Zerto Virtual Manager VSphere Administration Guide

Zerto Virtual
Manager
Administration
Guide
VMware vSphere Environment
Version 7.0
ZVR-ADVV-7.0 Rev01 U2 July2019

Copyright © 2019, Zerto Ltd. All rights reserved.
Information in this document is confidential and subject to change without notice and does not represent a commitment on the part of Zerto Ltd. Zerto Ltd.
does not assume responsibility for any printing errors that may appear in this document. No part of this document may be reproduced or transmitted in any
form or by any means, electronic or mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose other than
the purchaser's personal use, without the prior written permission of Zerto Ltd.
All other marks and names mentioned herein may be trademarks of their respective companies.
The scripts are provided by example only and are not supported under any Zerto support program or service.
All examples and scripts are provided "as-is" without warranty of any kind. The author and Zerto further disclaim all implied warranties including, without
limitation, any implied warranties of merchantability or of fitness for a particular purpose.
In no event shall Zerto, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever
(including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of
the use of or inability to use the sample scripts or documentation, even if the author or Zerto has been advised of the possibility of such damages. The entire
risk arising out of the use or performance of the sample scripts and documentation remains with you.
ZVR-ADVV-7.0 Rev01 U2 July2019
2
TABLE OF CONTENTS
CHAPTER 1: INTRODUCTION TO THE ZERTO SOLUTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

What is the Zerto Solution? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
The Zerto Solution Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
How Zerto Recovery Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Zerto Analytics - Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Zerto Analytics Secure Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Zerto Cloud Control - Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Before Getting Started with Zerto Cloud Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Accessing the Zerto Cloud Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Using Upgrade Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Using Tenants . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Benefits of Using the Zerto Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
CHAPTER 2: ACCESSING THE ZERTO USER INTERFACE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Using the Zerto User Interface From a Browser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Using the Zerto User Interface Within vSphere. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Using the vSphere Web Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Using the vSphere Client Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Adding a Security Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Working With the Zerto User Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
CHAPTER 3: INITIAL SITE CONFIGURATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Setting Up Role-based Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Enabling Replication to the Same Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Sizing Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Protected Virtual Machine Considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
WAN Sizing Requirements with Zerto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
CHAPTER 4: OVERVIEW OF RECOVERY FLOWS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
CHAPTER 5: INTRODUCTION TO PROTECTING VIRTUAL MACHINES . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Configuring Virtual Protection Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
The Role of the Journal During Protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
What Happens After the VPG is Defined . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
File and Folder Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
CHAPTER 6: PROTECTING VIRTUAL MACHINES FROM A VCENTER SERVER . . . . . . . . . . . . . . . . . . . . 45

Replication From a Protected Site vCenter Server to a Recovery Site vCenter Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Replication From a Protected vCenter Server to the Same Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
When to Replicate to the Same Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Protecting a Single Virtual Machine (Via the VMware Web Client or Client Console). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Replication From a Protected Site vCenter Server To a Recovery Site Hyper-V Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Replication From a Protected Site vCenter Server to a Recovery Site AWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Import Methods for AWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
ZertoTools for AWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
AWS Linux re-IP Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Protecting From a vCenter Server - To an AWS Recovery Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97
3
Replication From a Protected Site vCenter Server to a Recovery Site Microsoft Azure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Requirements for Microsoft Azure Environments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
VPGs Recovering to Azure Standard Storage and Premium Managed Disks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Converting Premium Virtual Machines for Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Protecting From a vCenter Server - To a Microsoft Azure Recovery Site. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
CHAPTER 7: PROTECTING VIRTUAL MACHINES TO AND FROM VCLOUD DIRECTOR . . . . . . . . . . . .117

Replication From a Protected Site vCenter Server to a Recovery Site vCD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
Replication From a Protected Site vCD to a Recovery Site vCD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Settings Maintained when Replicating from a Protected Site vCD to a Recovery Site vCD. . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Replication From a Protected Site vCD to a Recovery Site vCenter Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
Replication From a Protected Site vCD to Hyper-V . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
Replication From a Protected Site vCD to AWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
Import Methods for AWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
Creating a VPG from vCloud Director to AWS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .202
Replication From a Protected Site vCD to Azure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .209
CHAPTER 8: MONITORING ZERTO VIRTUAL MANAGER . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

The DASHBOARD Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Monitoring VPGs – The VPGs Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218
List View - GENERAL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218
List View - PERFORMANCE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
List View - RETENTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
Additional Fields and Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220
Saving Details of Virtual Protection Groups to a File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
Monitoring a Single VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221
Monitoring Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224
Monitoring Protected Virtual Machines – The VMs Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226
Monitoring Peer Sites – The SITES Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
Monitoring Virtual Replication Appliances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
Monitoring VRAs – The SETUP Tab – VRAs Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
Monitoring a Single VRA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
Monitoring Datastores – The SETUP Tab – The DATASTORES Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235
Zerto Performance Counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
CHAPTER 9: MANAGING VPGS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

Editing a VPG. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241
Adding Virtual Machines to a VPG - Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
How to Add Virtual Machines to an Existing VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .246
Removing Virtual Machines from a VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Removing Virtual Machines from a vCD vApp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248
Removing Protected Virtual Machines from the Hypervisor Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248
Modifying Protected Virtual Machine Volumes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249
Changing the Recovery Datastore for a Protected Virtual Machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249
Modifying a Protected RDM Volume . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249
Pausing and Resuming the Protection of a VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250
Forcing the Synchronization of a VPG. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
Handling a VPG in an Error State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251
Deleting a VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251
Deleting a VPG When the Status is Deleting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252
Ensuring Application Consistency – Checkpoints . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252
Adding a Checkpoint to a VPG to Identify a Key Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
Running Scripts Before or After Recovering a VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
Creating a Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254
4
Example Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256
Exporting and Importing VPG Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257
VPG Statuses and Synchronization Triggers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259
VPG Statuses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259
VPG Synchronization Triggers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265
Managing Protection When the Recovery Datastore Will Be Unavailable (Datastore Maintenance) . . . . . . . . . . . . . . . . . . . . . . 266
CHAPTER 10: MANAGING VRAS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

Installing a VRA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268
Upgrading VRAs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272
Editing VRA Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
Editing the VRA Connection Method or Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Changing a Recovery VRA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Uninstalling VRAs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
Handling a VRA in an Error State (Ghost VRA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Managing Protection During VMware Host Maintenance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Managing Protection When Moving a Host to a Different Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
Support for VMware Virtual Update Manager (VUM). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
CHAPTER 11: MANAGING A ZERTO VIRTUAL MANAGER. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281

Check Connectivity Between Zerto Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
Reconfiguring the Zerto Virtual Manager Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
Reconfiguring the Microsoft SQL Server Database Used by the Zerto Virtual Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284
Replacing the SSL Certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
Pair to Another Site and Unpair Sites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
CHAPTER 12: MANAGING A ZERTO VIRTUAL MANAGER CLUSTER . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

Performing Maintenance on your Zerto Virtual Manager Operating System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288
Switching from a Non-Clustered (Standard) Environment to a Clustered Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290
Switching from a Clustered Environment to a Non-Clustered (Standard) Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .306
CHAPTER 13: ADVANCED SITE CONFIGURATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .308

Site Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .308
Editing Information About a Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .309
Defining Performance and Throttling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311
Defining Site Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313
Configuring Email Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314
Defining Resource Report Sampling Period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315
Reviewing Supported Host Versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316
Seeing What Is Licensed. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316
Submitting a Support Ticket . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317
Submitting a Feature Request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318
About Zerto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318
CHAPTER 14: OVERVIEW OF DISASTER RECOVERY OPERATIONS . . . . . . . . . . . . . . . . . . . . . . . . . . . . .320

The Failover Test Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 320
The Move Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
The Failover Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
The Restore File Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322
The Clone Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322
5
CHAPTER 15: TESTING RECOVERY. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 324
The Test Failover Process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 324
Starting and Stopping Failover Tests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 325
What Happens After Starting a Test?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327
Viewing Test Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
Live Disaster Recovery Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
Basic Verification – User Traffic Is Not Run against the Recovered VMs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330
Run User Traffic Against the Recovered VMs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332
CHAPTER 16: MIGRATING A VPG TO A RECOVERY SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335

The Move Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335
Moving Protected Virtual Machines to a Remote Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337
Reverse Protection For a Moved VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
CHAPTER 17: MIGRATING ZERTO TO A NEW VIRTUAL MACHINE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343
CHAPTER 18: MANAGING FAILOVER . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345

The Failover Live Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345
Initiating Failover Live . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346
Reverse Protection for a Failed Over VPG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
Reverse Protection with One-to-Many . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
What Happens When the Protected Site is Down. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
Initiating Failover Live During a Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
CHAPTER 19: CLONING A VPG TO THE RECOVERY SITE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

The Clone Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355
Cloning Protected Virtual Machines to the Remote Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355
CHAPTER 20: RECOVERING FILES AND FOLDERS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358

The File and Folder Recovery Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358
Recovering Files and Folders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
Mounting the Disk that Contains the Required Files and Folders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
Downloading the Files and Folders from the Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
CHAPTER 21: USING ZERTO’S LONG TERM RETENTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365

Long Term Retention - Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366
Workflow: Using Zerto’s Long Term Retention. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369
Creating a New Repository for Retention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369
Editing an Existing Repository for Retention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370
Deleting an Existing Repository for Retention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371
Enabling Long Term Retention for the VPGs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
Manually Running the Retention Process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374
Monitoring Your Long Term Retention Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375
Monitoring Retention Status via the SETUP Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375
Monitoring Retention Status via the RETENTION STATUS Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376
Searching for Files/Folders and Restoring their VMs or VPGs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379
Configuring File System Indexing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379
Running Search and Restore Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Restoring VMs or VPGs from a Repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387
Storing Retention Sets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 392
6
CHAPTER 22: ZERTO REPORTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393
Outbound Protection Over Time Report. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393
Protection Over Time by Site Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394
Recovery Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395
Resources Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397
Monthly Usage Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400
VPG Performance Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 401
CHAPTER 23: TROUBLESHOOTING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .402

Ensuring the Zerto Virtual Manager is Running . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .402
Troubleshooting Needs Configuration Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .402
Troubleshooting GUI Problems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .403
Troubleshooting VRA Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .403
Handling Lack of Storage Space for Recovered Virtual Machines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .403
Zerto Virtual Replication Diagnostics Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404
Collecting Zerto Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404
Using Remote Log Collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404
Using the Zerto Diagnostics application. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .405
Understanding the Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410
Re-IP Configured As Static Fails During FOL with Reverse Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .411
CHAPTER 24: ZERTO AND VMWARE FEATURES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412

Zerto Permissions in vCenter Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412
VMWare Privileges Required by Zerto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413
Stopping a vCenter Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415
Thin-Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415
VMware Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416
Storage Profiles and Storage Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416
Fault Tolerance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
Host Affinity Rules and CPU Pinning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
vMotion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
Storage vMotion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
VMware Host Maintenance Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
Resiliency to vSphere Environment Changes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
CHAPTER 25: THE ZERTO VIRTUAL MANAGER USER INTERFACE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419

About Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .420
Add Checkpoint Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421
Pair Sites - Add Site Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
Pair sites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
Add Static Route Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
Advanced Journal Settings Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 423
Advanced Journal Settings Dialog (vCD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .424
Advanced VM Recovery Settings Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .426
Advanced VM Replication Settings Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427
Advanced VM Replication Settings Dialog (vCD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427
Advanced VM Settings for Cloud Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .428
ALERTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429
Boot Order Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429
Browse for File Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431
Change Host Password VRA Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431
Change VM Recovery VRA Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432
Checkpoints Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433
7
Configure and Install VRA Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .434
Configure Paired Site Routing Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435
Configure Provider vDCs Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436
Configure VM Settings Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 437
Edit Volume Dialog (vCD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .438
Edit NIC Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444
Edit Repository Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445
Edit Selected Volumes Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446
Edit VM Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446
Edit VM Dialog (vCD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447
Edit VM Settings Dialog (AWS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450
Edit VM Settings Dialog (Azure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451
Edit vNIC Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 452
Edit vNIC Dialog (vCD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453
Edit Volumes Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .454
Edit Volumes Dialog (vCD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .459
Edit VRA Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465
License Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .466
Manage Static Routes Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .467
New Repository Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .468
Restore - Edit NICs Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469
Offsite Clone Window. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469
Open Support Case Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .470
Remote Support Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471
Restore a VPG from Repositories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472
Restore VPG - Volumes Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
Restore VPG - Edit Selected Volumes Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
Site Settings Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478
Site Information Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478
Performance and Throttling Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480
Policies Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .482
Email Settings Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .483
Reports Dialog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483
Compatibility Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .484
Cloud Settings Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .485
LTR Settings Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
Stop Failover Test Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
TASKS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
CHAPTER 26: GLOSSARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .488
8
CHAPTER 1: INTRODUCTION TO
THE ZERTO SOLUTION
Disaster recovery is the process of preparing for recovery or continuation of IT processing tasks that support critical business
processes in the event of a threat to the IT infrastructure. Zerto’s Long Term Retention is the additional process of enabling
recovery of IT processing tasks after an extended period. This section describes Zerto general concepts to enable replication
and recovery in a virtual environment.
The following topics are described in this section:
■ “What is the Zerto Solution?”, below
■ “The Zerto Solution Architecture”, on page 10
■ “How Zerto Recovery Works”, on page 11
■ “Zerto Analytics - Overview”, on page 12
■ “Zerto Cloud Control - Overview”, on page 21
■ “Benefits of Using the Zerto Solution”, on page 23
What is the Zerto Solution?

IT Resilience Platform™
Zerto's IT Resilience Platform™ converges disaster recovery, backup, and workload mobility whether on-premises or to, from
and between hybrid and multi-cloud platforms. The platform is built on a foundation of continuous data protection (CDP) with
built-in orchestration and automation providing IT leaders with simplicity, enterprise scale and agile data protection to save
time, resources and costs. Analytics, with intelligent dashboards and live reports, provides complete visibility across multi-site
and multi-cloud environments, giving organizations confidence that business service levels and compliance needs are met.
Disaster Recovery
Zerto is built from the ground up to be the simplest, most powerful disaster recovery solution for virtualized infrastructures. By
including all the replication, recovery orchestration and automation in one simple software platform, users can recover one, all
or a subset of virtualized applications, from anywhere to anywhere, maximizing the benefits of virtualization and cloud.
Through native integration into all supported platforms, Zerto not only allows replication and recovery between any storage,
but it also protects across and between multiple hypervisors and public cloud platforms. This market-leading technology
delivers a best of breed Business Continuity/Disaster Recovery (BC/DR) solution irrespective of underlying hypervisor, public
cloud or storage.
Zerto supports replication between VMware vSphere, Microsoft Hyper-V, Microsoft Azure, Amazon Web Services (AWS),
and IBM Cloud. Zerto is the underpinning technology of hundreds of Cloud Service Providers (CSPs) globally who are leading
the way in delivering Disaster Recovery as a Service (DRaaS) capabilities.
Backup
Elastic Journal
The Zerto Elastic Journal is a new concept in data protection bringing together both short-term retention and long-term
retention capabilities. Using unified data protection workflows, powered by intelligent index and search, it enables quick
recovery of data-regardless of whether it's from a few seconds ago or a few years ago. Data gets copied from the short-term
retention storage into the long-term retention repositories. As the short-term retention is already stored on the target side,
moving data to long-term retention has no impact on production, so copies can be taken as often as needed, eliminating the
concept of "backup windows".
Workload Mobility
Workload mobility is the ability to move workloads to, from and between multiple platforms, on-premises or cloud, with
minimal business impact and no traditional infrastructure constraints. With the recent rise of cloud computing, there is now a
plethora of cloud platforms to choose from, with large players such as Microsoft Azure, AWS and IBM Cloud as well as plenty
of Cloud Service Providers (CSPs). Each of these platforms have their own attributes which make them suited to certain
Zerto Virtual Manager Administration Guide for VMware vSphere Environments - Version 7.0
Introduction To The Zerto Solution 9
Introduction To The Zerto Solution
workloads, whether through compliance, pricing or otherwise. Despite this, the cloud is not always the right option for all
workloads, and because of this, the traditional on-premises deployments with VMware vSphere or Microsoft Hyper-V are still
prevalent. Ultimately, having all of these options has led to increasing adoption of a multi-cloud and/or hybrid cloud strategy.
Organizations are challenged to ensure that workloads, whether in the cloud or on-premises, are not locked into any one
platform or vendor, and can be moved around based on where they fit best today, rather than yesterday. This is where
workload mobility comes in, removing the traditional lock-in to these platforms and allowing workloads to be moved across
platforms seamlessly, on-premises or in the cloud, including the ability to validate mobility prior to the live event without
production impact.
Zerto supports any-to-any mobility between VMware vSphere, Microsoft Hyper-V, AWS, IBM Cloud, Microsoft Azure and any
of our hundreds of Zerto-powered Cloud Service Providers (CSPs). For a full list of supported platforms and their versions
please see our Interoperability Matrix.
The Zerto Solution Architecture

Zerto helps customers accelerate IT transformation by eliminating the risk and complexity of modernization and cloud
adoption. By replacing multiple legacy solutions with a single IT Resilience PlatformTM, Zerto is changing the way disaster
recovery, retention and cloud are managed. This is done by providing enterprise-class disaster recovery and business
continuity software for virtualized infrastructure and cloud environments.
In on-premise environments, Zerto Virtual Replication (ZVR) is installed with virtual machines to be protected and recovered.
In public cloud environments, Zerto Cloud Appliance (ZCA) is installed in the public cloud site that is to be used for recovery.
The installation includes the following:
■ Zerto Virtual Manager (ZVM): The ZVM is a Windows service, running on a dedicated Windows VM, that manages
everything required for the replication between the protection and recovery sites, except for the actual replication of data.
The ZVM interacts with the hypervisor management user interface, such as vCenter Server or Microsoft SCVMM, to get
the inventory of VMs, disks, networks, hosts, etc. It also monitors changes in the hypervisor environment and responds
accordingly. For example, a VMware vMotion operation, or Microsoft Live Migration of a protected VM from one host to
another is seen by the ZVM, and the Zerto User Interface is updated accordingly.
■ For the maximum number of virtual machines, either being protected or recovered to that site, see Zerto Scale and
Benchmarking Guidelines.
■ Virtual Replication Appliance* (VRA): A VRA is a virtual machine installed on each hypervisor host where VMs are to be
protected from or to. The VRA manages the replication of data from protected virtual machines to the recovery site. The
target VRAs are responsible for maintaining any protected VMs disks. VMware limits the number of SCSI Controllers (4
per VM) and targets per Controller (15 per controller), leaving a maximum of 60 SCSI targets per VM. When managing a
larger quantity of virtual disks, Zerto utilizes Virtual Replication Appliance Helpers (VRA-H), which act as a disk box with
no IP and nearly no resources. VRA-Hs are spun up and down by Zerto automatically when nearing the 60-disk limit of the
VRA or last VRA-H.
■ For the maximum number of volumes, either being protected or recovered to that site, see Zerto Scale and
Note: *In vSphere installations, OVF to enable installing Virtual Replication Appliances.
■ Virtual Backup Appliance (VBA): A Windows service that manages File Level Recovery operations within the Zerto
solution.
■ Zerto User Interface: Recovery using the Zerto solution is managed in a browser or, in VMware vSphere Web Client or
Client console.
When Zerto is installed to work with an on-premise hypervisor it also comprises the following component:
■ Data Streaming Service (DSS): Installed on the VRA machine, and runs in the same process as the VRA. It is responsible
for all the retention data path operations.
The Zerto Solution Architecture 10

The following diagram shows how the main Zerto components are deployed across hypervisor-based enterprise sites to
provide disaster recovery across these sites.1
When you plan to recover the enterprise site to a public cloud, ZCA is installed in the cloud environment. ZCA comprises the
same components but the VRA runs as a service, so that the ZVM, VRA, and VBA all run as services on a single virtual machine
instance in the public cloud.
For the architecture diagrams when one of the sites is a cloud service provider, see the Zerto Cloud Manager Administration
Guide.
How Zerto Recovery Works

