Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell PowerProtect Cyber Recovery 19.13 Product Guide

PDF

Adding and editing applications

When you install an application in the Cyber Recovery vault, you must present the application to the Cyber Recovery software. Applications can include the Avamar, NetWorker, and PowerProtect Data Manager applications, the CyberSense, or other applications.

Prerequisites

  • The Avamar, NetWorker, PowerProtect Data Manager,or CyberSense applications must be installed and running at the Cyber Recovery vault location before you can define it in the Cyber Recovery UI.
  • Modify and save the /etc/ssh/sshd_config file on the application's operating system:
    1. For NetWorker deployments, enable password authentication and SSH access for root on the server:
      • Change the PasswordAuthentication field value from no to yes.
      • Change the PermitRootLogin field value from no to yes.
    2. For NetWorker Virtual Edition (NVE) running in the cloud, add the pound sign (#) to the beginning of the line and IP address of the workstation from where you want to log in, as shown in the following example:
       
      ## disable root login if not access from self
      # Match User root Address *,!::1,!127.0.0.1,!10.13.144.188
      # ForceCommand echo'Please login as the user admin rather than the user root.';sleep 5
      # Match all
      ## Permit local root login
      Match Address ::1,127.0.0.1,127.0.0.1,127.0.0.2,::1,10.13.144.188,fe80::ee:beff:fe36:cde8,<IP Address of workstation>
      PermitRootLogin yes 
      Match all 
      LogLevel INFO 
      PermitRootLogin no
    3. For PowerProtect Data Manager and Avamar deployments, enable password authentication:
      • Change the PasswordAuthentication field value from no to yes.
    4. Run the service sshd restart command.
  • If you plan to use CyberSense Version 7.8 or later, assign a DD Boost user to the PowerProtect DD system in the Cyber Recovery vault:
    1. Create a dedicated DD Boost user on the Cyber Recovery vault PowerProtect DD system with the same role as the backup user on the production PowerProtect DD system:
      user add <username> role <role value> uid <uid value>
      NOTE:The role value is the user who performs the backups on the production DD system. For a PowerProtect Data Manger backup, the role value is none. For a NetWorker or Avamar backup, the role value is admin.
    2. Assign the DD Boost user:
      ddboost user assign <username>

About this task

NOTE:When adding applications:
  • The NetWorker application must be added as the root user in the Cyber Recovery vault. The Cyber Recovery software uses NetWorker commands such as nsrdr, which require root permissions.
  • The Avamar and PowerProtect Data Manager applications can be added as the admin user in the Cyber Recovery vault.
  • The CyberSense application can be added as an admin user in the Cyber Recovery vault.

Steps

  1. From the Main Menu, click Infrastructure > Assets.
  2. Click Applications at the top of the Assets content pane.
  3. Do one of the following:
    • To add an application, click Add.

      The Add Vault Application wizard is displayed.

    • To modify an existing application, select the application and click Edit.

      The Summary page of the Edit Vault Application wizard is displayed. Click Back to go to the wizard page that you want to modify.

  4. On the Application Information page, complete the following fields and click Next:
    Table 1. Application Information page
    Field Description
    Nickname Enter a name for the application object.
    FQDN or IP Address Specify the application host by using one of the following:
    • Fully qualified domain name
    • IP address
    NOTE:The hostname and IP address of the PowerProtect Data Manager server in the Cyber Recovery vault do not have to match the hostname and IP address of the production PowerProtect Data Manager server.
    Application Type (when adding an application only) Select an application type:
    • To represent an application in Cyber Recovery, select one of the following:
      • CyberSense for analysis capabilities
      • Avamar
      • NetWorker and complete the following additional fields:
        • In the Application Username field, enter the username of the application user. The application user is usually the administrator user.
        • In the Application Password field, enter the password of the application user, which must be the same password for the administrator user on the production DD system.
      • PPDM and complete the following additional fields:
        • In the Application Username field, enter the username of the application user.
        • In the Application Password field, enter the password of the application user.
        • (For on-premises deployments only) In the vCenter Name field, select a vCenter server
        NOTE:If you are running a pre-19.8 version of PowerProtect Data Manager, the Cyber Recovery UI displays the Root Password and Lockbox Passphrase fields for which you must add values.
      • FileSystem if you want to mount copies on an NFS share and examine data by using any application on the host. Selecting this option does not require you to install an application on the host.
      • Other for other application types.
    NOTE: If you specify an application (in the FQDN or IP address field) and then select a different application type (in the Application Type field), the procedure fails. The application host must correspond to the application type. You cannot modify the Application Type field for an existing application.
    Security Group Tag (For the Cyber Recovery solution deployed on Amazon Web Services (AWS) only) Enter the AWS tag of the security group that controls access to and from the Cyber Recovery and PowerProtect Data Manager hosts. For more information, see the Dell PowerProtect Cyber Recovery AWS Deployment Guide.
    Tags
    • Optionally, add a tag that provides useful information about the application. The tag is displayed in the Assets content pane in the Cyber Recovery UI. Click Add Tag, enter the tag, and then click Add.
    • For Avamar, NetWorker, or PowerProtect Data Manager recoveries, add a tag that indicates the DD Boost username that is configured for the production application.
    NOTE:If a tag exceeds 24 characters, the details description displays the first 21 characters followed by an ellipsis (...).
  5. On the Host Authentication page, complete the following fields and then click Next:
    Table 2. Host Authentication page
    Field Description
    Host Username Specify the host administrator username.
    NOTE:This username is for the operating system host.
    Host Password Enter the password of the host administrator.
    NOTE:For PowerProtect Data Manager, enter the password for the user admin account, which is the default account.
    SSH Port Number Enter an application SSH port number.
    Reset Host Fingerprint (Security Officer only) If you change the FQDN or IP address of the DD host, select to reset the fingerprint. The Cyber Recovery software then sends an alert message.
  6. For the NetWorker and PowerProtect Data Manager application types, on the Application Authentication page, complete the following fields and then click Next:
    Table 3. Application Authentication page
    Field Description
    Application Username Enter the username of the application user.
    Application Password Enter the password of the application user.
    vCenter Name (For the PowerProtect Data Manager application deployed on premises only) Select a vCenter.
  7. Review the Application Summary page and either:
    • Click Finish if you are satisfied with the summary information and want to add the application.
    • Click Back to return to the previous pages to change the information.
  8. If you added a CyberSense Version 7.8 or later application, run the following commands from the CyberSense host to ensure the use of the DD Boost user while mounting the sandbox during the analysis process:
    # iesh
    # ddboostcfg add
      
      Enter hostname, username, and password for each Data Domain host you plan to connect to
      using DDBoost protocol. Enter '*' as a hostname to enable auto probe with given
      username and password. Only single probe combination is allowed. Reply with Enter or Ctrl-D
      on the Host: prompt to finish
    
      Host: <host name>
      Username: <username>
      Password: <password>
    
    # dservice restart dispatch
  9. In the application's row, click Icon with an image of a sheet of paper and a magnifying glass. to view more detailed information.
  10. To remove an application, select the application and click Delete.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\