On the other hand, StrictModes don't work well with default
   *** Info: Windows permissions of a home directory mounted with the
   *** Info: 'noacl' option, and they don't work at all if the home
   *** Info: directory is on a FAT or FAT32 partition.
   *** Query: Should StrictModes be used? (yes/no) no
   *** Info: Updating /etc/sshd_config file
   
   *** Query: Do you want to install sshd as a service?
   *** Query: (Say "no" if it is already installed as a service) (yes/no) yes
   *** Query: Enter the value of CYGWIN for the daemon: []
   
   *** Info: The sshd service has been installed under the LocalSystem
   *** Info: account (also known as SYSTEM). To start the service now, call
   *** Info: `net start cygsshd' or `cygrunsrv -S cygsshd'. Otherwise, it
   *** Info: will start automatically after the next reboot.
   
   *** Info: Host configuration finished. Have fun!

4. Verify that the private and public keys are set in the /etc/ directory, as shown in the following example:

   $ ls -tlr /etc/ssh_*
   -rw-r--r-- 1 SYSTEM Administrators 576 Jul 1 13:21 /etc/ssh_host_rsa_key.pub
   -rw------- 1 SYSTEM Administrators 2610 Jul 1 13:21 /etc/ssh_host_rsa_key
   -rw------- 1 SYSTEM Administrators 1393 Jul 1 13:21 /etc/ssh_host_dsa_key
   -rw-r--r-- 1 SYSTEM Administrators 612 Jul 1 13:21 /etc/ssh_host_dsa_key.pub
   -rw-r--r-- 1 SYSTEM Administrators 184 Jul 1 13:21 /etc/ssh_host_ecdsa_key.pub
   -rw------- 1 SYSTEM Administrators 513 Jul 1 13:21 /etc/ssh_host_ecdsa_key
   -rw-r--r-- 1 SYSTEM Administrators 104 Jul 1 13:21 /etc/ssh_host_ed25519_key.pub
   -rw------- 1 SYSTEM Administrators 419 Jul 1 13:21 /etc/ssh_host_ed25519_key
   -rw-r--r-- 1 SYSTEM Administrators 1531 Jul 1 13:21 /etc/ssh_config

5. Start the Cygwin sshd service.
6. Enable sshd port 22 from a PowerShell session:

   New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

7. Use SSH to access the Windows host.
8. In the~/.bashrc file, before the # If not running interactively, don't do anything line, add the following line:

   cd <NetWorker installation path>

   This line provides the Cyber Recovery software with the NetWorker installation location on the Windows host when running SSH without an interactive shell.