Installing Zerto Virtual Replication installs the Zerto Virtual Manager, which sits in the hypervisor layer on the enterprise site.
You manage the Zerto Virtual Manager, one on each of the protected and recovery sites, using the Zerto User Interface.
Zerto also provides a set of RESTful APIs and PowerShell cmdlets to enable incorporating some of the disaster recovery
functionality within scripts or programs.
In the protected site you define the virtual machines that you want to replicate, either individually or together, as a virtual
protection group (VPG). The virtual machines that you include in the VPG can come from one or more hypervisor hosts. In this
way, you can protect applications that run on multiple virtual machines and disks as a single unit – a VPG. An example of an
application that runs on multiple virtual machines includes software that requires a web server and database, both of which run
on virtual machines different than the virtual machine where the application software runs.
A virtual machine can be included in several VPGs so that you can recover it to several sites, depending on the needs of the
organization. For example the same workload can be protected to a local or a remote location as well as to the cloud. Using
several recovery sites also enables migrating disaster recovery datacenters from one location to another.
Note: DVD drives cannot be protected.
Every write is copied by Zerto and sent, asynchronously, to the recovery site, while the write continues to be processed on the
protected site. For greater efficiency and performance, the write can be compressed before being sent to the recovery site with
throttling techniques being used to prioritize network traffic.
On the recovery site the write is written to a journal managed by a Virtual Replication Appliance (VRA). Each protected virtual
machine has its own journal. Every few seconds, a checkpoint is also written to each journal. These checkpoints ensure write
order fidelity and crash-consistency to each checkpoint. During recovery you pick one of these crash-consistent checkpoints
and recover to this point. Additionally, checkpoints can be manually added by the administrator, with a description of the
checkpoint. For example, when an event is going to take place that might result in the need to perform a recovery, you can
pinpoint when this event occurs as a checkpoint written to each journal.
1. For the architecture diagrams when one of the sites is a cloud service provider, see Zerto Cloud Manager Administration Guide.
How Zerto Recovery Works 11

The VRA manages the journals for every virtual machine that will be recovered to the hypervisor hosting that VRA. It also
manages images of the protected volumes for these virtual machines. During a failover, you can specify that you want to
recover the virtual machines in the VPG using the last checkpoint or you can specify an earlier checkpoint, in which case the
recovery of the mirror images under the VRA are synchronized to this checkpoint. Thus, you can recover the environment to
the point before any corruption and ignore later writes in the journal that were corrupted, regardless of the cause of the
corruption, such as a crash in the protected site or a virus attack.
To improve the RTO during recovery, the user is able to start working even before the virtual machine volumes on the recovery
site have been fully synchronized. Every request is analyzed and the response returned either from the virtual machine directly
or from the journal if the information in the journal is more up-to-date. This continues until the recovery site virtual
environment is fully synchronized, up until the last checkpoint or an earlier checkpoint, when the integrity of the protected site
was assured.
When recovery to a point is required that is further in the past than the time saved in the journal, you can restore from files
created during the Retention process. Retention is an extension of disaster recovery, with the virtual machine files, such as the
configuration and virtual disk files, saved to a repository for up to one year. These files are then used to restore the virtual
machines to the point of the stored retention sets at the recovery site.
Zerto Analytics - Overview

Insight-driven data analytics for a new era of data protection
As IT infrastructures become more complex and demands for performance rise, companies require visibility and control over
protected IT environments. Visibility of your entire IT infrastructure (both on-premises or cloud) is imperative to monitor,
analyze and plan your environment and resource requirements to ensure zero interruptions. To have confidence that business
Service level Agreements (SLAs) are met, you need not only visibility and insights to address existing issues, but also to be able
to plan for your future data protection needs.
Zerto Analytics delivers these capabilities through a single interface and one user experience for a comprehensive overview of
your entire multi-site, multi-cloud environment. Utilizing metrics such as average recovery point objective (RPO), network
performance, and storage consumption, Zerto Analytics delivers real-time and historical insights on the health and protection
status of your applications and data. Through Intelligent dashboards you can spot trends, identify anomalies, and troubleshoot
issues in network, RPO, and other business SLAs. With these insights, you can eliminate inefficiencies and allocate resources
effectively to mitigate data loss, reduce downtime and take control of your data.
New Resource Planner
With Resource Planner, you can ensure your data protection needs are met as your IT environment grows and diversifies. Use
the Resource Planner to monitor and perform analysis of your protected environment to determine the required compute,
storage and networking resources for any or all virtual machines (VMs) within your environment, both on-premises or in the
cloud. Build out your data protection strategy with 'what-if' scenario modeling to plan for VM protection across clouds or on-
premises, or to transition from on premises to cloud, or to protect additional VMs within your environment.
Zerto Analytics is developed with an API first approach, therefore, everything that is presented in the GUI, is also available with
APIs. The APIs are delivered with Swagger open source that help you develop and test REST integration using standardized
examples. This allows to easily populate custom portals with Zerto Analytic content.
See also:
“Before Getting Started with Zerto Analytics”, on page 13
“Accessing the Zerto Analytics Portal”, on page 13
“Accessing Zerto Mobile”, on page 13
“Zerto Analytics APIs”, on page 13
“Using the Zerto Analytics Portal”, on page 13
“End-User Analytics for Service Providers”, on page 15
Zerto Analytics - Overview 12

“Zerto Analytics Product Feature Matrix”, on page 16

“Zerto Analytics Secure Architecture”, on page 17
Before Getting Started with Zerto Analytics

Verify the following:
■ At least 1 ZVM running Zerto 5.0 or higher.
■ The checkbox Enable Support notification and product improvement feedback is selected. This is accessed in the ZVM
application in Settings > About.
■ Internet access.
■ A myZerto account using your corporate email address.
Accessing the Zerto Analytics Portal

Zerto Analytics is accessed from one of the following locations:
■ A URL: https://analytics.zerto.com
■ myZerto: www.zerto.com/myzerto. Sign in using your credentials and select the Analytics tab.
■ From the ZVM Application Menu tab: Click to open Zerto Analytics in a new browser tab.
Accessing Zerto Mobile

The Zerto Mobile app is available for both iOS or Android operating systems.
Sign in using your myZerto credentials.
Zerto Analytics APIs

Zerto Analytics is developed with an API first approach, therefore, everything that is presented in the GUI, is also available with
APIs. APIs are available the same version as their GUI counterparts.
Zerto Analytics APIs are available in OpenAPI Specification.
Zerto Analytics API documentation can be accessed via the link: https://docs.api.zerto.com/
Using the Zerto Analytics Portal

After accessing Zerto Analytics, the Dashboard opens by default. This view displays a summary of the entire protected
environment, including the average RPO and VPG health, site details and topology, active alerts, running tasks and events.
Use the What’s New and Help widgets in Zerto Analytics to learn more about each of the features available in
Zerto Analytics.
In addition to the Dashboard, there are additional views that provide details on the overall health of your environment.
■ Use the sites topology to identify sites without remote protection, to identify network issues and to identify cloud issues.
■ To handle any issues in the ZVM site, in the Dashboard tab > SITES area, click the icon Open ZVM in new tab. This routes
you to the specific ZVM site.
■ In the same Sites area, click the Menu button to navigate to the VPGs, Alerts or Tasks for the specified site.

See the following sections:

1. Monitoring Alerts, Events and Tasks
2. Troubleshooting VPGs
3. Reviewing Reports
Monitoring Alerts, Events and Tasks

From the Monitoring tab review the active alerts, alerts history, running events and tasks.
To see active alerts, events or tasks from a specific ZVM, use the filter in the top left of the screen .
Events are displayed for the last 24 hours by default. Use the date selector to filter the Events List by date.
To view a history of alerts, select the Events tab and Alert History in the sub menu. Inactive alerts are displayed for the
selected time range.
TIP:
Click the Alert ID and Event ID to open the help and view the full details for that specific alert or event.
Troubleshooting VPGs
From the VPGs tab, review the list of VPGs with Errors and Warnings. In the VPGs status area, click either VPGs with Warnings
or VPGs with Errors to filter the VPGs list.
To review the status of a VPG, click in the column of the VPG you want to review to open the VPG Details page. From here you
can view the details of the virtual machines associated with the VPG as well.
If you want to view the details of another VPG, select the VPG from the VPGs drop-down list
TIP:
To further investigate about a selected VPG, click the VPG History button, and select to view either the RPO, Journal or
Network Reports page. (See Reviewing Reports for more details about Reports).
Reviewing Reports
The SaaS Analytics reports provide real-time and historical data analysis. ECE and CSP licenses can view up to 90 days of
report history. Use the date controller to filter your reports. Statistics are displayed according to the selected time frame.
TIP:
Zoom in to view more granular data by selecting and dragging your mouse over the selected time frame.
From the Reports tab, review the RPO, Journal and Network performance history on the VPGs.
Use the Network reports for reviewing the network history for any VPG or Site. You can also view the network summary for a
selected time frame, the network performance history and IOPs history.

Use the RPO reports for viewing a summary to see if RPO SLAs are being met, the RPO history and the RPO breach table for
viewing when the specific time breach occurred and the duration of the SLA breach.
Use the Journal reports for understanding if resilience is at risk due to journal storage capacity and plan for storage growth.
End-User Analytics for Service Providers

Service providers can filter their customers in Zerto Analytics using the ZORG filter located at the top of the screen.
Using the ZORG filter, CSPs can see historical data and status for any individual customer.
Additionally, using the Zerto Analytics APIs, CSPs can create custom reports and automate reporting delivery of real-time
content to their customers. The APIs can also be used to provide content for customer portals.
Planning your Data Protection Strategy

Zerto Analytics includes the Planning tab; a resource planning capability that performs continuous monitoring and analysis to
determine the required storage and networking resources for your data protection strategy. In addition, it provides
recommendation for the required number of ZCAs when replicating to Azure. Analysis can be performed for any or all VMs
within your VMware environment. This capability uses data collected from VMware sites and does not require any new
installation or license.
The planning capability delivers visibility and forecasting into:
■ Zerto protected VMs from vSphere to a public cloud.
■ Zerto protected VMs from vSphere to an on-premise site.
■ The cost benefit analysis between deciding whether to protect VMs on-premises or in public cloud.
The resource Planning capability provides overall sizing recommendations, including number of ZCAs, WAN, Total Journal Size
and Total Recovery Disk Size.
It also includes VM configuration details (CPU, RAM and Total Size) collected from vCenter, per VM calculated performance
counters (Avg. Throughput, Avg. IOPS) and the Required Journal Size estimation per VM.
To begin planning your data strategy:

1. Click on the Planning tab; the VM Selection window opens.
2. From the VM Selection window, select your Source Site VMs and Target Platform for replication.
3. Click Save; The Planning view is displayed.

Use the Help widgets to learn more about each of the features available in Planning.

Zerto Analytics Product Feature Matrix

The following table lists the available features and from which ZVM version it’s supported:
KEY
Supported
Not Supported
* Supported partially,
see comments for
further details.
FEATURE ZVM V5.0 AND ZVM V5.5 AND ZVM V6.0 AND ZVM V6.5 AND ZVM V7.0 AND COMMENTS
ABOVE ABOVE ABOVE ABOVE ABOVE
Dashboard  *    Events are available
from v5.5U4 and
above.
VPG List      --
VPG Details *     Journal size data is
available from v5.5 and
above.
Monitoring: Alerts      --
Monitoring: Tasks      --
Monitoring: Events  *    Events are available
from v5.5U4 and
above.
Reports: RPO      --
Reports: Journal *     Journal size data is
available from v5.5 and
above.
Reports: Network      --
Site List & Topology      --
End-User (ZORG)  *    ZORG filter is available
Filter from v5.5u4 and above.
90 Days History for * *    Journal size data is
ECE and Cloud available from v5.5 and
above.
Network reports are
available from v6.0.
Licensing Usage      --
Storage Analytics    *  Storage Analytics is
Tab available from v6.5u2.
Storage Analytics for    *  Storage Analytics is
VPG Volumes available from v6.5u2.
Planning      Zerto Resource Planner
is available from
v7.0U1.

Zerto Analytics Secure Architecture

Transmitted Zerto Analytics data is securely stored and can be securely viewed and exported by the user. The data is also used
by the analytics engine to provide advanced guidance and analysis. The following section describes the secure architecture that
provides the path to transmit, the datastore where the data is housed, and access of that data.
ZVM sends all the data over HTTPS TLS 1.2 only to https://zerto-mobile-data.zerto.com. The data is stored in the Samples
Storage in the SaaS backend, located in the public cloud. All communication to and from the cloud are encrypted (HTTPS)
using TLS 1.2. Furthermore, the data is isolated in the SaaS backend and accessible only within the backend itself an via VPN
from Zerto. End users are authenticated using their myZerto credentials.
Transmission and Storage of Site Status

ZVM transmits current site status over secured HTTPS to the SaaS backend in short (~1 minute) intervals. The SaaS backend
collects site status data from all transmitting sites and stores it in the “Samples Storage”. The “Samples Storage” is secured
inside an internal protected network and is accessible only within the backend itself and via VPN from Zerto. The samples are
kept in the “Samples Storage” of the Zerto Analytics cloud for 30 days to support 30 days of report history.
User Authentication and Authorization

Before sending any request to the backend, a client (browser/mobile/RESTful client) must obtain a security token which
securely identifies the user. The security token is achieved by authenticating the user against the Identity Provider (IDP). Each
client request contains the security token. For each request, the backend validates the security token and authorizes execution
of the request according to the user’s identity which is part of the security token’s payload.
Reporting Historical Data

For each client request, the backend gets the latest data from the relevant samples as stored in the “Samples Storage”. The
relevant data is sent to the client.
Zerto Analytics Collected Data

The Zerto Analytics dashboard utilizes several metrics to deliver detailed monitoring and reporting of your multi-site Multi-
Cloud environment. The following table was created to address privacy and security issues surrounding data collection.

This table outlines each piece of information that is collected and sent from the ZVM for Zerto Analytics.
COMPONENTS PARAMETER DESCRIPTION

Alerts
affectedZorgs List of ZORGs affected by the alert.
affectedZorgIds List of ZORG IDs affected by the alert.
alertIdentifier Internal alert identifier.
affectedVpgIds List of VPG IDs affected by the alert.
alertType Help identifier associated with the alert.
createdDateinUTC The time the alerts was created.
description Alert description.
entityType The entity for which the alert applies.
severity Alert severity (Warning or Error).
site The site which is affected by the alert.
Tasks
taskName The task type.
taskIdentifier Unique identifier of the task.
status The status of the task,
startedDateInUtc The time the task started.
completedDateInUtc The time the task was completed.
progress Progress of the task in percentage of completion.
sitename Name of the site.
protectedDataInMB Total data protected in the ZVM site.
siteIdentifier Internal site identifier.
transmitterCycleInSec Number of seconds between two (2) data transmissions.
type Site environment.
initiatedBy Name of user who initiated task.
information Task details.
relatedVpgsList List of VPGs related to the task.
relatedSitesList List of sites related to the task.

Site
collectionTimeInUtc Time the ZVM data was collected.
documentVersion Version of the document.
hashedLicenseKey ZVM license hashed.
isTransmissionEnabled Whether transmission of data was enabled by the user.
sitename Name of the site.
protectedDataInMB Total data protected in the ZVM site.
siteIdentifier Internal site identifier.
transmitterCycleInSec Number of seconds between two (2) data transmissions.
type Site environment.
utcOffsetInMinutes Offset of the site time from UTC, in minutes.
version Zerto Virtual Manager version.
vpgsAlertsCount Number of active alerts in ZVM.
zorgsCount Number of ZORGs in the ZVM site.
zvmIp IP of the ZVM
VPGs
actualJournalHistoryInSeconds The actual journal history, in seconds.
actualRpoSeconds Time since the last checkpoint was written to the journal in
seconds.
configuredJournalHistoryInMinutes Configured journal history, in minutes.
configuredRpoSeconds Configured RPO, in seconds.
earliestRecoveryPointLocalDateInUtc Time of the earliest checkpoint in the journal.
priority Priority specified for the VPG.
protectedSite Protected site details (Site ID, Site Name, Site Type and ZVM
version).
recoverySite Recovery site details (Site ID, Site Name, SiteType and ZVM
version).
status Status of the VPG.
subStatus Substatus of the VPG.
vpgIdentifier Identifier of the VPG.
vpgName Name of the VPG.
zorgName Name of the Zerto organization set up in the Zerto Cloud
Manager, which uses this VPG.

VMS
IOPS IO per second between all the applications running on the virtual
machine in the VPG and the VRA, that sends a copy to the
remote site for replication.
journalHardLimit Maximum journal size in MBs, or in a percentage of the virtual
machine volume size.
journalWarningThreshold Journal size in MBs, or in a percentage of the virtual machine
volume size, that generates a warning when the journal is nearing
its hard limit.
outgoingBandWidthInMbps Bandwidth throttling defined for the virtual machines.
provisionedStorageMb The storage provisioned for the virtual machine in the recovery
site.
throughputInMB MBs of all the applications running on the virtual machine being
protected.
usedJournalStorageMb Storage used by the virtual machine at the recovery site for
Journals.
usedStorageMb Storage used by the virtual machine at the recovery site.
vpgName The name of the VPG, of which the VM is associated.
vmIdentifier ID of the VM.
vmName Name of the VM.
VRAs
vraName Name of the VRA.
vraVersion Version of the VRA.
Events
eventIdentifier The identifier of the event.
eventCategory Category of the event. (Possible values: VPG, VRA, Site).
eventType The type of event.
siteIdentifier The internal site identifier related to the event.
zorgIdentifier The identifier of the Zerto organization (ZORG), defined in the
Zerto Cloud Manager.
zorgName The name of the Zerto organization (ZORG) set up in the Zerto
Cloud Manager.
description The event description.
occurredOnInUTC The date the event occurred.
eventCode The event code.
eventCompletedSuccessfully Whether the event completed successfully or not.
ZORGs
zorgIdentifier The identifier of the Zerto organization (ZORG), defined in the
Zerto Cloud Manager.
zorgName The name of the Zerto organization (ZORG) set up in the Zerto
Cloud Manager.

Datastores
datastoreIdentifier The datastore identifier.
datastoreName The datastore name.
devices The datastore device.
type The datastore type.
capacityInBytes The datastore capacity.
usedInBytes The datastore usage. (Possible values: journal usage; scratch
usage; protected usage; recovery usage; appliance usage; other
non-Zerto usage)
Volumes
datastore The owning datastore.
isThisProvisioned Provision type.
owningVm The virtual machine on which the volume is attached.
path The volume path.
protectedVm The protected virtual machine to which the volume is related.
size The volumes used storage.
volumeType The volume type.
vpg The VPG to which the volume is related.
Planning
Metrics are WriteKBps - Hourly Avg. The hourly average data write rate.
collected for all VMs WriteIOPS - Hourly Avg. The hourly average IO count per second.
from the source site.
VM ID The virtual machine identifier.
Datacenter Name The datacenter name.
Datacenter ID The datacenter identifier.
Host Name The host name.
Host ID The host identifier.
Cluster ID The cluster identifier.
Cluster Name The cluster name.
Folder The VM folder.
Configured CPU The configured CPU.
Configured RAM The configured RAM.
Provisioned Size (GB) The provisioned storage .
Used Size (GB) The used storage.
Disk Count Number of virtual disks.
Zerto Cloud Control - Overview

The Zerto Cloud Control includes the following features:
■ Upgrade Manager
■ Tenants
See also:
Zerto Cloud Control - Overview 21

■ “Before Getting Started with Zerto Cloud Control”, on page 22

■ “Accessing the Zerto Cloud Control”, on page 22
■ “Using Upgrade Manager”, on page 22
■ “Using Tenants”, on page 22
Before Getting Started with Zerto Cloud Control

Verify the following:
■ Enable Zerto SaaS features check box is selected. This is accessed in the ZVM application in Settings > About.
■ Internet access.
■ A myZerto account using your corporate email address.
Accessing the Zerto Cloud Control

Zerto Cloud Control is accessed from one of the following locations:
■ From a URL: https://cloudcontrol.zerto.com
■ From myZerto: www.zerto.com/myzerto. Sign in using your credentials and select the Cloud Control tab.
Using Upgrade Manager

The Upgrade Manager feature allows Cloud Service Providers to remotely upgrade their end customer sites. This allows CSPs
to keep their customers Zerto software always up to date. It also allows Cloud Service Providers an overall view of all their end
customers’ ZVR version.
The remote upgrade functionality has the following pre-requisites:
■ The customers ZVR instance is paired to a CSP-deployed ZCC and does not have a perpetual license applied.
■ The end customer Zerto instance should be able to transmit over port 443.
Use the Help widgets in Upgrade Manager to learn more about each of the features available in the Upgrade Manager.
Using Tenants
The Tenants feature allows Cloud Service Providers to register new and existing enterprise customers to the respective ZORG
for that customer. In the ZORG registration, the CSP selects the Product Type. The product type can include features such as
One-To-Many and Long Term Retention.
Use the Help widgets in Tenants to learn more about each of the features available in the Upgrade Manager.
Zerto Cloud Control - Overview 22

