PowerProtect Data Manager 19.15 Amazon Web Services Deployment Guide

Deploy PowerProtect Data Manager to AWS

Use this procedure to deploy PowerProtect Data Manager to AWS.

1. In a browser, navigate to https://aws.amazon.com/marketplace.
2. Search for PowerProtect Data Manager.
3. Select Dell PowerProtect Data Manager, and then click Continue to Subscribe.
4. Click Continue to Configuration.
5. Select the following configuration, and then click Continue to Launch.
   • Fulfillment Option—Select Cloud Formation Template.
   • Software Version—Select the correct version.
   • Region—Select where to deploy PowerProtect Data Manager.
6. Review the configuration details, select Launch the Cloud Formation template, and then select Launch.
   The template URL is populated.
7. From the CloudFormation > Stacks > Create stack pane, click Next
8. From the CloudFormation > Stacks > Create stack > Specify stack details pane, enter a name for the PowerProtect Data Manager instance in the Stack name text box, and then specify additional stack details as described in the tables below.

   Table 1. PowerProtect Data Manager Instance and Network ConfigurationPowerProtect Data Manager Instance and Network Configuration

   Parameters	Description
   IAM Role (Optional)	The IAM Role that grants access to resources for the PowerProtect Data Manager instance. This field can be empty.
   VPC ID	The VPC ID of your existing Virtual Private Cloud.
   Subnet ID	The ID of the subnet within your Virtual Private Cloud to which the PowerProtect Data Manager instance will be deployed.
   Private IP Address (Optional)	Assign the PowerProtect Data Manager instance a private IP address in your Virtual Private Cloud. A private IP address will be automatically generated for you if this field is left blank. NOTE: If you wish to use your own DNS servers, you must provide a value.
   Security Group ID (Optional)	Assign the PowerProtect Data Manager instance a security group used to access it. A security group will be automatically generated for you if this field is left blank.
   IP Range Permitted for Inbound Communication	The IP address ranges allowed to connect to the PowerProtect Data Manager instance. Specify a single IP address or an IP address range in CIDR notation (for example, 192.160.8.0/16). The default is 0.0.0.0/0, which allows unrestricted access. Any range entered here will be the default for all inbound ports. NOTE:It is recommended that this be changed after PowerProtect Data Manager is deployed. For more information, see Configure network traffic rules
   Key Pair	A key pair that can be used to access the PowerProtect Data Manager instance.

   Table 2. PowerProtect Data Manager DNS ConfigurationPowerProtect Data Manager DNS Configuration

   Parameters	Description
   Enable DNS Configuration	Select Yes to use one or more of your own DNS servers, which allows for reverse DNS lookups of IP addresses to hostnames. Otherwise, leave the default selection of No to use the AWS DNS server. Make note of the following: If the selection is Yes, ensure the following prerequisites. Your DNS servers already have entries for the IP address and fully qualified domain name of the PowerProtect Data Manager instance. Your DNS servers are able to resolve Amazon-provided hostnames to IP addresses. Either add the default AWS DNS server as a forwarder, or enter its IP address as one of the three entries of the following DNS Server parameter. If the selection is No, leave the following two parameters empty.
   DNS Server	Enter the IP addresses of up to 3 DNS servers, separated by commas.
   FQDN	Enter the fully qualified domain name of the PowerProtect Data Manager instance.

9. You can enter configuration settings that will be automatically applied to the PowerProtect Data Manager instance when the stack is deployed.

   Table 3. Automatic Configuration Settings (Optional)Automatic Configuration Settings (Optional)

   Parameters	Description
   Enable Automatic Configuration and Accept Product End User License Agreement (EULA)	Confirm if automatic configuration is enabled and the terms and conditions outlined in the product End User License Agreement (EULA) accepted. Select Yes to accept the EULA. NOTE:Do not select Yes if you need to restore a PowerProtect Data Manager disaster-recovery backup. Select No if you do not accept the EULA. If you select No, automatic configuration is disabled. To configure the instances manually after deployment, see Configure the PowerProtect Data Manager virtual appliance.
   Allow Stack Optimization	Confirm if stack optimization is allowed. Selecting Yes is recommended. It allows you to view the deployment status of the PowerProtect Data Manager instance from the AWS Marketplace Management Portal, and to know when its user interface is available. NOTE:Before selecting Yes, a gateway endpoint must be set up. To create a gateway endpoint, see Gateway VPC endpoints.
   Data Manager Common Password	Enter the password for the PowerProtect Data Manager instance. The password must contain at least 9 characters, 1 lowercase letter, 1 uppercase letter, 1 numeral, 1 special character, and be no more than 128 characters in length. The same password will be used by the PowerProtect Data Manager instance for all system accounts, including the lockbox and administrator user.
   Data Manager Common Password Confirmation
   Data Manager Timezone	Select a timezone for the PowerProtect Data Manager instance.
   Data Manager NTP Server	Enter the IP address or FQDN of one or two NTP servers for the PowerProtect Data Manager instance. Separate NTP servers with commas.

10. From the CloudFormation > Stacks > Create stack > Configure stack options page:
    1. Either enable or disable Rollback on failure.

       Selecting Disabled is recommended.

       • If you select Enabled, stack optimization was enabled, and automatic configuration was enabled but fails, then the deployment of PowerProtect Data Manager will be aborted.
       • If you select Disabled and automatic configuration was enabled but fails, then the instances must be manually configured after deployment, see Configure the PowerProtect Data Manager virtual appliance .
    2. Click Next.
11. From the CloudFormation > Stacks > Create stack > Review Stack Name pane, where Stack Name is replaced by the name of the PowerProtect Data Manager instance you provided in step 5:
    1. Review the information provided for accuracy and edit anything that is incorrect.
       NOTE:Incorrect information can cause the automatic configuration of PowerProtect Data Manager to fail.
    2. Click Create Stack at the bottom of the page to create the PowerProtect Data Manager instance.
12. From the CloudFormation > Stacks > Stack Name pane, wait until CREATE_COMPLETE is displayed.
    Note that Stack Name is replaced by the name of the PowerProtect Data Manager instance you provided in step 5.
13. From the EC2 Instance Management Console, wait until the PowerProtect Data Manager instance is initialized. Also note the automatically generated security group for the instance.
    NOTE: This takes approximately 20 minutes if automatic configuration is enabled and approximately 5 minutes if automatic configuration is not enabled.