Enable vault replication to a retention lock enabled protection policy to synchronize the backup data into Vault DD System.
Prerequisites
- Ensure that the PowerProtect Data Manager Appliance has Retention Lock Compliance Mode enabled.
- Ensure that a dedicated Storage Unit with Compliance Mode exists on the appliance.
- Ensure that the Vault DD is licensed for Retention Lock compliance.
Note: For instructions about enabling Retention Lock Compliance Mode on the appliance and creating a storage unit with compliance mode, see PowerProtect Data Manager Appliance 5.16 Administrator Guide for DM5500.
Steps
- From the PowerProtect Data Manager Appliance UI, select Protection > Protection Policies. The Protection Policies page appears.
- On the Protection Policies page, click Add. The Add Policy wizard appears.
- On the Type page, specify the following fields, then click Next:
- Name — Type a descriptive name for the protection policy (such as Compliance Linux VM Backup).
- Description — Type a description for the policy (optional).
- Type — Select Virtual Machine.
- On the Purpose page, select Crash Consistent for point-in-time backup of virtual machines.
- Click Next. The Assets wizard appears.
- On the Assets page, select the assets for inclusion in this policy by choosing the appropriate option from the list.
- Click Next.
If any virtual objects or assets that were selected on the previous page overlap with assets that are protected by another policy, the Selection Overlap page appears. Review the asset list and click OK to continue or Cancel to return to the Assets page.
- Click Next.
- The Objectives page appears.
- Click Add under Primary Backup.
- Select the Compliance Enabled Storage Unit from the drop-down list to use as the target directory, from the Add Primary Backup UI.
- Select the Network Interface to use when transferring data from the client to the Internal Storage.
- Click the Retention Lock toggle button.
Figure 15. Retention lock compliance storage unit selection
Note: Only when the Retention Lock toggle button is enabled will the data backed up by the policy be Compliance Enabled. Simply selecting a Compliance Enabled Storage Unit does not mean that the data is Retention Lock Compliant.
- Define the Service Level Agreement (SLA) for the policy now or edit later.
- Select the desired schedule of choice for the backup. You can choose multiple backup schedules for this policy.
- In the Retain field, specify how long to keep the backups.
- Choose a Start and End timeframe.
- Click Save.
- The Objectives page appears, and the Primary Stage is set.
- Click Vault from the Policy wizard.
- Click Add. The Add Vault page appears.
- Review the Backup Source and Vault Storage details and click OK.
- Optionally, click the checkbox next to Options, to enable additional parameters for the protection policy, or click Next.
- The Summary page appears.
- Review the configuration details, then click Finish.
- Click the hyperlink at the bottom of the screen to view the policy creation workflow job called ‘Configure Vault for the protection policy’ which creates a replication context for the storage units of the policy and initializes the replication context, thus streamlining the process on DM5500.
Figure 16. Replication context creation for a Retention Lock Compliant policy
Note: When the first Storage Unit is enabled with Retention Lock Compliance (RLC), the System ServerDR Storage Unit will automatically inherit Retention Lock Compliance mode. If the Vault DD System is not licensed for RLC, replication to the vault will fail.
Note: For information about Creating a replication context on the Vault DD System or how to Configure cyber recovery policies, see those sections.