Benefits of Using the Zerto Solution

Datacenter optimization and virtualization technologies have matured and are now commonly used in IT infrastructure. As
more applications are deployed in a virtualized infrastructure, there is a growing need for recovery mechanisms that support
mission critical application deployments while providing complete BC and DR.
Traditional replication and disaster recovery solutions were not conceived to deal with the demands created by the
virtualization paradigm. For example, most replication solutions are not managed in the hypervisor layer, considering the
virtual machines and disks, but at the physical disk level. Hence they are not truly virtualization aware.
The lack of virtualization awareness creates a huge operational and administrative burden. It also results in operational
inflexibility. The Zerto solution has been designed to resolve these issues by being fully virtualization aware.
See the following topics:
■ Fully Virtual – Sits in the Hypervisor or Cloud
■ Hardware Agnostic
■ Hypervisor Agnostic
■ Focus is on the Application, Not the Physical Storage
■ Compatibility Across Virtual Environments – Cross-Hypervisor Platform and Version Agnostic
■ Fully Scalable
■ Efficient Asynchronous Replication
■ One-Click Failover and Control of the Recovery Process
■ One-Click Migration
■ File and Folder Recovery
■ Long Term Retention
■ Policy-based
■ Minimal RPO
■ WAN Optimization Between Protected and Recovery Sites
■ WAN Resilience on Both the Protected and Recovery Sites
■ DR Management Anywhere
Fully Virtual – Sits in the Hypervisor or Cloud

Zerto software sits in the hypervisor level. Protection groups are configured with virtual machines and virtual disks, without the
need to consider the physical disks.
Hardware Agnostic
Because the Zerto solution manages recovery of virtual machines and virtual disks only, it does not matter what hardware is
used in either the protected or recovery sites; it can be from the same vendor or different vendors. With the Zerto solution, the
logical storage is separated from the physical storage so that the vendor and actual type of storage hardware do not need to be
considered.
Zerto provides a workload mobility and protection layer providing seamless connectivity, portability, protection, orchestration,
and application encapsulation of workloads across clouds without vendor lock-in. High scale, mission critical applications, and
data are encapsulated, as well as features, specifications, and configurations, and can be seamlessly migrated across different
servers, storage, hypervisors, and clouds without any disruption to business services.
With Zerto, IT managers can choose the right infrastructure for the right use case for the right price. One application can
leverage several different environments for disaster recovery, bursting, production, retention, testing, and development. With
Zerto there is no vendor lock-in to a cloud, technology, or vendor. Any choice, any cloud, any technology, any price, any service
level is available in minutes for any workload.
Hypervisor Agnostic
Zerto runs both in VMware vCenter Server and Microsoft SCVMM. It is compatible with VMware hypervisor management
features, such as vMotion and Microsoft hypervisor management features, such as Live Migration.
Benefits of Using the Zerto Solution 23

Focus is on the Application, Not the Physical Storage

By considering the physical disk level and not the virtual disk level, traditional replication is not truly application aware. Even
virtual replication recovers block writes at the SCSI level and not at the application level. Zerto is truly application focused,
replicating the writes from the application in a consistent manner.
Compatibility Across Virtual Environments – Cross-Hypervisor Platform and Version Agnostic

Zerto enables replication across multiple hypervisor managers, such as VMware vCenter Server and Microsoft SCVMM, and
to public clouds such as Amazon Web Services (AWS) or Microsoft Azure. You can protect virtual machines in one hypervisor
platform and recover to a different hypervisor platform. This feature can also be used to migrate virtual machines to a different
hypervisor platform.
Also, virtual machines running in one version a hypervisor can be recovered in a different version of the same type of
hypervisor, as long as Zerto supports the hypervisor versions, virtual machines can be protected across versions.
Fully Scalable
Zerto enables defining software-only Virtual Replication Appliances (VRAs) on each hypervisor host to manage the replication
of virtual machines on that host. Increasing the number of hypervisor hosts is handled by defining a new VRA on each new
host. There is no need to install additional software to the hypervisor management tool, such as VMware vCenter Server or
Microsoft SCVMM, to handle additional hosts or virtual machines and no need to consider additional hardware acquisitions.
Efficient Asynchronous Replication

Writes are captured by the Zerto software in the hypervisor level, before they are written to the physical disk at the protected
site. These writes are sent to the recovery site asynchronously, thus avoiding long distance replication latency for the
production applications.
Also, because these writes are captured and sent to the recovery site, it is only the delta changes and not the whole file or disk
that is sent to the recovery site, reducing the amount of network traffic, which reduces WAN requirements and significantly
improves the ability to meet both RPO and RTO targets.
One-Click Failover and Control of the Recovery Process

When recovery is required, the administrator clicks on a button in the Zerto User Interface to initiate failover. This means that
controlling the start of a recovery remains in the hands of the administrator, who can decide when to initiate the recovery and,
by selecting a checkpoint, to what point-in-time to recover to.
One-Click Migration
Application migrations can be resource intensive projects that take weeks of planning, execution, and downtime. With Zerto
migrations are greatly simplified and can be completed without extended outages or maintenance windows and across
different types of hardware and even different hypervisors, such as VMware ESXi or Microsoft Hyper-V. Migrations across
different versions within a type of hypervisor, such as from a VMware vCenter environment to a vCloud environment or even
cross hypervisor migration, such as migration from a vCenter environment to a Hyper-V environment is as easy as a migration
from one site to another using the same hypervisor infrastructure.
File and Folder Recovery

You can recover specific files and folders from the recovery site for virtual machines that are being protected by Zerto and
running Windows or Linux operating systems. You can recover the files and folders from a specific point-in-time.
You can choose to recover one or several files or folders from the recovery site.
Long Term Retention

Zerto provides a Retention option that enables saving the protected virtual machines for up to one year in a state where they
can be easily deployed. Because retention uses the same mechanism used for disaster recovery, there is no performance

impact on the production site, since the processing is performed on the recovery site. The data copied for retention are fixed
points saved daily, weekly or monthly.
Note: Zerto recommends weekly retention sets.
Policy-based
In the protected site you define the virtual machines that you want to recover, either individually or as groups, as a virtual
protection group (VPG). The virtual machines that you include in the VPG can come from one or more hypervisor hosts. In this
way, you can protect applications that run on multiple virtual machines and disks as a single unit, in a single VPG.
Minimal RPO
The Zerto solution utilizes continuous data protection, sending a record of every write in the virtual protection group to the
recovery site. The transfer of this information is done over an optimized WAN asynchronously. If recovery is required, all the
data that was transferred to the recovery site is available resulting in recovery within the requested RPO.
WAN Optimization Between Protected and Recovery Sites

Using compression to minimize bandwidth and other techniques such as throttling to prioritize network traffic to reduce the
impact on day-to-day operations, you can make sure that the communication between the protected and recovery sites is fully
optimized.
The Zerto solution also uses signature matching to reduce the amount of data sent across the WAN. During synchronization of
the protected site and recovery site for every virtual machine in a VPG, Zerto maintains a map of disk sectors so that if there is
a need to resynchronize sites, the map signatures can be used to ensure that only data where changes occurred are passed
over the WAN.
WAN Resilience on Both the Protected and Recovery Sites

The Zerto solution is highly resilient to WAN interruptions. In order to reduce storage overhead used for replication purposes,
on WAN failure or when the load over the WAN is too great for the WAN to handle, Zerto starts to maintain a smart bitmap in
memory, in which it tracks and records the storage areas that changed. Since the bitmap is kept in memory, Zerto does not
require any LUN or volume per VPG at the protected side. The bitmap is small and scales dynamically, but does not contain any
actual IO data, just references to the areas of the protected disk that have changed. The bitmap is stored locally on the VRA
within the available resources. Once the WAN connection resumes or the load returns to normal traffic, Zerto uses this bitmap
to check whether there were updates to the protected disks and if there were updates to the disks, these updates are sent to
the recovery site.
DR Management Anywhere
With the Zerto solution everything is managed from a standalone browser-base user interface, enabling disaster recovery
management from anywhere using any device.

CHAPTER 2: ACCESSING THE ZERTO
USER INTERFACE
You manage the protection and replication of virtual machines in vSphere, between the protected and recovery sites, using the
Zerto User Interface. On first access to the user interface, you might have to add a security certificate to set up secure
communication. Zerto also provides a set of RESTful APIs and PowerShell cmdlets to enable incorporating some of the disaster
recovery functionality within scripts or programs.
You manage the protection and replication of virtual machines between the protected and recovery sites, using one of the
following:
■ The Zerto Virtual Manager Web Client.
■ The vSphere Web Client.
■ The vSphere Client console.
Note: For a list of supported browsers, see Interoperability Matrix for All Zerto Virtual Replication Versions.
Note: You must exclude the following folders from antivirus scanning:
Zerto Virtual Replication

%ProgramData%\Zerto\Data\zvm_db.mdf
C:\Program Files\Zerto\Zerto Virtual Replication\Zerto.Zvm.Service.exe
C:\Program Files\Zerto\Zerto Virtual Replication\Zerto.Vba.VbaService.exe
C:\Program Files\Zerto\Zerto Virtual Replication\Zerto Online Services
Connector\Zerto.Online.Services.Connector.exe
C:\Program Files\Zerto\Zerto Virtual Replication\Embedded DB Manager
Service\Zerto.LocalDbInstanceManagerService.exe
Failure to do so may lead to the Zerto Virtual Replication folder being incorrectly identified as a threat and in some
circumstances corrupt the Zerto Virtual Replication folder.
The following topics are described in this chapter:

■ “Using the Zerto User Interface From a Browser”, below
■ “Using the Zerto User Interface Within vSphere”, on page 27
■ “Adding a Security Certificate”, on page 28
■ “Working With the Zerto User Interface”, on page 30
Using the Zerto User Interface From a Browser

1. In a browser, enter the following URL:
https://zvm_IP:9669
where zvm_IP is the IP address of the Zerto Virtual Manager for the site you want to manage.
2. Login using the user name and password for the vCenter Server connected to the Zerto Virtual Manager.
Accessing the Zerto User Interface 26
Accessing the Zerto User Interface
Using the Zerto User Interface Within vSphere

The Zerto User Interface is embedded in both the vSphere Web Client and Client console as a plug-in. When accessing the
Zerto User Interface from within vSphere the interface is available via a tab in the vSphere user interface. When using the Zerto
User Interface via vSphere you add a virtual machine, that is not already protected in a VPG, directly via the Zerto tab for the
virtual machine in the vSphere Web Client and Client console.
Using the vSphere Web Client

You can use the VMware Web Client to manage Zerto.
The vSphere Web Client is a service that when installed enables a browser-based interface for configuring and administering
virtual machines enabling you to connect to a vCenter Server system to manage an ESXi host through a browser. The following
procedure describes how to configure the vSphere Web Client to display Zerto dialogs.
This procedure is valid for vSphere Web Client version 5.1 communicating with vCenter Server from version 5.0 and higher.
Note: The following procedure assumes that the vSphere Web Client version 5.1 has been installed. Although you can run the
vSphere Web Client version 5.1 with vSphere Server 5.0 and 5.1, when installing the vSphere Web Client you need access to a
vSphere Server version 5.1 which includes an option for single sign on, required by the vSphere Web Client installation.
Note: Setting up Zerto to be used via the vSphere Web Client disables the use of other VMware plug-ins, such as VDP and
VSA, causing them to disappear from the web client. This is a known VMware problem, see http://kb.vmware.com/
selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2042455. To resolve this issue, set up two
web clients, on different servers. On one run Zerto and on the other run the VMware plug-ins.
To set up the vSphere Web Client to work with Zerto:

1. When the vSphere Web Client service is installed on a Microsoft Windows platform:
a) Copy and run VsphereWebClientPluginEnabler.exe to the machine where you run the web client service. This file is
located in the Zerto Virtual Replication folder under the folder where Zerto Virtual Replication was installed. You can
copy VsphereWebClientPluginEnabler.exe to any folder on the relevant machine.
b) Run VsphereWebClientPluginEnabler.exe as an administrator.
2. When the vSphere Web Client is installed on a Linux platform, via the vCenter Server Linux Virtual Appliance (vCSA):
■ In the directory /var/lib/vmware/vsphere-client, open the webclient.properties file in a text editor and add the
following to the file:.
scriptPlugin.enabled = true
3. Restart the vSphere Web Client service.
Note: After the service has started you might have to wait a few minutes before you can open the vSphere Web Client in
your browser.
To use the vSphere Web Client:

1. Log in using the vCenter Server access credentials (user name and password) for the vCenter Server connected to the
Zerto Virtual Manager.
2. In the browser, navigate to a vSphere node supported by Zerto, such as the root node or a virtual machine, and choose the
Classic Solutions tab, which is now displayed after the Related Objects tab.
Note: With Chrome and Firefox browsers, you must load the script plug-in page in an external tab at least once before it
appears inside the vSphere Web Client. The Classic Solutions tab is displayed when there is a plug-in installed, in this case
the Zerto user interface plug-in.
3. If prompted, allow blocked content to be displayed.
Using the Zerto User Interface Within vSphere 27

4. If more than one plug-in is installed, click Zerto to display the Zerto user interface.
Using the vSphere Client Console
To use the vSphere Client console:

1. Login using the user name and password for the vCenter Server connected to the Zerto Virtual Manager.
2. Access the Zerto tab, displayed for the root node.
Note: The Zerto tab is also displayed for a datacenter node showing the same information as for the root node. For a virtual
machine or vApp node the Zerto tab displays information specific to the virtual machine or vApp.
Adding a Security Certificate

Communication between the Zerto Virtual Manager and the user interface uses HTTPS. On the first login to the Zerto User
Interface, you must install a security certificate in order to be able to continue working without each login requiring acceptance
of the security.
To install a security certificate for the Zerto User Interface:

On first access to the Zerto User Interface, if you haven’t installed the security certificate, a security alert is issued.
Note the following:
■ To run this procedure run Microsoft Internet Explorer as administrator. The procedure is similar for Google Chrome and for
Mozilla Firefox.
■ Access the Zerto User Interface using the IP and not the name of the machine where Zerto is installed.
1. Click View Certificate.
The Certificate dialog is displayed.
2. Click Install Certificate.
The Certificate Import wizard dialog is displayed.
3. Follow the wizard: Place all the certificates in the Trusted Root Certification Authorities store: Select the Place all
certificates in the following store option and browse to select the Trusted Root Certification Authorities store.
Adding a Security Certificate 28

4. Continue to the end of the wizard. Click Yes when the Security Warning is displayed.
5. Click OK that the installation was successful.

6. Click OK when prompted and then Yes in the Security Alert dialog to continue.
Adding a Security Certificate 29

Working With the Zerto User Interface

After logging on to the Zerto User Interface for the first time, the dashboard is displayed. The dashboard provides summary
information about the status of the site, as shown in the following diagram:
Use the tabs to access the specific information you want:
Working With the Zerto User Interface 30

■ DASHBOARD: General information about the site, including the status of the VPGs being protected or recovered to the
site.
■ VPGs: All the VPGs from both the local and remote sites and provides summary details of each VPG.
■ VMs: All the protected virtual machines from both the local and remote sites and provides summary details of each virtual
machine.
■ SITES: Details of the paired sites. This tab lists all the paired sites to the local site and provides summary details of each
paired site.
■ SETUP: (On-Premise only) Details about VRAs, storage and repositories.
■ RETENTION STATUS: Details of the retention repository jobs either by VPG or virtual machine. This tab lists all the
defined retention sets and their statuses.
■ MONITORING: Details about the alerts, events and tasks for the site.
■ REPORTS: General reports.
Zerto User Interface - Subtabs

From the SETUP, RETENTION STATUS and MONITORING tabs you can see and manage details for a specific VPG and VRA
from different perspective.
For example, under SETUP, from the subtabs, you can manage VRAs, Storage/Datastores and Repositories.
Zerto User Interface - Views

Lists can be displayed with different views. For each view you can filter the information in columns via the filter icon next to
each column title. Clicking the column title enables sorting the column in ascending to descending order.
You can customize the default views or add a new view by clicking the view configuration button.
Customize a default view by selecting Show/Hide Columns and then checking the columns you want displayed. Create a new
view by selecting Create View.
Working With the Zerto User Interface 31

CHAPTER 3: INITIAL SITE
CONFIGURATION
There are a number of configuration tasks that you should do as part of the initial site configuration.
The following configuration topics are described in this chapter:
■ “Setting Up Role-based Access Control”, below
■ “Enabling Replication to the Same Site”, on page 32
■ “Sizing Considerations”, on page 34
NOTE:
To set up Long Term Retention, to monitor the repositories created for retention, and to restore VPGs from the
repositories, see Using Zerto’s Long Term Retention.
Setting Up Role-based Access Control

You can define permissions within Zerto Cloud Manager and via VMware vCenter Server.
■ Zerto Cloud Manager: Within Zerto Cloud Manager you can apply permissions to specific Zerto entities such as ZORGs,
VPGs, and sites.
■ Permissions determine the roles that apply to a specific user or user group on a specific Zerto entity.
■ Roles are a set of privileges, and privileges define an operation or a set of operations that can be performed, such as
managing a VPG or VRA.
■ Roles can be assigned to users and groups of users.
■ You can manage roles and update the privileges associated with both new roles that you create and the roles supplied
with Zerto.
■ You can then manage the permissions per Zerto entity.
For details, see the Zerto Cloud Manager Administration Guide.
■ VMware vCenter Server: VMware roles and permissions are the core of VMware infrastructure security.
■ Permissions are a combination of a user/group and a security role that is applied to some level of the VMware
Infrastructure.
■ Zerto supplies a number of default privileges that enable a VMware administrator to perform specific actions.
■ You can define additional roles and assign these roles the privileges they need.
■ All privileges are implemented at the root level, and thus apply to every object in the vCenter Server.
For details, see the “Zerto Permissions in vCenter Server”, on page 412.
Note: When upgrading vCenter Server be sure that the user entity that Zerto is using is preserved in the user/permissions
hierarchy.
Enabling Replication to the Same Site

When a single vCenter is used, for example with remote branch offices, when replicating from one datacenter to another
datacenter, both managed by the same vCenter Server, you have to enable replication to the same vCenter Server and pairing is
not required. In this case, replication to the same vCenter must be set in the Site Settings dialog.
To enable replication to the same vCenter Server:

1. In the Zerto User Interface, click SETTING ( ) in the top right of the header and select Site Settings.
The Site Settings dialog is displayed, with the default tab, Site Information, open.
2. Click the tab Policies.
Initial Site Configuration 32
Initial Site Configuration
3. Select the checkbox Enable Replication to Self.

4. Click APPLY or SAVE.
The Zerto Virtual Manager, when used to protect to itself, can manage the protection of up to 5000 virtual machines.
Enabling Replication to the Same Site 33

Initial Site Configuration
Sizing Considerations
There are a number of sizing issues to consider when setting up your disaster recovery. Review the Zerto Scale and
Benchmarking Guidelines to see the sizing considerations.
To adjust the VMDK size limitation:

1. Log in to vCenter Server or the ESX/ESXi host using VMware Infrastructure (VI) Client. If connecting to vCenter Server,
select the ESX/ESXi host from the inventory.
2. Click the Configuration tab.
3. Click Advanced Settings.
4. Select VMFS3.
5. Update the field in VMFS3.MaxHeapSizeMB.
■ In ESXi 5.x, the maximum heap size is 256MB.
6. Reboot the host for the changes to take effect.
Protected Virtual Machine Considerations

For protected Virtual Machine sizing details, see the section Zerto Virtual Replication Sizing Limits in the Zerto Scale and
WAN Sizing Requirements with Zerto

When preparing your deployment, you need to verify that the connectivity between any two paired sites has bandwidth
capacity that can handle the data to be replicated between the sites.
Zerto Scale and Benchmarking Guidelines provides information about WAN requirements when using Zerto. Using the
guidelines, it will help you to estimate the WAN requirements for disaster recovery, and describes how to collect and analyze
the performance statistics for the virtual machines to protect using Zerto. These actions should be performed to ensure that
connectivity between the protected and recovery sites has sufficient bandwidth capacity to handle the amount of data to be
replicated between the sites.
Sizing Considerations 34
CHAPTER 4: OVERVIEW OF
RECOVERY FLOWS
The Zerto solution enables protecting virtual machines, for both disaster recovery or for extended, longer term recovery from a
retention repository, by protecting the relevant virtual machines in virtual protection groups. A virtual protection group (VPG)
is a group comprised of virtual machines that are grouped together for recovery purposes. For example, the virtual machines
that comprise an application like Microsoft Exchange, where one virtual machine is used for the software, one for the database,
and a third for the Web Server require that all three virtual machines be replicated to maintain data integrity.
Once a VPG has been created, each virtual machine in the VPG can be replicated on the recovery site under the VRA on the
host specified in the VPG definition as the host for the recovery of the virtual machine.
In addition to disaster recovery and recovery from retention, the Zerto solution enables recovery of individual files or folders
from a certain point of time.
The following are described in this section:
■ “What is Zerto’s Disaster Recovery Operation?”, below
■ “What is Zerto’s File or Folder Level Restore?”, on page 36
■ “What is Zerto’s Long Term Retention?”, on page 36
What is Zerto’s Disaster Recovery Operation?

Disaster recovery using the Zerto solution enables recovering from a disaster to any point between the moment just before the
disaster and a specified amount of time in the past up to 30 days. The recovery is done in real time at the recovery site with a
minimal RTO.
A recovery operation is one of the following:

■ A failover.
■ A planned move of the protected virtual machines from the protected site to the recovery site.
■ A clone of the protected virtual machine to the recovery site.
What is Zerto’s Disaster Recovery Operation in On-Premise Environments?

Virtual machines are protected in VPGs. Once a VPG is created, Zerto creates a copy under the management of a Virtual
Replication Appliance, VRA, on the recovery site, of the protected virtual machine files, such as the configuration and data files.
A VRA is installed on every host where the machines are to be recovered.
When a recovery operation is performed, the VRA creates the virtual machines defined in the VPG and attaches the virtual
disks to these machines. It then promotes the data from the journal to the virtual machine disks.
Every write to the protected virtual machine in a VPG is copied by the VRA on the same host as the protected machine and
passed to the VRA on the host in the recovery site. The VRA on the host in the recovery site was specified in the VPG definition
as the host for the recovery of the virtual machine. These writes first are saved in a journal for a specified period, and then
moved to replica virtual disks managed by the VRA, which mirror the protected virtual machine disks.
The following link references the appropriate procedure to protect virtual machines:
Recovery from: vCenter Server Protecting Virtual Machines from a vCenter Server
Recovery from: vCloud Director (vCD) Protecting Virtual Machines to and From vCloud Director
After initializing the VPG, all writes to the protected virtual machines are sent by the VRA on the relevant host for each virtual
machine on the protected site to the VRA on the recovery site specified as the recovery host for the virtual machine. The
information is saved in the journal for the virtual machine with a timestamp, ensuring write-fidelity. Every few seconds the
Zerto Virtual Manager causes a checkpoint to be written to every journal on the recovery site for every virtual machine in the
VPG, ensuring crash-consistency.
The data remains in the journal until the time specified for the journal when it is moved to the relevant mirror disks, also
managed by the VRA for the virtual machine. In this way, you can recover the virtual machines using the mirror disks and then
Overview of Recovery Flows 35
Overview of Recovery Flows
promoting the data from the journal to include the final few hours of data for each virtual machine. For more details about the
journal, see “The Role of the Journal During Protection”, on page 41.
The following references the operations to recover virtual machines which are protected in a VPG:
■ “Overview of Disaster Recovery Operations”, on page 320
■ “Managing Failover”, on page 345
■ “Migrating a VPG to a Recovery Site”, on page 335
■ “Cloning a VPG to the Recovery Site”, on page 355
What is Zerto’s Test Failover Operation in On-Premise Environments?

When testing that the recovery works as planned, the VRA creates the virtual machines defined in the VPG and uses scratch
disks to simulate the virtual machine disks for the duration of the test. This enables the ongoing protection of the virtual
machines and the possibility of a failover if required during the test.
The following references the procedure to recover virtual machines:
■ “Overview of Disaster Recovery Operations”, on page 320
■ “Testing Recovery”, on page 324
What is Zerto’s File or Folder Level Restore?

running Windows operating systems. You can recover the files and folders from a specific point-in-time.
To recover files and folders, see “Recovering Files and Folders”, on page 358.
What is Zerto’s Long Term Retention?
NOTE:
You cannot restore a retention set in Azure, or in AWS.
If you need to extend the recovery ability to more than 30 days, Zerto provides Long Term Retention that enables saving the
protected data in a state where they can be easily deployed.
The data is saved in a repository for a defined retention period. Each VPG will have retention sets created according to the
configured schedule.
The retention process is managed by the ZVM, and the Data Streaming Service (DSS), which is installed in the VRA, performs
all the data path operations. During the retention process, the DSS communicates with the VRA on the recovery site. The
retention sets are restore points saved either daily, weekly, monthly or yearly in the repository. Before you can start a retention
process for VPGs, you must first create one or more repositories for the retention sets.
Configuring Long Term Retention is part of defining a VPG. To set up Long Term Retention to protect VPGs, see “Using Zerto’s
Long Term Retention”, on page 365.
The number of Daily, Weekly, Monthly and Yearly retention sets define the retention period. For example, keeping 84 Monthly
or 7 Yearly both result in a 7 year retention time.
This allows for full flexibility for users to define anything from a week to many years. There is no maximum to the configurable
number of Yearly retentions to keep, although Zerto recommend users to keep no more than 150 retention sets in total (all
types included). This means Zerto can keep up to 150 years of retention.
What does the Repository Contain?
The Repository contains retention sets, where each retention set has it’s own mapping file (DOM file).
How does the Long Term Retention process work?
36
When Long Term Retention is first configured, and the first reading of the data has occurred, the retention set consists of:
■ All the data copied to the Repository.
When the second reading and any subsequent readings after a full retention of the data occurs, the retention set consists of:
■ All the data from the first reading, but not including any original data which was marked as changed during the second
reading.
■ The changed data from the second reading.
Each incremental retention set is independent of previous incremental and full retention sets, and gives a complete and total
picture of the data at the point in time of the reading.
What happens when the Retention Policy period is overdue?
Retention sets are kept for the retention period specified as part of the Retention Policy configuration. Once the retention
expires, the expired retention sets will be deleted from the Repositories.
What is Zerto’s File System Indexing?

To support advanced VM-level or file-level restore scenarios, Zerto offers the capability to index files and folders of selected
VMs that are enabled for retention. This allows users to search for the necessary files and folders and to perform a restore of
the VMs or VPGs containing those files and folders.
How Does File System Indexing Work?

How does Zerto index a VM?
Zerto uses its file system parser which is also used for file and folder recovery. Once the retention process completes, Zerto
uses the journal capabilities to create a file system view on the same checkpoint that the retention process had used, and
gathers information on the file system which includes file/ folder names and file sizes.
How long does it take to index?
The indexing process on its own is rather fast. Zerto can process roughly 10,000 files per second on a windows VM and about
2000 files on a Linux VM.
How is indexing enabled and disabled on a VM?
Enabling and disabling File System Indexing is done when creating or editing a VPG. See “Enabling Long Term Retention for the
VPGs”, on page 372.
Can a specific disk be excluded from being indexed?
Currently, excluding specific disks from being indexed is not supported.
What happens when the indexing repository is changed?
Zerto will start saving indexing meta data on the new repository. However, Zerto will scan all previously configured indexing
repositories when searching for files and folders during Search and Restore operations.
What happens when the indexing repository is removed?
Users can select “None” as an indexing repository. If there are still VPGs which have VMs that have been selected for indexing,
the indexing process for these VMs will fail. It is recommended to clear the indexing settings from all VMs if one chooses not to
use indexing anymore.
What happens when the indexing repository is re-added?
If the repository was completely removed from Zerto, then the indexing data is lost. Upon re-adding the repository, any
indexing data which exists on that repository is ignored and cannot be leveraged for Search and Restore.
Is indexing executed in parallel on all VMs?
No. In order to guardrail resources in the environment, Zerto limits the number of parallel indexing to 3 VMs and 1 per VRA at
most.
37
How is File System Indexing Managed?

How can users leverage the data kept in the indexing repository?
All the indexed data is kept in the repository and is used when performing Search and Restore. Users can search for files or
folders in VMs that were indexed, in a specific date range, select revisions of the specific file or folder in question, and restore
the VM or VPG to the selected restore point.
When does the indexing process happen?
As part of the retention process, once the system finishes saving the retention sets of all the VMs in the VPG on the repository
successfully, Zerto initiates indexing the VMs that were selected for indexing in the VPG.
Will it affect retention performance or replication?
Zerto guardrails the replication so any other process will not be affected, and that includes indexing. Indexing is done on the
ZVM machine using a service called VBA. The VBA is limited to run 3 indexing tasks in parallel at most, and not more than one
VRA. The impact on each VRA is similar to having a single VM mounted for File Level Restore.
How do I know when indexing is running?
When the indexing process runs, there will be a task showing the VPG is being indexed.
Can an indexing task be aborted?
Yes. As with any other task in Zerto, if you wish to stop the indexing process, you can stop the task by clicking the stop button.
See “Monitoring Tasks”, on page 224.
What happens if a retention process starts while the indexing task is running?
Zerto cannot run two tasks on the same VPG, therefore the retention process will wait for the indexing process to complete
before it starts.
What happens when indexing fails?
The indexing task will be shown as “failed”. When searching for files/folders, no results from the failed restore point will be
shown.
When is the indexed data removed from the system/repository?
In Zerto 7.0, Zerto does not remove the indexed data from the system or the repository. In one of the upcoming updates or
versions, Zerto will remove indexed data from both the system and the repository, when the retention-set has been expired.
See Storing Retention Sets for further details.
What happens if the indexing task fails?
When the indexing task fails, there will be a task showing that VPG which was being indexed.
Is the data removed when the VPG is deleted?
Indexed data is not deleted from the system, and as such users will be able to search files/folders in VMs even if the VPG
protecting these VMs were deleted. In fact, as long as the retention-set that the indexing is referencing still exists, results will
show up in Search and Restore operations.
What happens to the indexed data when re-installing Zerto?
Zerto does not delete the indexed data. Similarly to the remove repository process, the previously indexed data cannot be
leveraged and will not be referenced in the new installation. This is planned to be addressed in one of the upcoming versions.
What Are the Sizing and System Requirements

Which Operating and file systems are supported?
Operating Systems, File Systems and Volume Manager that Zerto can index:
■ Operating Systems: Windows Vista and 2008 server and above and Linux
■ File System and Volume Manger: NTFS and EXT2/EXT3/EXT4
■ Supported partitioning methods: GPT, MBR
38
What happens if only one volume is supported and another one is not?
Zerto indexes the supported volumes and skips the non-supported volumes one we don't except to log it exists and wasn't
supported.
What is the maximum number of entries that can be indexed on a single VM?
■ A VM with over 150 million entries (files or folders) cannot be indexed.
■ Rate of entries (files or folders) indexed in NTFS per second: 2000 files.
■ Rate of entries (files or folders) indexed in EXT per second: 1500 files.
How to estimate the size required for indexing?
Storing the index for 100 restore points (incremental or full) will consume between 5-10% roughly of the original VM size.
What is Zerto’s Search and Restore?

Search and Restore allows the user to quickly search for files and folders in specific VMs and restore either the virtual machine
or VPG once the desired restore point is identified.
39
CHAPTER 5: INTRODUCTION TO
PROTECTING VIRTUAL MACHINES
Virtual machines are protected in virtual protection groups (VPG). A VPG is a group of virtual machines that you group
together for recovery purposes. For example, the virtual machines that comprise an application like Microsoft Exchange, where
one virtual machine is used for the software, one for the database, and a third for the Web Server require that all three virtual
machines be replicated to maintain data integrity.
Any virtual machine whose operating system is supported in both the protected site and recovery site can be protected in a
VPG.
Once a virtual machine is protected, all changes made on the machine are replicated in the remote site. The replicated virtual
machines in the remote site can be recovered to any point in time defined for the VPG or if a period further in the past is
required, a retention set can be restored.
When a VPG is created, a replica of each virtual machine disk in the VPG is created under a VRA on the recovery site. These
replica virtual disks must be populated with the data in the protected virtual machines, which is done by synchronizing the
protected virtual machines with the recovery site replicas. This synchronization between the protected site and remote site
takes time, depending on the size of the virtual machines.
After the initial synchronization completes, only the writes to disk from the virtual machines in the protected site are sent to
the remote site. These writes are stored by the VRA in the remote site in journals for a specified period, after which they are
promoted to the replica virtual disks managed by the VRA.
Any virtual machine that is supported by the hypervisor can be protected. When recovering to a different hypervisor, the
protected virtual machines must also be supported by the recovery hypervisors.
■ “Configuring Virtual Protection Groups”, below
■ “The Role of the Journal During Protection”, on page 41
■ “What Happens After the VPG is Defined”, on page 43
Configuring Virtual Protection Groups

You protect one or more virtual machines in a VPG. The VPG must include at least one virtual machine. After creating a VPG,
you can add or remove virtual machines as required. You can only protect a virtual machine in a VPG when the virtual machine
has no more than 60 disks.
Note: 60 disks requires 4 SCSI controllers each with a maximum of 15 disks.
Any machine that can be hosted in a vCenter Server can be protected as long as it can be hosted in the recovery site
environment. Note that a Windows Server 2000 can be protected but re-IP is not supported.
When the recovery site is Amazon Web Services (AWS), you can only protect virtual machines in the protected site that are
supported by AWS in the recovery site. The maximum number of supported disks is 22 for virtual machines running a
Windows operating system and 12 for virtual machines running a Linux operating system.
The virtual machines can be defined under a single hypervisor host or under multiple hosts.The recovery can also be to a single
host or multiple hosts. For example, if a virtual machine in the protected site is configured so that space is allocated on demand
and this machine is protected in a VPG, then during recovery the machine is defined in the recovery site with the same space
allocation configuration. You protect virtual machines by creating the VPG on the site hosting these virtual machines. After the
VPG is created, you can add or remove virtual machines from the VPG by editing the VPG in the Zerto User Interface running
on either the protected or recovery site.
Note: To create a VPG you must have a recovery site available with a host with a VRA installed. The recovery site can either be
a remote site, paired with the protected site, or the protected site itself, where both protection and recovery are to the same
Zerto Virtual Manager site.
Introduction to Protecting Virtual Machines 40
Introduction to Protecting Virtual Machines
You can protect a single virtual machine in several VPGs. A virtual machine can be in a maximum of three VPGs. VPGs that
contain the same virtual machine cannot be recovered to the same site.
Note: Protecting virtual machines in several VPGs is enabled only if both the protected site and the recovery site, as well as the
VRAs installed on these sites, are of version 5.0 and higher.
The VPG definition consists of the following:
General: A name to identify the VPG and the priority to assign to the VPG.
Virtual Machines: The list of virtual machines being protected as well as the boot order and boot delay to apply to the virtual
protection groups during recovery.
Replication Settings: VPG replication settings, such as the recovery site, host and storage and the VPG SLA. SLA information
includes the default journal history settings and how often tests should be performed on the VPG. The defaults are applied to
every virtual machine in the VPG but can be overridden per virtual machine, as required.
Cloud service providers can group the VPG SLA properties together in a service profile. When a service profile is used, the VPG
SLA settings cannot be modified unless a Custom service profile is available.
Storage Settings: By default the storage used for the virtual machine definition is also used for the virtual machine data. This
storage can be overridden per virtual machine, as required.
Recovery Settings: Recovery details include the networks to use for recovered virtual machines and scripts that should be run
either at the start or end of a recovery operation.
NIC Settings: Specify the network details to use for the recovered virtual machines after a live or test failover or migration.
Retention Policy Settings: Specify the VPG’s retention properties, including the repository where the retention sets are saved.
You can protect most types of virtual machines running in a vCenter. However, you cannot protect virtual machines with IDE
devices. Also, protected virtual machine VMDK descriptor files should be default disk geometry settings. Both the disk
geometry and BIOS geometry are written in the descriptor file under ddb.geometry.sectors and ddb.geometry.biosSectors
respectively. If these values do not each equal 63 then there may be recovery issues unless you configure the VPG using
preseeded volumes.
The Role of the Journal During Protection

After defining a VPG, the protected virtual machine disks are synced with the recovery site.
After initial synchronization, every write to a protected virtual machine is copied by Zerto to the recovery site.
The write continues to be processed normally on the protected site and the copy is sent asynchronously to the recovery site
and written to a journal managed by a Virtual Replication Appliance (VRA).
Each protected virtual machine has its own journal.
In addition to the writes, every few seconds all journals are updated with a checkpoint time-stamp.
Checkpoints are used to ensure write order fidelity and crash-consistency.
A recovery can be done to the last checkpoint or to a user-selected, crash-consistent, checkpoint.
This enables recovering the virtual machines, either to the last crash-consistent point-in-time or, for example, when the virtual
machine is attacked by a virus, to a point-in-time before the virus attack.
Data and checkpoints are written to the journal until the specified journal history size is reached, which is the optimum
situation.
At this point, as new writes and checkpoints are written to a journal, the older writes are written to the virtual machine recovery
virtual disks.
When specifying a checkpoint to recover to, the checkpoint must still be in the journal. For example, if the value specified is 24
hours then recovery can be specified to any checkpoint up to 24 hours. After the time specified, the mirror virtual disk volumes
maintained by the VRA are updated.
The Role of the Journal During Protection 41

During recovery, the virtual machines at the recovery site are created and the recovery disks for each virtual machine, managed
by the VRA, are attached to the recovered virtual machines.
Information in the journal is promoted to the virtual machines to bring them up to the date and time of the selected checkpoint.
To improve the RTO during recovery, the virtual machine can be used even before the journal data has been fully promoted.
Every request is analyzed and the response is returned from the virtual machine directly or, if the information in the journal is
more up-to-date, it comes from the journal.
This continues until the recovery site’s virtual environment is fully restored to the selected checkpoint.
Each protected virtual machine has its own dedicated journal, consisting of one or more volumes.
A dedicated journal enables journal data to be maintained, even when changing the host for the recovery.
The default storage used for a journal is the storage used for recovery of each virtual machine. Thus for example, if protected
virtual machines in a VPG are configured with different recovery storage, the journal data is by default stored for each virtual
machine on that virtual machine recovery storage.
The default storage used for a journal when protecting to a VMware vCloud Director is the storage with the most free space,
that has either been defined as journal storage for the provider vDC, in the Configure Provider vDCs dialog, or any storage that
is visible to the recovery host, even if the journal storage was not defined in the Configure Provider vDCs dialog.
The journals for the protected virtual machines are defined as part of the VPG definition and by default are defined to reside on
the same storage as the virtual machine. This can be overridden at the virtual machine and VPG levels as follows.
ALLOWS STORAGE NOTES
TIERING
Default Journal No The journal is located on the virtual machine recovery datastore.
By default, the recovery datastore for each virtual machine journal is the same as the
virtual machine recovery datastore.
Journal datastore No Specify a journal datastore for each virtual machine. All journals for the virtual
separate from VM machine are stored in this datastore.
datastore for each
VM
Journal datastore Yes Specify a journal datastore for each VPG. All journals for the virtual machines in the
for each VPG VPG are stored in this datastore.
Journal datastore Yes Enables the use of advanced settings such as storage IO controls etc., to provide
for multiple VPGs individualized service to customers by grouping VPGs by customer and assigning
each group to a specific storage.
This option is recommended for cloud service providers.
Journal Sizing
The journal space is always allocated on demand. The provisioned journal size initially allocated for a journal is 16GB. The
provisioned journal size is the current size of all the journal volumes.
If the journal grows to approximately 80% of the provisioned journal size or less than 6GB remains free, a new volume is added
to increase the journal size. Each new journal volume added is bigger than the previous volume. The journal size can increase
up until a specified hard limit. If the size of the journal is reduced in the VPG definition after new volumes have been added,
these volumes are not reduced and continue to be used if required. In this case, the journal size can be bigger than the set size
and the reduced journal size definition is not applied, except to ensure that no new volumes are created if the new journal size
is reached or exceeded.
The provisioned journal size reported in the Resources report can fluctuate considerably when new volumes are added or
removed.
When the amount of the journal used is approximately 50% of the provisioned journal size, the biggest unused journal volume
from the added volumes is marked for removal. This volume is then removed after the time equivalent to three times the
amount specified for the journal history, or twenty-four hours, whichever is more if it is still not used.
The Role of the Journal During Protection 42

Note: With VMware vSphere, with VMFS datastores and when the VRA is on a host ESXi that is version 5.1 or higher, the
journal can also reclaim unused space on a volume. Unused space is not reclaimed when using NFS datastores or any datastore
with a ESXi host that is lower than version 5.1.
Reclaiming space on a volume does not change the provisioned journal size, which is the current size of all the journal volumes.
When a virtual machine journal comes close to a specified hard limit, Zerto starts to move data to the target disks. Once this
begins, the maintained history begins to decrease. If the journal history falls below 75% of the value specified for the journal
history, a warning alert is issued in the GUI. If the history falls below one hour, an error is issued. However, if the amount of
history defined is only one hour, an error is issued if it is less than 45 minutes.
The size of the datastore where the journal resides must have at least 30GB free, or have 15% free space, relative to the total
datastore space, whichever number of GBs is smaller.
If the available storage of the journal datastore falls below 30GB or 15% of the total datastore size:
■ The datastore itself is considered full.
■ An error alert is issued and all writes to the journal volumes that datastore storage are blocked.
■ Replication is halted, but history is not lost.
■ The RPO begins to steadily increase until additional datastore space is made available.
Examples:
■ For a large (2TB) datastore: 15% free space remaining = 307GB.
The ZVM would not consider the datastore full if 307GB of free space were remaining. 30GB free space remaining would
trigger an alert, as it is the smaller figure.
■ For a small (100GB) datastore: 15% free space free space remaining = 15GB.
The ZVM would not consider the datastore full if 30GB of free space were remaining. 15GB free space remaining would
trigger an alert, as it is the smaller figure.
Testing Considerations When Determining Journal Size

When a VPG is tested, either during a failover test or before committing a Move or Failover operation, a scratch volume is
created for each virtual machine being tested. The scratch volume created uses the same size limit defined for the virtual
machine journal.
The size limit of the scratch volume determines the length of time that you can test for. Larger limits enable longer testing
times if the constant rate of change is constant. If a small hard limit size is set for this amount of history, for example 2–3 hours,
the scratch volume created for testing will also be small, thus limiting the time available for testing.
What Happens After the VPG is Defined

After defining a VPG, the VPG is created. For the creation to be successful, the storage used for the recovery must have either
30GB free space or 15% of the size free. This requirement ensures that during protection the VRA, which manages the virtual
machine journal and data, cannot completely fill the storage, which would result in the VRA freezing and stopping to protect all
virtual machines using that VRA.
The VRA in the remote site is updated with information about the VPG and then the data on the protected virtual machines are
synchronized with the replication virtual machines managed by the VRA on the recovery site. This process can take some time,
depending on the size of the VMs and the bandwidth between the sites.
During this synchronization, you cannot perform any replication task, such as adding a checkpoint.
For synchronization to work, the protected virtual machines must be powered on. The VRA requires an active IO stack to
access the virtual machine data to be synchronized across the sites. If the virtual machine is not powered on, there is no IO
stack to use to access the protected data to replicate to the target recovery disks and an alert is issued.
What Happens After the VPG is Defined 43

Once synchronized, the VRA on the recovery site includes a complete copy of every virtual machine in the VPG. After
synchronization the virtual machines in the VPG are fully protected, meeting their SLA, and the delta changes to these virtual
machines are sent to the recovery site.
For details of the screen, see “Monitoring a Single VPG”, on page 221.
Recovery
After initializing the VPG, all writes to the protected virtual machines are sent by the VRA on the relevant host for each virtual
machine on the protected site to the VRA on the recovery site specified as the recovery host for the virtual machine. The
information is saved in the journal for the virtual machine with a timestamp, ensuring write-fidelity. Every few seconds the
Zerto Virtual Manager writes a checkpoint to every journal on the recovery site for every virtual machine in the VPG, ensuring
crash-consistency.
The data remains in the journal for the time defined by the journal history configuration, after which it is moved to the relevant
mirror disks for each virtual machine. Both the journal and the mirror disks are managed by the VRA.
When recovering, either a failover or move, or testing failover or cloning protected virtual machines in the recovery site, you
specify the checkpoint at which you want the recovered virtual machines to be recovered. The mirror disks and journal are used
to recover the virtual machines to this point-in-time.
File and Folder Recovery

After initializing the VPG, instead of recovering a virtual machine, you can recover specific files and folders in the protected
virtual machines from a checkpoint.
What Happens After the VPG is Defined 44

CHAPTER 6: PROTECTING VIRTUAL
MACHINES FROM A VCENTER
SERVER
When the protected site is vCenter Server, protection can be set up to cope with the following situations:
■ A disaster, enabling recovery to a point in time in the 30 days prior to the disaster.
■ The need to retain files saved either daily or weekly for a period of up to one year. The same wizard is used to set up both
disaster recovery and the retention policy.
Use any of the following procedures depending on the site to which you need to recover:
PROTECTED SITE RECOVERY SITE SEE PROCEDURE...
To a different vCenter Server site “Replication From a Protected Site
vCenter Server to a Recovery Site
vCenter Server”, below
To the same vCenter Server site (local “Replication From a Protected vCenter
replication) Server to the Same Site”, on page 68
To a different site using the Client “Protecting a Single Virtual Machine (Via
Console or VMware Web Client the VMware Web Client or Client
Console)”, on page 69
vCenter Server To a Hyper-V site “Replication From a Protected Site
vCenter Server To a Recovery Site
Hyper-V Host”, on page 71
To a Amazon Web Services (AWS) site “Replication From a Protected Site
vCenter Server to a Recovery Site AWS”,
on page 91
To a Microsoft Azure site “Replication From a Protected Site
vCenter Server to a Recovery Site
Microsoft Azure”, on page 106
Requirements for vSphere Environments

Before protecting your virtual machines, review Zerto Virtual Replication - Prerequisites & Requirements for vSphere
Environments
Considerations
■ If one or both of the sites have vCloud Director installed, see “Protecting Virtual Machines to and From vCloud Director”,
on page 117.
■ You cannot protect virtual machines with IDE devices.
■ Any virtual machine that is supported by the hypervisor can be protected. When recovering to a different hypervisor, the
protected virtual machines must also be supported by the recovery hypervisor.
■ Zerto does not support protecting virtual machines that are connected to DVDs.
■ You cannot protect virtual machines with VMware Fault Tolerance.
Protecting Virtual Machines from a vCenter Server 45
Zerto Virtual Manager Administration Guide for VMware vSphere Environments -Version 7.0
Protecting Virtual Machines from a vCenter Server
Replication From a Protected Site vCenter Server to a Recovery Site vCenter Server
You can protect virtual machines to a recovery site vCenter Server. The procedure is the same whether you intend to protect
one virtual machine or multiple virtual machines.
To create a virtual protection group (VPG) to recover in vCenter:
1. In the Zerto User Interface, select Actions> Create VPG.

The General step of the Create VPG wizard is displayed.
2. Specify the name of the VPG and the priority of the VPG.
■ VPG Name: The VPG name must be unique. The name cannot be more than 80 characters.
■ Priority: Determine the priority for transferring data from the protected site to the recovery site when there is limited
bandwidth and more than one VPG is defined on the protected site.
■ High Priority: When there are updates to virtual machines protected in VPGs with different priorities, updates
from the VPG with the highest priority are passed over the WAN first.
■ Medium Priority: Medium priority VPGs will only be able to use whatever bandwidth is left after the high priority
VPGs have used it.
■ Low Priority: Low priority VPGs will use whatever bandwidth is left after the medium priority VPGs have use it.
Updates to the protected virtual machines are always sent across the WAN before synchronization data, such as
during a bitmap or delta sync.
During synchronization, data from the VPG with the highest priority is passed over the WAN before data from
medium and low priority VPGs.
3. Click NEXT.
Replication From a Protected Site vCenter Server to a Recovery Site vCenter Server 46
The VMs step is displayed.
4. Select the VMs that will be part of this VPG and click the right-pointing arrow to include these VMs in the VPG.
■ Zerto uses the SCSI protocol. Only virtual machines with disks that support this protocol can be specified.
■ When using the Search field, you can use the wildcards; * or ?
Virtual machines that are not yet protected are displayed in the list. A VPG can include virtual machines that are not yet
protected and virtual machines that are already protected.
5. You can view protected virtual machines in the Advanced (One-to-Many) section, by clicking Select VMs.
The Select VMs dialog is displayed.
Note: Virtual machines can be protected in a maximum of three VPGs. These VPGs cannot be recovered to the same site.
Virtual machines protected in the maximum number of VPGs are not displayed in the Select VMs dialog.
In on-premise environments, protecting virtual machines in several VPGs is enabled only if both the protected site and the
recovery site, as well as the VRAs installed on these sites, are of version 5.0 and higher.
6. To define the boot order of the virtual machines in the VPG, click Define Boot Order, otherwise go to the next step.
When virtual machines in a VPG are started in the recovery site, by default these machines are not started up in a
particular order. If you want specific virtual machines to start before other machines, you can specify a boot order. The
virtual machines are defined in groups and the boot order applies to the groups and not to individual virtual machines in the
groups. You can specify a delay between groups during startup.
Note: Up to five (5) virtual machines may boot on a host simultaneously. Following the boot, a 300 second (default) delay
occurs until the next boot batch.
Initially, virtual machines in the VPG are displayed together under the Default group. If you want specific machines to start
before other virtual machines, define new groups with one or more virtual machines in each group.
7. Click ADD GROUP to add a new group. Then, do the following:

a) To change the name of a group, click the Pencil icon next to the group.
b) To delete a group, click the delete icon on the right side. You cannot delete the Default group nor a group that contains
a virtual machine.
c) Drag virtual machines to move them from one group to another.
d) Drag groups to change the order the groups are started, or, optionally, in Boot Delay, specify a time delay between
starting up the virtual machines in the group and starting up the virtual machines in the next group.
For Example: Assume three groups, Default, Server, and Client, defined in this order. The boot delay defined for the
Default group is 10, for the Server group is 100, and for the Client group 0. The virtual machines in the Default group
are started together and after 10 seconds the virtual machines in the Server group are started. After 100 seconds the
virtual machines in the Client group are started.
e) Click OK to save the boot order.
8. Click NEXT.
The Replication step is displayed.
Note: If the protected site is paired with only one recovery site, the recovery step is displayed with the Recovery Site field
automatically filled in and defaults set for the SLA and Advanced settings, as shown below.
9. Specify the Recovery Site. This is the site to which you want to recover the virtual machines. After specifying the recovery
site, additional fields are displayed including the host and datastore to use for replication.
Note: You cannot select a recovery site if any of the virtual machines you selected are already in VPGs that recover to that
site.
10. ZORG: If the site is defined in Zerto Cloud Manager, select the name used by the cloud service provider (CSP) to identify
you as a Zerto Organization (ZORG). For details about Zerto Cloud Manager, see Zerto Cloud Manager Administration
Guide.
11. Host: The default cluster, resource pool or host in the recovery site that handles the replicated data. If the site is defined in
Zerto Cloud Manager, only a resource pool can be specified and the resource pool must also have been specified as a
resource in Zerto Cloud Manager. For details about Zerto Cloud Manager, refer to Zerto Cloud Manager Administration
Guide.
Note: If Zerto Cloud Manager is used, vSphere Standard edition cannot be used.
When a resource pool is specified, Zerto checks that the resource pool capacity is enough for any virtual machines
specified in the VPG.
All resource pool checks are made at the level of the VPG and do not take into account multiple VPGs using the same
resource pool. If the resource pool CPU resources are specified as unlimited, the actual limit is inherited from the parent
but if this inherited value is too small, failover, move, and failover test operations can fail, even without a warning alert
being issued by Zerto Virtual Manager.
Note: If a resource pool is specified and DRS is disabled for the site later on, all the resource pools are removed by VMware
and recovery will be to any one of the hosts in the recovery site with a VRA installed on it.
12. Datastore: The default datastore to use for recovered virtual machine files and for their data volumes. Every datastore for
the selected recovery host is included in the drop-down list. If a cluster or resource pool is selected for the host, only
datastores that are accessible by every host in the cluster or resource pool are displayed.
13. In the SLA area, you define the Service Level Agreement for which this VPG is associated.
■ When Zerto Cloud Manager is used, select the Service Profile to use.
The Service Profile determines the VPG SLA settings for the group. This applies predefined settings for the Journal
History, Target RPO Alert and the Test Reminder. These settings apply to every virtual machine in the group.
■ When a Custom service profile is available, the VPG SLA settings are editable, and the Advanced button becomes
available. When you change these settings, they apply to every virtual machine in the group.
14. Click ADVANCED. The Advanced Journal Settings dialog is displayed.
SETTING & DESCRIPTION SELECT...

Journal History
The time that all write commands are saved in the journal. ■ Number of hours from 1 to 23
The longer the information is saved in the journal, the more space is ■ Number of days from 1 to 30
required for each journal in the VPG.
Default Journal Storage (Hyper-V), or Default Journal Datastore (vSphere)
The storage/datastore used for the journal data for each virtual ■ Select the storage/datastore accessible to the
machine in the VPG. host.
Note: This field is not relevant when replicating to a vCD recovery When you select a specific journal storage/datastore,
site. the journals for each virtual machine in the VPG are
stored in this storage/datastore, regardless of where
the recovery storage/datastore is for each virtual
machine. All protected virtual machines are recovered
to the hosts that can access the specified journal
storage/datastore.

Journal Size Hard Limit
The maximum size that the journal can grow, either as a percentage ■ Unlimited: The size of the journal is unlimited and
or a fixed amount. it can grow to the size of the recovery storage/
datastore.
The journal is always thin-provisioned.
If Unlimited is selected, Size and Percentage options
Note: The Journal Size Hard Limit applies independently both to the
are not displayed.
Journal History and also to the Scratch Journal Volume.
■ Size (GB): The maximum journal size in GB.
For Example: If the Journal Size Hard Limit is configured to a maximum ■ The minimum journal size, set by Zerto, is
size of 160 GB limit, then during Failover Test, both the Journal 8GB for Hyper-V and vSphere environments,
History and the Scratch Journal Volume together can take up to 320 and 10GB for Microsoft Azure environments.
GB. Each one with a maximum size of 160 GB limit.
■ Percentage: The percentage of the virtual
machine volume size to which the journal can
grow.
■ This value can be configured to more than
100% of the protected VM's volume size.
Journal Size Warning Threshold
The size of the journal that triggers a warning that the journal is ■ Unlimited: The size of the journal is unlimited and
nearing its hard limit. it can grow to the size of the recovery storage/
datastore.
are not displayed.
■ Size* (GB): The size in GB that will generate a
warning.
■ Percentage*: The percentage of the virtual
machine volume size that will generate a warning.
*The values of Size and Percentage must be less than
the configured Journal Size Hard Limit so that the
warning will be generated when needed.
In addition to the warning threshold, Zerto will issue a
message when the free space available for the journal
is almost full.
15. Click OK.
■ Target RPO Alert: The maximum desired time between each automatic checkpoint write to the journal before an alert
is issued.
■ Test Reminder: The amount of time in months recommended between each test, where you test the integrity of the
VPG. A warning is issued if a test is not performed within this time frame.
16. Enable WAN Traffic Compression: Whether or not data is compressed before being transferred to the recovery site.
Compressing the data is more efficient, but results in a small performance degradation.
Note: WAN Traffic Compression is enabled by default when replicating to vCD.
■ Enable WAN traffic compression if network considerations are more critical than CPU usage considerations.
■ When WAN compression is enabled, the compressed data is written in compressed format to the recovery site
journal. Even if WAN compression is selected, Zerto decreases the level of compression if it takes too many resources.
The VRA automatically adjusts the compression level according to CPU usage, including totally disabling it if needed.
Zerto recommends enabling WAN compression.
■ Zerto can also work with third-party WAN optimization and acceleration technologies, such as those supplied by
Riverbed Technologies and Silver Peak.
■ When third-party WAN optimization is implemented, Zerto recommends disabling VPG WAN compression.
17. To change the replication settings per virtual machine, click VM SETTINGS.
The Advanced VM Replication Settings dialog is displayed.
In this dialog, you can edit the values of one or more of the virtual machines in the VPG.
18. To edit information in one field, click the field and update the information.
19. To edit information for several virtual machines at the same time, select the virtual machines and click EDIT SELECTED.
The Edit VM dialog is displayed.
Define as follows:

Recovery Host (not relevant when replicating to vCD)
(Hyper-V) The cluster or host that will host the recovered virtual
machine.

(vSphere) The cluster, resource pool, or host that will host the When a resource pool is specified, Zerto checks that
recovered virtual machine. the resource pool capacity is enough for all the virtual
machines specified in the VPG.
If the site is defined in Zerto Cloud Manager, only a resource pool can
be specified and the resource pool must also have been defined in If a resource pool is specified and DRS is disabled for
Zerto Cloud Manager. the site later on, all the resource pools are removed by
VMware and recovery is to any one of the hosts in the
For details about Zerto Cloud Manager, see Zerto Cloud Manager
recovery site with a VRA installed on it.
Administration Guide.
All resource pool checks are made at the level of the
When a resource pool is specified, Zerto checks that the resource
VPG and do not take into account multiple VPGs using
pool capacity is enough for all the virtual machines specified in the
the same resource pool. If the resource pool CPU
VPG
resources are defined as unlimited, the actual limit is
inherited from the parent but if this inherited value is
too small, failover, move, and failover test operations
can fail, even without a warning alert being issued by
VM Recovery Datastore (vSphere) (not relevant when replicating to vCD)
The datastore where the VMware metadata files for the virtual If a cluster or resource pool is selected for the host,
machine are stored, such as the VMX file. only datastores that are accessible by every ESX/ESXi
host in the cluster or resource pool are displayed. This
is also the datastore where RDM backing files for
recovery volumes are located.
Recovery Storage (Hyper-V) (not relevant when replicating to vCD)
The location where the metadata files for the virtual machine are If a cluster is selected for the host, only storage that
stored, such as the VHDX file. I are accessible by every host in the cluster are
displayed.
The maximum size that the journal can grow, either as a percentage Unlimited: The size of the journal is unlimited and it
or a fixed amount. can grow to the size of the recovery storage/datastore.
■ The journal is always thin-provisioned.
■ The Journal Size Hard Limit applies independently both to the
are not displayed.
Size (GB): The maximum journal size in GB.
For Example: If the Journal Size Hard Limit is configured to a
■ The minimum journal size, set by Zerto, is 8GB for
maximum size of 160 GB limit, then during Failover Test, both the
Hyper-V and vSphere environments, and 10GB for
Journal History and the Scratch Journal Volume together can take
Microsoft Azure environments.
up to 320 GB. Each one with a maximum size of 160 GB limit.
Percentage: The percentage of the virtual machine
volume size to which the journal can grow.
■ This value can be configured to more than 100%
of the protected VM's volume size.

The size of the journal that triggers a warning that the journal is Unlimited: The size of the journal is unlimited and it
nearing its hard limit. can grow to the size of the recovery storage/datastore.
are not displayed.
Size* (GB): The size in GB that will generate a warning.
Percentage*: The percentage of the virtual machine
volume size that will generate a warning.
is almost full.
Journal Storage (Hyper-V), or Journal Datastore (vSphere) (not relevant when replicating to vCD)
The storage/datastore used for the journal data for each virtual (vSphere) To change the default, specify a host and
machine in the VPG. then select one of the datastores accessible by this
host to be used as the journal datastore. When you
select specific journal datastore, the journals for each
virtual machine in the VPG are stored in this datastore,
regardless of where the recovery datastores are for
each virtual machine. In this case, all the protected
virtual machines must be recovered to hosts that can
access the specified journal datastore.
(Hyper-V) To change the default, specify a host and
then select the storage location accessible by this host
to be used as the journal storage. When you select
specific journal storage, the journals for each virtual
machine in the VPG are stored in this storage,
regardless of where the recovery storage is for each
virtual machine. In this case, all the protected virtual
machines must be recovered to hosts that can access
the specified journal storage.
20. Click OK.

21. In the Advanced VM Replication Settings dialog, click OK.
22. Click NEXT.
The Storage step is displayed.
By default the storage used for the virtual machine definition is also used for the virtual machine data.
For each virtual machine in the VPG, Zerto displays its storage-related information.
Note: Steps that do not require input are marked with a check mark. You can jump directly to a step that has been marked
with a check mark to edit the values for that step. Every step must be marked with a check mark before you can click DONE
to create the VPG.
You can define Thin provisioning and Temp Data in this window, or you can alternatively define them when you separately
select and edit each VMs volume.
IMPORTANT:
Changing the VPG recovery volume from thin-provisioned to thick-provisioned or vice versa, results in volume initial
synchronization.
See the following considerations regarding Thin provisioning:

■ Unless the user explicitly requests Thin provisioning, provisioning type is the same type as provisioning in the source
VM.
■ If the source disk is Thin provisioned, the default for the recovery volume is also Thin provisioned.
■ If the user uses preseed disks, Zerto maintains the provisioning types of the disks, so they can have other provisioning
types.
PRESEED PROVISIONING IN THE RECOVERY VM
Not selected ■ User can select Thin provisioning
Selected ■ User cannot select Thin provisioning
■ Provisioning is the same as defined in source VMs
23. To define whether the recovery volumes are thin-provisioned or not, select the Thin checkbox.
24. If the virtual machine to be replicated includes a temp data disk as part of its configuration, select the Temp Data checkbox
to mark the recovery disk for this disk as a temp data disk. In this case, data is not replicated to the temp data disk after
initial synchronization.
25. To edit storage information for one of the virtual machines’ volume location, first select the virtual machine, then click
EDIT SELECTED. The Edit Volumes window is displayed.
■ For Hyper-V recovery environments, the following window appears. For details, click here.
■ For vSphere recovery environments, the following window appears. For details, click here.
■ For vCD recovery environments, the following window appears. For details, click here.

Volume Source
■ (Hyper-V) Select a Volume Source for ■ Volume Source > Storage: A new volume is used for replicated data.
recovery from one of the drop-down options: ■ From the Storage drop-down list, specify the storage to use to create
■ Storage disks for the replicated data.
■ Preseeded volume The storage specified for the replication must have at least the same
amount of space as the protected volume and then an additional
amount for the journal.
The amount of additional space needed for the journal can be fixed
by specifying a maximum size for the journal, or can be calculated as
the average change rate for the virtual machines in the VPG,
multiplied by the length of time specified for the journal history.
For more details, see Zerto Scale and Benchmarking Guidelines, in the
section Estimating WAN Bandwidth for VMware and Hyper-V.
■ Volume Source > Preseeded volume: Whether to copy the
protected data to a virtual disk in the recovery site.
Zerto recommends using this option particularly for large disks so
that the initial synchronization will be faster since a Delta Sync can
be used to synchronize any changes written to the recovery site after
the creation of the preseeded disk.
When not using a preseeded disk, the initial synchronization phase
must copy the whole disk over the WAN.
When using a preseeded virtual disk, you select the storage and
exact location, folder, and name of the preseeded disk.
Zerto takes ownership of the preseeded disk, moving it from its
source folder to the folder used by the VRA.
Only disks with the same size as the protected disk can be selected
when browsing for a preseeded disk.
The storage where the preseeded disk is placed is also used as the
recovery storage for the replicated data.

■ (vSphere) Select a Volume Source for recovery Volume Source > Datastore: A new volume is used for replicated data.
from one of the drop-down options:
■ Datastore
■ RDM
■ Preseeded volume
■ Specify the Datastore to use to create disks for the replicated data.
■ If the source disk is thin provisioned, the default for the recovery
volume is also thin provisioned.
■ The datastore specified for replication must have at least the same
amount of space as the protected volume and an additional amount
for the journal.
■ The amount of additional space needed for the journal can be fixed
■ Zerto supports the SCSI protocol. Only disks that support this
protocol can be specified.
Then, define the following:
■ Datastore: The Datastore where the preseeded disk is located. Only
disks with the same size as the protected disk can be selected when
browsing for a preseeded disk.
Volume Source > RDM: The VMware RDM (Raw Device Mapping)
which will be used for the replication.
By default, RDM is recovered as thin-provisioned VMDK in the

datastore specified in the VM Recovery Datastore/Storage field in the
Edit VM dialog, and not to RDM.
Only a raw disk with the same size as the protected disk can be selected
from the list of available raw disks. Other raw disks with different sizes
are not available for selection.
The RDM is always stored in the recovery datastore, used for the virtual
machine.
The following limitations apply to protecting RDM disks:
■ RDM disks with an even number of blocks can replicate to RDM
disks of the same size with an even number of blocks and to VMDKs.
■ RDM disks with an odd number of blocks can only replicate to RDM
disks of the same size with an odd number of blocks and not to
VMDKs.
■ You cannot define an RDM disk to be protected to a cloud service
provider via a Zerto Cloud Connector nor if the virtual machine uses
a BusLogic SCSI controller, nor when protecting or recovering virtual
machines in an environment running vCenter Server 5.x with ESX/
ESXi version 4.1 hosts.

■ (vSphere) Volume Source continued Volume Source > Preseeded volume: Select this when you want to copy
the protected data to a virtual disk in the recovery site.
Consider the following, then proceed to define the Datastore and the
Path:
■ Zerto recommends using this option particularly for large disks so
that the initial synchronization is faster since a Delta Sync can be
used to synchronize any changes written to the recovery site after
■ If a preseeded disk is not selected, the initial synchronization phase
■ If you use a preseeded virtual disk, you select the datastore and
exact location, folder, and name of the preseeded disk, which cannot
be an IDE disk. Zerto takes ownership of the preseeded disk, moving
it from its source folder to the folder used by the VRA.
■ The datastore where the preseeded disk is placed is also used as the
recovery datastore for the replicated data.
■ If the preseeded disk is greater than 1TB on NFS storage, the VPG
creation might fail. This is a known VMware problem when the NFS
client does not wait for sufficient time for the NFS storage array to
initialize the virtual disk after the RPC parameter of the NFS client
times out. The timeout default value is 10 seconds. See VMware
documentation, http://kb.vmware.com/selfservice/microsites/
search.do?language=en_US&cmd=displayKC&externalId=1027919,
which describes the configuration option to tune the RPC timeout
parameter by using the command: esxcfg-advcfg -s <Timeout>
/NFS/SetAttrRPCTimeout
■ If the protected disks are non-default geometry, configure the VPG
using preseeded volumes.
■ If the protected disk is an RDM disk, it can be used to preseed to a
recovery VMDK disk. Zerto makes sure that the VMDK disk size is a
correct match for the RDM disk.
■ If the VPG is being defined for a Zerto Organization, ZORG, the
location of the preseeded disk must be defined in the Zerto Cloud
Manager. See Zerto Cloud Manager Administration Guide.
■ Path: The full path to the preseeded disk.

■ (vCD) Select a Volume Source for recovery Volume Source > vCD managed storage policy: Zerto will select a
from one of the drop-down options: datastore, from the list of available datastores, in the selected Storage
■ vCD managed storage policy Policy in which to place the Volume, unless the datastore is excluded in
■ Preseeded volume the Configure Provider vDCs Dialog.
■ If there are several valid datastores, the datastore with the most
available space is selected.
■ Zerto recalculates the datastore available space for each volume
sequentially, taking into consideration previously allocated volumes.
Volume Source > Preseeded volume:
Select this when you want to copy the protected data to a virtual disk in
the recovery site.
■ The preseeded volume is a virtual disk (the VMDK flat file and
descriptor) in the recovery site that has been prepared with a copy
of the protected data.
■ Browse to the preseed folder configured for the customer and the
disk name, of the preseeded disk.
In order to use a preseeded VMDK, do the following:
a) Create a folder in vCD to use for the preseeded disks in the
datastore you want to use for the customer.
b) Specify this datastore as a provider datastore for preseeded
disks in the Configure Provider vDCs window, from the
Advanced Settings window, as described in Zerto Cloud Manager
c) In the Zerto Cloud Manager specify the Preseed Folder Name
for the ZORG, in the Manage ZORG tab.
■ Zerto searches for the preseeded folder in the available datastores in
the Org vDCs specified in the vCD Cloud Resources for the ZORG in
the Zerto Cloud Manager and takes ownership of the preseeded
disk, moving it from its source folder to the folder used by the VRA.
If the virtual machine has more than one preseeded disk, these disks
must reside on the same datastore.
times out.
The timeout default value is 10 seconds. See VMware
parameter by using the command: esxcfg-advcfg -s <Timeout> /
NFS/SetAttrRPCTimeout
protocol can be specified. Virtual machine RDMs in a vCenter Server
are replicated as VMDKs in a vCD environment.

(vCD) continued Storage Policy: Specify the Storage Policy for recovery from one of the
options:
■ Storage Policy per volume is supported only in vCD supported
versions, and when the selected Orgvdc is not configured for fast
provisioning.
■ Zerto will select a datastore from the selected Storage Policy in
which to place these files, unless the datastore is excluded in the
Configure Provider vDCs Dialog.
■ The Storage Policies which appear in the drop-down list:
■ Include the Use VM Default option (default), which will apply
the VM’s storage policy to this volume. This is also the Storage
Policy default value.
■ Were defined in VMware vCloud Director and are configured in
the Orgvdc.
■ Have at least one Datastore that was not excluded as a
Recovery Volume in the Configure Provider vDCs Dialog.
Temp Data disk
If the virtual machine to be replicated includes a Specify a mirror disk for replication that is marked as a temp data disk.
temp data disk as part of its configuration.
In this case, data is not replicated to the temp data disk after initial
synchronization.
Thin provisioning (vSphere)
If the recovery volumes are thin-provisioned or not. If the source disk is thin provisioned, the default for the recovery volume
is also thin provisioned.
vCD only: Unless the Org vDC only supports thin-provisioned volumes
Dynamic provisioning (Hyper-V)
If the recovery volumes are dynamic-provisioned or If the source disk is dynamic provisioned, the default for the recovery
not. volume is also dynamic provisioned.
vCD only: Unless the Org vDC only supports dynamic-provisioned
volumes
26. Click OK.

27. Click NEXT.
The Recovery step is displayed. Recovery details include the networks to use for failover, move, and for testing failover, and
whether scripts should run as part of the recovery operation.
28. Select the default recovery settings. These are applied to every virtual machine in the VPG.
■ Failover/Move Network: The network to use during a failover or move operation in which the recovered virtual
machines will run.
■ Failover Test Network: The network to use when testing the failover of virtual machines in the recovery site. Zerto
recommends using a fenced-out network so as not to impact the production network at this site.
■ Recovery Folder: The folder to which the virtual machines are recovered.
Note: If the recovery site is a Cloud Service Provider site, it is not possible to select a recovery folder.
29. To specify a recovery folder for each virtual machine in the VPG, click VM SETTINGS.
The Advanced VM Recovery Settings window is displayed.
In this window, you can edit the values of one or more of the virtual machines in the VPG.
■ To edit information in one field, click the field and update the information.
The Edit VM window is displayed.
■ Recovery Folder: The folder to which the virtual machine is recovered.

31. Click SAVE.
32. In the Advanced VM Recovery Settings window, click OK.
33.
34. To run pre and post recovery scripts, enter the name of the script to run in the Command to run text box. You can then
enter details about the script.
■ Pre-recovery Script: The information about a script that should run at the beginning of the recovery process.
■ Post-recovery Script: The information about a script that should run at the end of the recovery process.
For both types of scripts, enter the following information:
TEXT BOX DESCRIPTION
Command to run The full path of the script. The script must be located on the same machine as the Zerto Virtual
Manager for the recovery site.
Params The parameters to pass to the script. Separate parameters with a space.
Timeout The time-out, in seconds, for the script to run.
■ If the script runs before executing a failover, move, or test failover, and the script fails or the
timeout value is reached, an alert is generated and the failover, move, or test failover is not
performed.
■ If the script runs after executing a failover, move, or test failover, and the timeout value is
reached, an alert is generated.
■ The default time-out value is specified in Site Settings > Performance and Throttling tab.
NOTE:
Pre and post recovery scripts run in parallel. Therefore, ensure that the pre and post recovery scripts don’t use common
resources.
35. Click NEXT.
The NICs step is displayed. In this step, you can specify the NIC details to use for the recovered virtual machines after a
failover, a test failover, or migration.
38. Otherwise, go to step 40.
The Edit vNIC dialog is displayed.
Specify the network details to use for the recovered virtual machines after a failover or move operation, in the Failover/
Move column, and for the recovered virtual machines when testing replication, in the Test column.
39. In each column, specify the following:
■ Network: The network to use for this virtual machine.
■ Create new MAC address?: Whether the Media Access Control address (MAC address) used on the protected site
should be replicated on the recovery site. The default is to use the same MAC address on both sites. Note that if you
check this option, to create a new MAC address, and the current IP address is not specified, the protected virtual
machine static IP address might not be used for the recovered virtual machine.
■ Change vNIC IP Configuration?: Whether or not to keep the default virtual NIC (vNIC) IP configuration. The vNIC IP is
only changed after recovery for virtual machines with VMware Tools running.
See the Zerto Interoperability Matrix for the list of operating systems for which Zerto supports Re-IPing.
■ To change the vNIC IP, in the Failover/Move or Test column, select Yes. If you select to use a static IP connection,
set the IP address, subnet mask, and default gateway.
■ Optionally, change the preferred and alternate DNS server IPs and the DNS suffix.
■ If you leave the DNS server and suffix entries empty, or select to use DHCP, the IP configuration and DNS server
configurations are assigned automatically, to match the protected virtual machine. You can change the DNS
suffix.
■ If the virtual machine has multiple NICs but is configured to only have a single default gateway, fill in a 0 for each
octet in the Default gateway field for the NICs with no default gateway.
During a failover, move, or test failover, if the recovered virtual machine is assigned a different IP than the original IP,
then after the virtual machine has started, it is automatically rebooted so that it starts up with the correct IP. If the
same network is used for both production and test failovers, Zerto recommends changing the IP address for the virtual
machines started for the test, so that there is no IP clash between the test machines and the production machines.
■ Copy to failover test: Select this to copy the settings in the Failover/Move column to the Test column.
■ Copy to failover/move: Select this to copy the settings in the Test column to the Failover/Move column.
Click OK.
40. Click NEXT.
The Retention Policy step is displayed. Retention properties govern the VPG retention, including the repository where the
retention sets are saved.
41. By default, Long Term Retention is OFF. To keep this value, go to step 50.
42. Toggle Long Term Retention from OFF to ON.
The options on the screen become available.
Note: When a VPG is recovered to a Public Cloud, Long Term retention is not available.
43. Select the Target Repository from the drop-down list. This is the name of the Repository where the retention sets are
written. The Connection Type and Path of that Repository appear after selecting the Target Repository.
44. Select the VMs to index from the File System Indexing drop-down list. For details on file system indexing, see Configuring
File System Indexing.
45. Run all retention processes at: The time to start the retention process.The time is shown in UTC and is according to the
Zerto Virtual Manager clock in the production site. All Daily, Weekly, Monthly or Yearly retentions will run at this time.
46. Daily and Monthly retentions are toggled ON by default and the default retention settings for Schedule, Type and Keep
For appear. By default, all retention processes are scheduled to run on the same day.
47. Toggle the Weekly or Yearly retentions from OFF to ON. The default retention settings for Schedule, Type and Keep For
appear. The retention setting Keep For is the length of time to keep the retention sets. For details of how this affects the
number of retention sets saved, see Storing Retention Sets.
Note: Daily or Weekly retentions must be configured. Weekly or Monthly retentions must be configured to Full.
48. If you do not want to use the default settings, click the edit icon next to each retention setting and configure the following:
Daily
Click the edit icon. The Daily Retention window is displayed ■ Run at: The time set to run all retention processes.
This field cannot be edited from the Daily
Retention window.
■ Keep For: Define the number of days to keep the
Daily Retentions. A rotation of the retention
process will be performed to enforce the
predefined retention.
.
Weekly
Click the edit icon. The Weekly Retention window is displayed. ■ Every: Run a retention process every selected day
of the week.
■ Type: Select Full or Incremental from the drop-
down menu.
■ Full: All the data is copied to the Repository.
■ Incremental: Only the changes from the last
retention process are copied.
■ Run at: The time set to run all retention processes.
This field cannot be edited from the Weekly
Retention window.
■ Keep for: Define the number of weeks to keep the
Weekly retentions. A rotation of the retention

Monthly
Click the edit icon. The Monthly Retention window is displayed. ■ Run a retention process on the first, second, third,
fourth or last selected day of each month. For
example, you can choose to run a retention
process on the last Sunday of each month.
■ Or, you can run a retention process on a specific
date of the month up to the 28th and last. For
process on the 12th of each month.
down menu.
This field cannot be edited from the Monthly
Retention window.
■ Keep for: Define the number of months to keep
the Monthly retentions. A rotation of the retention
Yearly
Click the edit icon. The Yearly Retention window is displayed. ■ Run a retention process on the first or last
selected day of the year. For example, you can
choose to run a retention process on the last
Sunday of each year.
day and month of the year. For example, you can
choose to run a retention process every 12th of
July.
down menu.
This field cannot be edited from the Yearly
Retention window.
■ Keep for: Define the number of years to keep the
Yearly retentions. A rotation of the retention
49. Retries: Select Automatic retry after failure to automatically rerun the retention process, if the operation fails.
■ If you select this option, you must also define Number of attempts, and the Wait time between retries.
50. Click NEXT.
The Summary step appears, displaying the VPG’s configurations.
51. Click DONE. The VPG is created.
For details of what happens after saving the VPG, see “What Happens After the VPG is Defined”, on page 43.
Replication From a Protected vCenter Server to the Same Site

The same site can be used as both the protected and recovery sites. Even if the site is not paired with another site, VPGs can be
created.
See also “When to Replicate to the Same Site”, on page 68.
When to Replicate to the Same Site

The following scenarios show when replicating to the same site can be beneficial. The list is not inclusive.
■ Where the same vCenter Server manages different datacenters in different geographical locations. The main datacenter
can be used as the recovery site. This scenario describes situations where there are remote offices or branch offices
(ROBOs).
■ In an organization that does not have a recovery site but wants to protect its virtual machines that use one datastore by
creating recovery on a second datastore. this protects against a disaster happening to the primary datastore.
■ Between hosts in different clusters.
■ Protection against viruses, even in a single cluster: A different host within the cluster can serve as the recovery host for a
host with an internal problem with a virtual machine, such as a virus.
To protect from a vCenter Server to the same site:

1. Open Site Settings. In the Site Settings window, select the tab Policies.
2. In the Replication area, select Enable Replication to Self.

3. Then, click Save or Apply.
To define a VPG to recover to the protection site:

1. In the Zerto User Interface, select ACTIONS > CREATE VPG.
The Create VPG wizard is displayed.
2. Continue by using the procedure for protecting virtual machines, as described in “Replication From a Protected Site
vCenter Server to a Recovery Site vCenter Server”, on page 46. In the REPLICATION tab, select the local site as the
Recovery Site.
Replication From a Protected vCenter Server to the Same Site 68

Protecting a Single Virtual Machine (Via the VMware Web Client or Client Console)
You can protect a virtual machine, which is not already included in a VPG, directly via the Zerto tab for the virtual machine in
vSphere Web Client or Client console. You are presented with the following options:
■ To add the virtual machine to an existing VPG. The virtual machine is added to the VPG, as described in “To protect a
single virtual machine via the vSphere Client console or Web Client:”, below.
■ To create a new VPG that you intend should only include one virtual machine, as described in “To protect a single virtual
machine:”, on page 70.
■ To create a VPG that includes the virtual machine, as described in “Protecting Virtual Machines from a vCenter Server”, on
page 45. When using the Zerto User Interface, use this procedure.
To protect a single virtual machine via the vSphere Client console or Web Client:
1. In the vSphere Web Client or Client console, select the Zerto tab for the virtual machine to be added.
2. Click ADD TO EXISTING VPG.
The Select VPG dialog is displayed.
3. Select the VPG from the list of VPGs.

4. Click OK.
The Edit VPG wizard is displayed.
5. Configure the virtual machine configuration, as described in “Protecting Virtual Machines from a vCenter Server”, on
page 45, starting with step 18.
■ The virtual machine is added to the VPG. This process may take a few minutes.
■ The protected and recovery sites are then synchronized so that the recovery site includes the replication of the added
virtual machine in the VPG.
■ After synchronization, the delta changes to the virtual machine are sent to the recovery site.
Protecting a Single Virtual Machine (Via the VMware Web Client or Client Console) 69
To protect a single virtual machine:

1. In the vSphere Web Client or Client console, select the Zerto tab for the virtual machine to be protected.
2. Click PROTECT AS A STANDALONE VM.
The Create VPG wizard is displayed. The VPG Name defaults to the name of the virtual machine and in the VMs tab, the
virtual machine is selected. Note that you can select other virtual machines to add to the VPG.
3. Make any required changes to the VPG, as described in “Replication From a Protected Site vCenter Server to a Recovery
Site vCenter Server”, on page 46.
Protecting a Single Virtual Machine (Via the VMware Web Client or Client Console) 70
Replication From a Protected Site vCenter Server To a Recovery Site Hyper-V Host
You can protect virtual machines to recovery Hyper-V hosts. The procedure is the same whether you intend to protect one
virtual machine or multiple virtual machines.
When creating a VPG from a VMware vCenter Server environment to Hyper-V all recovery operations bring up the recovered
machines on Microsoft Hyper-V hosts in SCVMM.
When protecting virtual machines from a VMware vCenter Server environment to Hyper-V, the operating systems of the
protected machines must be supported by Hyper-V. Refer to Hyper-V documentation for the list of supported operating
systems. Also, virtual machine names cannot include any of the following special characters: *?:<>/|\".
Conversion considerations for a protected virtual machine in vSphere when it is recovered in Hyper-V:
■ A machine using BIOS is recovered in Hyper-V as a Generation 1 virtual machine.
■ A machine using EUFI is recovered in Hyper-V as a Generation 2 virtual machine.
■ A machine with a 32bit operating system is recovered in Hyper-V as a Generation 1 virtual machine.
■ A machine with a 64bit operating system is recovered in Hyper-V as either a Generation 1 or Generation 2 virtual machine,
dependent on the operating system support in Hyper-V.
■ The boot disk is ported to a disk on an IDE controller. The boot location is 0:0.
■ A virtual machine using up to 4 SCSI controllers is recovered as a virtual machine with 1 SCSI controller.
■ The virtual machine NICs are recovered with Hyper-V network adapters except for protected Windows 2003 virtual
machines which are recovered with Hyper-V legacy network adapters.
■ When VMware Tools is installed on the protected virtual machine running Windows Server 2012, Integration Services is
installed on the recovered virtual machine automatically.
■ RDM disks are replicated to Hyper-V vhd or vhdx disks, and not to Pass-through disks.
To create a virtual protection group (VPG) to recover in Hyper-V:

Replication From a Protected Site vCenter Server To a Recovery Site Hyper-V Host 71
VPGs have used it.
3. Click NEXT.
6. To define the boot order of the virtual machines in the VPG, click DEFINE BOOT ORDER, otherwise, go to the next step.

a virtual machine.
8. Click NEXT.
9. Specify the Hyper-V recovery site, and the default values to use for the replication to this site. This is the site to which you
want to recover the virtual machines. After specifying the Microsoft SCVMM recovery site, the host and storage on the
site to use for the replication can be specified.
site.
■ Host: The default cluster or host, in the recovery site that handles the replicated data.
■ Storage: The default storage volume to use for the recovered virtual machine files and for their data volumes. Every
storage for the recovery host is included in the drop-down list. If a cluster is selected for the host, only storage
accessible by every host in the cluster are displayed.
10. Optionally, change the VPG SLA settings, which apply to every virtual machine in the group.
■ Journal History: The time that all write commands are saved in the journal.
The longer the information is saved in the journal, the more space is required for each journal in the VPG.
Select the number of hours from 1 to 23 or the number of days from 1 to 30.
11. For additional journal-related fields, click Advanced.
The Advanced Journal Settings dialog is displayed.

Journal History
storage/datastore.

datastore.
are not displayed.
grow.
datastore.
are not displayed.
warning.
is almost full.
12. Click OK.
is issued.
To change the replication settings per virtual machine, click VM Settings.
The Advanced VM Replication Settings dialog is displayed.
The Edit VM dialog is displayed.
16. Define as follows:

machine.

VPG
displayed.
are not displayed.

are not displayed.
is almost full.
17. Click OK.

18. In the Advanced VM Replication Settings dialog, click OK.
19. Click NEXT.
to create the VPG.
■ Dynamic: Select this when the recovery volume is dynamic-provisioned.
■ Temp Data: If the virtual machine to be replicated includes a temp data disk as part of its configuration, mark the
recovery disk for this disk as a temp data disk. In this case, data is not replicated to the temp data disk after initial
synchronization.
20. To edit storage information for one of the virtual machines’ volume location, first select the virtual machine, then click

Volume Source

■ Datastore
■ RDM
for the journal.

machine.
VMDKs.
a BusLogic
Hyper-VSCSI
Host controller, nor when protecting or recovering virtual
Replication From a Protected Site vCenter Server To a Recovery Site 82

Path:

the recovery site.
times out.

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes
21. Click OK.

22. Click NEXT.
23. Select the default recovery settings.

machines will run.
performed.
NOTE:
resources.
25. Click NEXT.
28. Otherwise, go to step 31.
The Edit vNIC dialog is displayed.
■ Change vNIC IP Configuration: Whether or not to keep the default virtual NIC (vNIC) IP configuration. Configuration
is possible only when the guest operating system is defined in the hypervisor manager and Integration Services or
VMWare Tools are detected. The vNIC IP address is only changed after recovery for virtual machines with VMware
Tools and Microsoft Integration Services running.
IMPORTANT Re-IP Information:
To utilize re-IP during failback, make sure that:

■ VMware Tools is installed on the virtual machine in vCenter server.
■ The user who is logged on to VMWare Tools has sufficient privileges to execute re-IP changes.
See the Zerto Interoperability Matrix for the list of operating systems for which Zerto supports re-IP.
To change the vNIC IP configuration, select Yes in the Failover/Move or Test column. If you select to use a statically-
assigned IP address, set the IP address, subnet mask, and default gateway. Optionally, change the preferred and alternate
DNS server IP addresses and the DNS suffix. If you leave the DNS server and suffix entries empty, or select to use DHCP,
the IP address and DNS server configurations are assigned automatically, to match the protected virtual machine. You can
change the DNS suffix.
If the virtual machine has multiple NICs but is configured to only have a single default gateway, fill in a 0 for each octet in
the Default gateway field for the NICs with no default gateway.
Note: During a failover, move, or test failover, if the recovered virtual machine is assigned a different IP address than the
original IP address, after the virtual machine has started it is injected with the correct IP address. If the same network is
used for both production and test failovers, Zerto recommends changing the IP address for the virtual machines started for
the test, so that there is no IP address clash between the test machines and the production machines.
30. Click OK.
31. Click NEXT.
retention sets are saved. VPG retention extends the ability to recover virtual machines in a VPG going back one year.
32. By default, Long Term Retention is OFF. To keep this value, go to step 40.

Daily
Retention window.
.
Weekly
of the week.
down menu.
Retention window.

Monthly
down menu.
Retention window.
Yearly
July.
down menu.
Retention window.
41. Click NEXT.
The Summary step appears, displaying the VPG’s configurations.
Replication From a Protected Site vCenter Server to a Recovery Site AWS

You can protect a vCenter site to Amazon Web Services (AWS).
When creating a VPG from vCenter to AWS the data is stored in S3 and all replicated data from protected virtual machines to
AWS is encrypted in S3. All recovery operations bring up the recovered machines in EC2 in AWS.
Before replicating from a protected vCenter site to a recovery AWS site, review the following guidelines for AWS
environments, and considerations when protecting to AWS: Zerto Virtual Replication - Prerequisites & Requirements for
Amazon Web Services (AWS)
See also:
■ “Import Methods for AWS”, on page 91
■ “ZertoTools for AWS”, on page 94
■ “AWS Linux re-IP Script”, on page 96
After reviewing the guidelines and considerations, proceed with “Protecting From a vCenter Server - To an AWS Recovery
Site”, on page 97.
Import Methods for AWS

During recovery operations, Zerto uses a combination of the following APIs and methods to convert the Amazon S3 objects
into recovery disks in EC2 as EBS disks:
■ AWS Import:
■ Import-instance: for the boot volume
■ Import-volume: for data volumes
For more information see the relevant AWS documentation:
■ API_ImportInstance
■ API_ImportVolume
Note: The ImportImage API is not used by Zerto.
■ Zerto Import - zImport: an import method that does not have the same limitations as the AWS APIs. It creates an AWS
EC2 instance per protected VM volume, called zImporter, to convert the S3 objects and write them to a zImport local disk.
When all the data has been imported and its disk have been attached to the recovered instance, the zImport instance is
terminated.
Notes:
■ zImporter is based on an official AWS Linux AMI (Amazon Machine Image), into which a script is injected to perform
the import. The script is located online and downloaded to the zImporter, and thus the zImporter requires internet
access in order to access and download the script. The zImport instance is therefore created with a public IP.
■ The only network in the customer environment that is certain to have internet access is the network that the ZCA is
connected to.
■ To ensure that the zImport instance cannot be accessed from the outside world, a security group is created. During a
recovery operation the zImport instance is connected to this security group. All inbound traffic is blocked and only
outbound traffic to access the script online is allowed. The security group is deleted at the end of the recovery
operation.
■ Amazon's S3 encryption policy should not be enforced to Zerto's S3 bucket by adding a Bucket Policy. Some metadata
objects are uploaded to the S3 bucket without encryption.
■ The default zImporter instance type is c5.4xlarge and the AWS EC2 default maximum instance quota is 10. If during
the creation of zImport instances the maximum EC2 instance quota is reached, the creation of the next and
subsequent zImport instances will be queued, increasing the RTO. If during recovery operations, the ZVM identifies a
VPG with the potential to exceed the EC2 instance quota, the user will receive an alert with advice to contact AWS
support to increase the service limits in order to improve RTO.
■ Each zImporter VM is responsible for the import process of a single volume. Therefore, it is recommended to
contact AWS and increase the maximum instance quota of the c5.4xlarge instance type to the maximum number
of volumes you are planning to failover to AWS at once.
■ GPT formatted disks are supported for data volumes only, when using either of the zImport methods.
Replication From a Protected Site vCenter Server to a Recovery Site AWS 91

■ When using either of the zImport methods, each volume is created with EBS disk of type io1 with maximum 1000 EBS
Provision IOPS allocated. EBS disk type can be changed post recovery without downtime, see the relevant for more
information see the relevant AWS documentation. The minimum disk size for io1 is 4GB.
■ The default Max EBS Provision IOPS quota in a region across all io1 disks is 40000 EBS Provision IOPS, meaning that
with 1000 EBS Provision IOPS per volume, the maximum possible number of volumes is 40. If the Max EBS Provision
IOPS quota is reached, the failover process will switch to using slower gp2 disks. An event will notify the user of this,
and recommend that the user contact AWS support to increase the Max EBS Provision IOPS quota.
■ EBS encryption is enabled by default.
■ Depending on the desired RTO during recovery operations, or when testing failover, the user can select an import method
per VPG or per virtual machine from the following options:
■ “Zerto Import for Data Volumes”, on page 92
■ “Zerto Import for All Volumes”, on page 92
■ “AWS Import”, on page 93
Zerto Import for Data Volumes

This method is the default setting and has a faster RTO than AWS Import. This method uses a combination of the AWS
import-instance API for the boot volume, and the zImport method for data volumes.
■ Each machine that you intend to protect must have at least 250MB free space. This is because AWS adds files to the
recovered machines during failover, move, test failover, and clone operations.
■ Protected boot volumes are recovered in EC2 as EBS disks with magnetic disk type. Virtual machines with disks that are
less than 1GB are recovered with disks of 1GB. Temporary disks may be created based on the selected instance size.
■ Temporary disks may be created based on the selected instance size.
■ The maximum protected data volume size is 16TB, while the boot volume can be up to 1TB.
■ The AWS ImportInstance API only supports single volume VMs. The boot volume of the protected virtual machine should
not be attached to any other volume to successfully boot. For more information, see http://docs.aws.amazon.com/
AWSEC2/latest/APIReference/API_ImportInstance.html
Zerto Import for All Volumes

This method uses the zImport method for all volumes and ensures the fastest RTO.
This method creates an AWS EC2 instance per protected VM volume, called zImporter, to convert the S3 objects and write
them to a zImport local disk. When all the data has been imported and its disk have been attached to the recovered instance,
the zImport instance is terminated.
■ The maximum protected data volume size is 16TB, while the boot volume can be up to 2047GiB.
Note: Some VMs use the MBR partitioning scheme, which only supports up to 2047 GiB boot volumes. If your instance
does not boot with a boot volume that is 2TB or larger, the VM you are using may be limited to a 2047 GiB boot volume
size. Non-boot volumes do not have this limitation. See AWS Documentation for more information: http://
docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
When using Zerto Import for All Volumes import method, if the protected virtual machine using this import method is running
Windows 2012, Windows 2012R2 or Windows 2016, the following drivers must be installed on the protected virtual machine
before starting recovery operations:
■ Windows ENA (Elastic Network Adapter) Drivers
When recovering to C5/M5 instances using Zerto Import for All Volumes import method, only Windows 2012R2 and
Windows 2016 are supported. The following drivers must be installed on the protected virtual machine before starting
recovery operations when recovering to C5/M5 instances:
■ NVMe driver
Note: If these drivers are installed on a VM running Windows 2012R2, the other AWS import methods will fail. To overcome
this, you must uninstall the drivers before using the other AWS import methods.
The following steps must be performed to ensure that the virtual machine will be able to run on the recovery site:

1. Download and Install Windows ENA Drivers:
NOTE:
If you are recovering to C5/M5 instances, skip this step and go to step 2.
If you are running Windows 2012 or Windows 2016 on any of the following AWS instance types:
■ C3 ■ I2
■ C4 ■ R3
■ D2 ■ M4 (excluding M4.16xlarge)
a) Go to http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/sriov-networking.html#enable-enhanced-
networking
b) Follow the instructions at the site for downloading and installing the Windows ENA Drivers.
2. When using C5/M5 instance types only, the following drivers need to installed:
a) Download ENA (Enhanced Network Adapter) from this link.
b) Extract and execute "InstallEna.ps1"
c) Download the NVMe driver from this link.
d) Extract and execute "Dpinst.exe"
NOTES:
C5/M5 instance types are supported with the Zerto Import for All Volumes import method only.
IMPORTANT:
When using this import method for Windows machines, ZertoTools for AWS needs to be run on the protected
Windows virtual machine in VMware before VPG creation. For more information, see ZertoTools for AWS.
AWS Import
This method uses a combination of the AWS import-instance and import-volume APIs for the boot and data volumes
respectively. This was the only method supported until version 5.5.
less than 1GB are recovered with disks of 1GB. Additional volumes might be created in the recovered instance, dependent
on the instance type used for the recovery. These volumes can be ignored.
■ Protected volumes are recovered in EC2 as EBS disks with magnetic disk type. Virtual machines with disks that are less
than 1GB are recovered with disks of 1GB. Additional volumes might be created in the recovered instance, dependent on
the instance type used for the recovery. These volumes can be ignored. Temporary disks may be created based on the
selected instance size.
■ The maximum protected data volume and boot disk size is 1TB.
The AWS ImportInstance API only supports single volume VMs. The boot volume of the protected virtual machine should not
be attached to any other volume to successfully boot. For more information, see http://docs.aws.amazon.com/AWSEC2/
latest/APIReference/API_ImportInstance.html

ZertoTools for AWS

ZertoTools for AWS is required for protecting VMs running Windows operating system in VMware, while AWS is the recovery
site platform. The tool enables the following:
■ re-IP for Windows machines upon failback to VMware site when using Zerto Import for Data Volumes import method.
(Due to AWS expected behavior, VMware tools are removed for virtual machines that were imported from VMware.)
■ Supporting Zerto Import for All Volumes import method for Windows machines for failover and upon failback to VMware
site.
BEST PRACTICE:
It is recommended to install ZertoTools before VPG creation. This ensures that all checkpoints are valid when failing
over.
If you install ZertoTools after VPG creation, make sure you select a checkpoint after the installations are completed.
ZertoTools Requirements
■ ZertoTools supports the following operating systems:
■ Windows 2008R2
■ Windows 2012
■ Windows 2012R2
■ Windows 2016
■ Windows 2019* (Windows 2019 is supported only if using Zerto Import for All Volumes)
■ Run ZertoTools from C: Windows OS drive only.
■ .Net Framework 4.5 and up must be installed.
ZertoTools Limitations
■ When using the Zerto Import for All Volumes import method, ZertoTools should not be installed on machines with
Windows that are Domain Controllers.
When failing over machines with Windows 2012, 2012R2 and 2016 that are Domain Controllers, the Windows Citrix PV
drivers need to be downloaded manually on the protected machines.
To download and install Windows PV drivers:
a) Go to https://www.xenproject.org/downloads/windows-pv-drivers/winpv-drivers-81/winpv-drivers-820.html
b) Follow the instructions for downloading and installing all Windows PV drivers.
■ To failover Windows 2008R2 with Domain Controller, contact Zerto Support.
■ Failback for Windows machines with Domain Controller is not supported.
ZertoTools Execution Options

When an instance is created in AWS, or when performing Failover using the Zerto Import for Data Volumes and AWS Import
methods, by default, Amazon will install the latest version of the AWS PV driver.
When using the Zerto Import for All Volumes import method, only the AWS PV driver version 7.4.6 version is supported when
failing back from AWS to vSphere.
Therefore, there are two modes of ZertoTools to choose from:
■ Installing ZertoTools with the latest AWS PV driver.
■ When choosing this mode, you will need to downgrade the AWS PV driver before performing Failback to vSphere.
■ Installing ZertoTools with AWS PV driver version 7.4.6. This version of the PV driver supports failback to vSphere.
NOTE:
PV drivers should not be manually installed on protected VMs prior to failover. This will result in an unreachable
recovery instance in AWS after the failover completes.

To execute the ZertoTools script:

1. Login to myZerto to access ZertoTools from myZerto > Support & Downloads > Tools > ZertoTools for AWS.
2. Extract the zip file and copy the Zerto Tools.bat to each protected Windows virtual machine in VMware.
3. Execute the batch files with one of the following arguments:
■ -d (downgrade): ZertoTools will automatically downgrade/install the AWS PV driver upon failover to AWS. For more
information about the Downgrade Script, see “Downgrade Script”, on page 95.
■ -l (latest): ZertoTools will install the latest version of the AWS PV driver on the instance using the Zerto Import for All
Volumes import method. Before failback from AWS to vSphere, you will need to downgrade the AWS PV driver.(For
instances using Zerto Import for Data Volumes and AWS Import methods, the latest AWS PV driver will be installed
by Amazon).
4. Wait a few minutes and verify you get the following message: Process successfully finished.
IMPORTANT:
If you receive an error message, DO NOT perform failover.
5. The script downloads the AWS PV driver and installs it upon failover on the AWS machine. If the AWS PV driver download
fails, manually download it from the following link
■ AWS PV driver version 7.4.6: https://s3.amazonaws.com/ec2-windows-drivers-downloads/AWSPV/7.4.6/
AWSPVDriver.zip
■ AWS PV driver version <Latest>: https://s3.amazonaws.com/ec2-windows-drivers-downloads/AWSPV/Latest/
AWSPVDriver.zip
NOTE:
If you need to download the PV driver manually, the zip file name AWSPVDRIVER should not be changed.
ZertoTools will also backup the VMtools to ensure re-IP works upon Failback to the protected VMware site.
When running ZertoTools, note the following:
■ A folder named ZertoTools is created on C:/ProgramData folder.
This folder must not be deleted.
■ Upon failover to AWS, the AWS PV driver update may force reboot of the recovered instances in AWS.
Downgrade Script
If you decide to install the latest AWS PV driver, you will need to downgrade it before failing back to vSphere.
To execute the downgrade script:

1. Login to the protected AWS instance and locate the AWS PV driver version.
2. Backup the AWS instance on which you’re going to downgrade the AWS PV driver.
3. Copy the entire directory from myZerto > Support & Downloads > Tools > Downgrade Script to the AWS protected
instance.
4. Execute the batch file (not the MSI file).
IMPORTANT:
Your AWS machine will be disconnected for a few minutes upon execution of the batch files.
5. After a few minutes, connect to the AWS instance and verify that the AWS PV driver is version 7.4.6.
If you installed ZertoTools after VPG creation, wait for the next checkpoint to be created before performing failover.

AWS Linux re-IP Script

The AWS Linux re-IP script is required when failing over from VMware to Amazon with Linux operation systems, and the
recovery site is configured with a static IP. The re-IP script should be executed on the protected virtual machine.
The script enables changing the network configuration of the virtual machine from static to DHCP on the recovered AWS site
when using the Zerto Import for All Volumes import method, and saves a backup of the network configuration before failing
over to AWS.
To execute the AWS Linux re-IP script:

1. Login to myZerto to access the AWS Linux re-IP script from myZerto > Support & Downloads > Tools > AWS Linux re-IP
Script.
2. Copy all the files in the directory to the protected virtual machine running a Linux OS (can be run from any directory).
3. Copy all the files from the Zerto-URL folder to the created folder.
4. Run the following commands:
■ For granting execution permissions to the re-IP installer script: chmod +x ./reipinstaller.sh
■ For executing the script: ./reipinstaller.sh
5. Change the VPG import method to the Zerto Import for All Volumes import method.
6. Wait a few of minutes to ensure that the protected site is synced with the recovery site. If required, perform a forced sync.

Protecting From a vCenter Server - To an AWS Recovery Site

Use the following procedure to create a virtual protection group to protect to AWS.
to create the VPG.
To create a virtual protection group (VPG) to recover in AWS:

VPGs have used it.
3. Click NEXT.

4. Select the VMs that will be part of this VPG and click the arrow pointing right to include these VMs in the VPG.


a virtual machine.
When configuring boot order settings, define the boot disk to be first in the boot sequence in order to avoid boot failure.
8. Click NEXT.

automatically filled in and defaults set, as shown below.
9. Specify the recovery site.
■ Recovery Site: The site to which you want to recover the virtual machines. After specifying the recovery site, other
fields are displayed.
You cannot select a recovery site if any of the virtual machines you selected are already in VPGs that recover to that site.
10. Optionally, change the default SLA values:
is issued.
11. Click NEXT.
12. Specify whether the protected volume is a Temp Data disk.

Temp Data: If the virtual machine to be replicated includes a temp data disk as part of its configuration, mark the recovery
disk for this disk as a temp data disk. In this case, data is not replicated to the temp data disk after initial synchronization.
13. Click NEXT.
The Recovery step is displayed. Recovery details include the networks, security group, instance family, and instance type
to use for failover, move, and testing failover, and whether scripts should run as part of the recovery process.
14. From the Import Method drop-down list, select an import method.
■ Zerto Import for data volumes (Faster): Uses the zImport method for data volumes only. This is the default setting
and usually has a faster RTO than AWS Import.
■ Zerto Import for all volumes (Fastest, Requires setup): This is usually the fastest import method and uses a zImport
VM for all volumes.
■ AWS Import: This was the only import method supported until version 5.5.
15. Then, select settings for Failover/Move Recovery and Failover Test:
IMPORTANT:
ZertoTools for AWS is required for protecting VMs running Windows operating system in VMware, while AWS is the
recovery site platform.
■ For for information about ZertoTools, see “ZertoTools for AWS”, on page 94.
■ For more information about Zerto Import Methods, see “Import Methods for AWS”, on page 91.
■ VPC Network: The virtual network dedicated to your AWS account. A security group and subnet must be assigned to
this VPC.
■ Subnet: The subnet for the VPC network.
■ When you select the import methods Zerto Import for data volumes (Faster), or Zerto Import for all volumes
(Fastest, Requires setup), only those subnets that are supported by the zImport method are displayed in the
drop-down list.
Other Subnets are grayed out and cannot be selected.
NOTE:
The zImport virtual machine must have access to the internet in order to access the S3 Bucket and the AMI in EC2. The
only network in the customer environment that is certain to have internet access is the network to which the ZCA is
connected.
If the import method is not AWS Import, then the user can select only subnets that are part of the same Availability
Zone as the one in which the ZCA resides. Other Subnets are disabled.
■ When you select the import methods AWS Import, all subnets are listed. A tool tip alert is displayed when the
user hovers over a subnet that is not supported.
NOTE:
If a subnet is chosen in a network that is not in the same Availability Zone as the one in which the ZCA resides, options
that utilize the zImport method will not be made available for selection.
■ Security Group: The AWS security to be associated with the virtual machines in this VPG.
■ Instance Family: The instance family from which to select the type. AWS instance families are optimized for different
types of applications. Choose the instance family appropriate for the application being protected in the VPG.
■ Instance Type: The instance type, within the instance family, to assign to recovered instances. Different types within
an instance family vary, for example in vCPU, RAM, and local storage size. Choose the instance type appropriate for
the application being protected in the VPG. The price per instance is related to the instance configuration.
■
16. For additional settings, click Advanced VM Settings.
The Advanced VM Settings window is displayed, which shows the recovery network settings for Failover/Move for virtual
machines in the VPG. You can see the recovery network settings for failover tests by selecting Test.
The Edit VM Settings dialog is displayed.
19. Update the values for Import Method, VPC network, subnet, security group, instance family, instance type, and private IP
as necessary.
Note: Only private IPs specified for Windows machines are assigned during a recovery operation. For Linux machines, the
IP is assigned from the specified subnet range.
Clearing the values in the Private IP field results in an IP being automatically assigned from the subnet range during a
recovery operation.
20. Click OK twice to return to the main page of the Recovery step.

performed.
NOTE:
resources.
22. Click NEXT.

The Retention Policy page appears. Retention Policy is not available in Cloud environments.
23. Click NEXT.
The Summary step appears, displaying the VPG's configurations.
For details of what happens after creating the VPG, see “What Happens After the VPG is Defined”, on page 43.
Replication From a Protected Site vCenter Server to a Recovery Site Microsoft Azure
You can protect virtual machines to Microsoft Azure. The procedure is the same whether you intend to protect one virtual
machine or multiple virtual machines.
When creating a VPG from vCenter server to Azure the data is stored in a storage account and all replicated data from
protected virtual machines to Azure is encrypted in the storage account. All recovery operations bring up the recovered
machines in resource groups in Azure.
See also:
■ “Requirements for Microsoft Azure Environments”, on page 106
■ “VPGs Recovering to Azure Standard Storage and Premium Managed Disks”, on page 106
■ “Converting Premium Virtual Machines for Protection”, on page 106
■ “Protecting From a vCenter Server - To a Microsoft Azure Recovery Site”, on page 109
Requirements for Microsoft Azure Environments

Before protecting your virtual machines, review Zerto Prerequisites and Requirements for Microsoft Azure Environments.
VPGs Recovering to Azure Standard Storage and Premium Managed Disks

Azure recovery of the VPG can be configured to Premium Managed or Standard Storage.
Based on the VPG configuration, VMs can be recovered to either Standard storage, Premium Managed disks or both.
■ Recovering VMs to the Standard Storage Account:
A VPG that all its virtual machines are recovered to the Standard storage account, as defined during the ZCA installation,
can be Reverse Protected. For more information about Reverse Protection, see the Reverse Protection for a Moved VPG
section.
■ Recovering VMs to Premium Managed Disks:
A VPG that all its virtual machines are recovered to Premium Managed disks goes into Recovered state. To protect a
virtual machine with Premium Managed disks, see the Converting Premium Virtual Machines for Protection section.
■ Recovering VMs to Both Standard Storage and Premium Managed Disks:
In the case where a VPG has virtual machines recovering to both Standard storage and Premium Managed disks, the
recovered VPG goes into a Needs Configuration state. In this scenario, you can remove the virtual machines that are
recovered to Premium Managed disks in order to protect the virtual machines recovered to Standard storage.
To remove virtual machines recovered to Premium Managed disks:
a) Open the Edit VPG window > VMs tab.
b) Remove the VMs that are in Premium Managed disks. (These VMs appear as grayed out.)
c) Click Edit Save; the VPG is updated.
Converting Premium Virtual Machines for Protection

The Premium to Standard Conversion tool enables replicating and failing over Premium VMs in Azure. The tool clones the
Premium Managed VMs and creates the same VM with Standard Storage disks, which the ZCA will then be able to protect.
The Premium to Standard Conversion tool is installed on the Azure ZCA machine as part of the ZVM installation.
The tool requires the user to enter input parameters which are then parsed and validated. Once the input parameters are
validated, the application starts running. The conversion process then begins for each of the Premium VMs received in the
input parameters.
Replication From a Protected Site vCenter Server to a Recovery Site Microsoft Azure 106
GLOSSARY:
Premium VM: A Premium VM is when the original VM has all its disks on Premium Managed storage.
Note: We do not support conversion of VMs with disks on Premium Storage account.
Standard VM: A Standard VM is a copy made of the Premium VM, where the disks are copied from Premium Managed
storage to the ZCA’s Standard Storage account.
IMPORTANT:
Note that running the Premium to Standard Conversion tool will cause your Premium VM to be powered off.
To convert Premium VMs for protection:

1. From the Azure ZCA machine, locate the Premium to Standard Conversion tool folder from under the main ZVM installer
folder.
2. Download and extract the Convert Premium VM tool files.
3. Copy the name of the tool (exe. file).
4. Open the Command Prompt window and paste the name of the tool (exe. file) to the command.
5. There are two ways to insert parameters; either as flag arguments or as a path to a .json file that contains the input
parameters.
The following parameters need to be entered:
■ User Name & Password: These are the same credentials used in the ZCA installation.
■ Region Id: The region in which the VM to be converted resides.
■ Subscription Id: The subscription in which the VM to be converted resides.
■ VM Identifiers: The list of VMs that need to be converted. If more than one VM needs to be converted, the VM
Identifiers should be separated with commas.
The VM identifier should be copied from the Premium VM properties (Properties tab > Resource ID.)
■ Storage Account Name: The storage account as defined for the ZCA.
■ Container Name: The name of the container in the Standard Storage Account where the new volumes will be stored.
NOTE:
You can view argument examples within the Command Prompt window by entering the help argument (e.g. ‘-h’)
FLAG ARGUMENTS RUNNING EXAMPLE:
-u [email protected] -p 12345678 -s f241xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -r “West Europe” --vms /

subscriptions/f241xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/resourceGroupName/providers/
Microsoft.Compute’virtualMachines/Win2016Vm,subcriptions/f241xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/
resourceGroups/resourceGroupName/providers/Microsoft.Compute/virtualMachines/WindowsS2016 -sa
storageaccountname -c containername
.JSON FILE EXAMPLE:
Path to a .json file argument:

ConvertPremiumVm C:\jsonFolder\inputFile.json
(If the .json file within the folder contains the .exe file of the application, you can just insert the name of the .json file,
without the application name)
.json file content:
{
"UserName": "[email protected]",
"Password": "123456",
"SubscriptionId": "f241xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"RegionId": "West Europe",
"VMsIdentifiers": [
"/subscriptions/f241xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/namerglocal/providers/
Microsoft.Compute/virtualMachines/PremiumVmTest",
"/subscriptions/f241xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/namerglocal/providers/
Microsoft.Compute/virtualMachines/PremiumVmTest1"
],
"StorageAccountName" : "namelocal1",
"ContainerName" : "vhds"
}
NOTE:
Do not perform any actions on the VMs that are converting until the conversion process is completed.
6. The information is parsed and the log files are printed and saved to the Premium to Standard Conversion tool folder. The
conversion process is performed for each VM sequentially. The following occurs:
■ The Premium VM is turned off (if necessary).
■ The VM’s volumes are copied into the Standard Storage account as defined in the Storage Account Name parameter.
The copy is done sequentially.
■ The Premium VM NICs are detached and receives a NIC with a single IP, regardless of its original NIC/IP
configuration.
■ A new VM is created in the Standard Storage account, with the identical NICs as defined in the original VM.
■ The name of the new VM is “<original_name>-Standard” with the new standard volumes attached to it.
7. Create a VPG with the new Standard Storage VMs to start protecting them. See Protecting From a Microsoft Azure Site - To a
Microsoft Azure Recovery Site.
NOTE:
Upon failing over the Standard VM, only one IP address is assigned to the recovered VM. Any additional network
configurations should be entered manually.
Undo Process
If there is a failure in one of the phases during the conversion process, the system will automatically rollback to the previous
state.
If at least one volume cannot be copied, all volumes that have already been copied to the Standard VM are deleted. The
Premium VM is then powered on again (only if the VM was powered on in its original state).
In some cases the system won’t succeed to automatically rollback, for example, if the tool’s application crashes. You can open
the log entries to see which undo operations are left to execute. In this case, you need to manually rollback to the previous
state, as required at each stage, depending where the failure occurred.
To manually rollback:
1. Detach the NICs from the Standard VM and attach it to the powered down Premium VM.
2. Delete the new primary NIC that was created for the Premium VM.
3. Remove disks from the Standard Storage account.
4. Power on the Premium VM (if necessary).
Protecting From a vCenter Server - To a Microsoft Azure Recovery Site

Use the following procedure to replicate from a protected site vCenter Server to a recovery site Microsoft Azure.
to create the VPG.
To create a virtual protection group (VPG) to recover in Microsoft Azure:

VPGs have used it.
3. Click NEXT.
4. Select the VMs that will be part of this VPG and click the arrow pointing right to include these VMs in the VPG.

a virtual machine.
When configuring boot order settings, define the boot disk to be first in the boot sequence in order to avoid boot failure.
8. Click NEXT.
9. Specify the Recovery Site. This is the CCCsite to which you want to recover the virtual machines. After specifying the
recovery site, other fields are displayed.
10. Optionally, change the default SLA values:
is issued.
11. Click NEXT.


13. Click NEXT.
The Recovery step is displayed. Recovery details include the networks, network security group, recovery disk type, virtual
machine series and virtual machine size to use for failover, move, and testing failover, and whether scripts should run as
part of the recovery process.
14. Select recovery settings for Failover/Move Recovery, and Failover Test.
■ VNet: The virtual network dedicated to your Azure subscription.

■ Subnet: The subnet or the VNet network.
■ Network Security Group: The Azure network security to be associated with the virtual machines in this VPG. You can
associate one network security group with the virtual machines. The NIC will be associated with the network security
group defined at the virtual machine level.
■ Recovery Disk Type: Select the Azure recovery storage type to which the entire VPG will be recovered to; Premium
Managed or Standard Storage. The Virtual Machine Series and Virtual Machine Size fields are updated with the
relevant options based on the selected Recovery Disk Type.
Note: To protect Premium Managed disks, see Converting Premium Virtual Machines for Protection.
■ Virtual Machine Series: The virtual machine series from which to select the size. Azure virtual machine series are
optimized for different types of applications. The default is set to DSv2. You can choose the virtual machine series
appropriate for the application being protected in the VPG.
■ Virtual Machine Size: The virtual machine size, within the virtual machine series, to assign to recovered virtual
machines. Different sizes within a virtual machine series vary, for example in a number of cores, RAM, and local
storage size. The default is set to Standard_DS1_v2. You can choose the virtual machine size appropriate for the
application being protected in the VPG. The price per virtual machine is related to the virtual machine configuration.
The Advanced VM Settings dialog is displayed, which shows the recovery network settings for failover and move for virtual
machines in the VPG. You can see the recovery network settings for failover tests by clicking TEST.
The Edit VM Settings dialog is displayed.
18. Update the values for vNet, Subnet, Network Security Group, Recovery Disk Type, Virtual Machine Series, Virtual Machine
Size, and Private IP as necessary.
recovery operation.
Refer to the Zerto Interoperability Matrix for the list of operating systems for which Zerto supports re-IP.
performed.
NOTE:
resources.
21. Click NEXT.

The Retention Policy page appears. Retention Policy is not available in Cloud environments.
22. Click NEXT.
The Summary step appears, displaying the VPG's configurations.
23. Click Done. The VPG is created.
CHAPTER 7: PROTECTING VIRTUAL
MACHINES TO AND FROM VCLOUD
DIRECTOR
When VMware vCloud Director (vCD) is installed at either the protected or recovery site, protection involving vCD can be set
up to cope with the following situations:
■ A disaster, enabling recovery to a point in time in the 30 days prior to the disaster.
■ The need to retain files saved either daily, weekly, monthly or yearly. The same wizard is used to set up both disaster
recovery and the retention policy.
Use any of the following procedures depending on the site to which you need to recover:
FROM A PROTECTED SITE TO A RECOVERY SITE SEE PROCEDURE...
To a different recovery site vCD “Replication From a Protected Site
vCenter Server vCenter Server to a Recovery Site vCD”,
on page 118
To a recovery site vCD “Replication From a Protected Site vCD
to a Recovery Site vCD”, on page 138
To a recovery site vCenter Server “Replication From a Protected Site vCD
to a Recovery Site vCenter Server”, on
page 160
VMware vCloud Director (vCD) To a Hyper-V site “Replication From a Protected Site vCD
to Hyper-V”, on page 180
To a Amazon Web Services (AWS) site “Replication From a Protected Site vCD
to AWS”, on page 199
To a Microsoft Azure site “Replication From a Protected Site vCD
to Azure”, on page 209
Consider the following:

■ When the vCloud Director (vCD) site is set up within Zerto Cloud Manager, as described in Zerto Cloud Manager
Administration Guide, the vCenter Server underlying the vCD for the site cannot be specified as either the protected site or
recovery site. When Zerto Cloud Manager is not used, the vCenter Server underlying the vCD can be specified.
■ Both the VM-level and vCD vApp-level metadata is also replicated to the recovery site. However, Zerto does not replicate
fenced mode settings. If fenced mode is configured in the vCD, it must be enabled for recovered virtual machines after a
failover or move. This can lead to clashes with MAC addresses and IP addresses. If this occurs the MAC address or IP
address must be configured after the failover or move. Both the VM-level and vCD vApp-level metadata is not replicated
when the recovery site is not vCD.
■ In the properties for the vCD vApp to be protected make sure that the Start Action in the Starting and Stopping VMs tab
is set to Power On.
■ When vCD is used, you can have the journals on separate datastores from the recovery volumes. For example, you might
prefer to keep the recovery volumes on storage with better performance, security, and reliability and the journal on less
expensive storage.
■ As part of recovery after a failover or move operation, the data in the journal is promoted to the recovered virtual
machines. During this promotion, the virtual machines can be used, and Zerto makes sure that what the user sees is the
latest data, whether from the virtual machine disks or from the journal. If the journal is on a slow storage device, this is
reflected in the response time the user experiences.
■ You cannot protect virtual machines with IDE devices.
Protecting Virtual Machines to and From vCloud Director 117
Protecting Virtual Machines to and From vCloud Director
Replication From a Protected Site vCenter Server to a Recovery Site vCD
NOTE:
■ When the vCD site is set up within Zerto Cloud Manager, as described in Zerto Cloud Manager Administration Guide,
virtual machines in the underlying vCenter Server cannot be specified.
To create a virtual protection group (VPG) to recover in vCD:

VPGs have used it.
3. Click NEXT. The VMs step is displayed.
Replication From a Protected Site vCenter Server to a Recovery Site vCD 118
The hardware version of the virtual machine must be the same or less than the hardware version supported by the vDC in
vCloud Director (vCD) otherwise recovery of the virtual machine in vCD is not permitted. Set the supported hardware level
in the Provider vDC Properties for the vDC in the vCloud Director console.
The Select VMs window is displayed.
6. Select a VM, using one of the filters from the drop-down list, All/Unprotected/Already Protected, then click OK.
7. Click NEXT.
8. From the Recovery Site drop-down list, select VCD.

A new drop-down list, VC/vCD, is displayed.
9. From the VC/vCD drop-down list, select vCD.
The Replication step is re-displayed, with fields relevant for vCD.
Define as follows:
Guide.
11. Specify the Recovery Org vDC to use in the recovery site.
site.
Note: At least one VRA needs to be installed on a host within a resource pool being used by a Recovery Org vDC.
12. Define the Service Level Agreement for which this VPG is associated.
13. To change the default Journal definitions, click Advanced. The Advanced Journal Settings dialog is displayed.

Journal History
storage/datastore.
datastore.
are not displayed.
grow.

datastore.
are not displayed.
warning.
is almost full.
14. Click OK.
is issued.
16. To change the replication settings per virtual machine, click VM Settings.
The Advanced VM Replication Settings window is displayed.

17. To edit information for a single VM, click the field Storage Policy, or Journal Storage Policy, and update the information.
■ Storage Policy: The Storage Policy in which the VM configuration files will reside. See below for considerations.
■ Journal Storage Policy: The Storage Policy in which the VM Journal files will reside. See below for considerations.
■ Auto Select: Selecting this means that the journal can be placed in any datastore visible to the host that Zerto
selected for recovery, unless the datastore is excluded in the Configure Provider vDCs Dialog.
19. When selecting a Storage Policy, consider the following:

■ Zerto will select a datastore from the selected Storage Policy in which to place these files, unless the datastore is
excluded in the Configure Provider vDCs Dialog.
■ Zerto will try to determine a default Storage Policy according to:
■ A Storage Policy with the same name as the protected Storage Policy.
■ The default Orgvdc Storage Policy.
If Zerto did not manage to determine a default Storage Policy, this field appears empty.
■ When you click to edit, a list of Storage Policies appear. These Storage Policies:
■ Were defined in VMware vCloud Director and are configured in the Orgvdc.
■ Have at least one Datastore that was not excluded as a Recovery Volume in the Configure Provider vDCs Dialog.
20. When selecting a Journal Storage Policy, consider the following:
■ Zerto will select a datastore from the selected Storage Policy in which to place the Journal files, unless the datastore is
■ The default Journal Storage Policy is the same as the default VM Storage Policy.
■ If Zerto did not manage to determine a default Journal Storage Policy, this field appears empty.
■ When you click to edit, the option Auto Select appears, and a list of Storage Policies.
■ The list of Storage Policies associated with the Journal:
■ Have at least one Datastore that was not excluded as a Journal in the Configure Provider vDCs Dialog.
■ Auto Select: Selecting this means that the journal can be placed in any datastore visible to the host that Zerto selected
for recovery, unless the datastore is excluded in the Configure Provider vDCs Dialog.
Note: To review site-specific Storage Policy configurations, see Configure Provider vDCs Dialog.
21. Define the remaining fields as follows:

machine.
VPG
displayed.

are not displayed.
are not displayed.
is almost full.
22. Click Save.

23. In the Advanced VM Replication Settings window, click OK.
24. Click NEXT.

to create the VPG.
IMPORTANT:
synchronization.

VM.
types.
27. To edit storage information for one of the virtual machines' volume location, first select the virtual machine, then click

Volume Source

■ Datastore
■ RDM
for the journal.

machine.
VMDKs.

Path:

the recovery site.
times out.

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes
28. Click OK.

29. Click NEXT.
The Recovery step is displayed. Recovery details include the scripts that should be run either at the start or end of a
recovery operation.

■ vCD Guest Customization: When selected, VMware Guest OS Customization is enabled for the virtual machine in
vCloud Director. Enabling guest customization means that the computer name and network settings configured for
this virtual machine are applied to its Guest OS when the virtual machine is powered on. vCD Guest Customization
must be selected to enable re-IPing the recovered virtual machines.
performed.
NOTE:
resources.
32. Click NEXT.

34. Otherwise, go to step step 37.
The Edit VNIC window is displayed.
35. Specify the network details to use for the recovered virtual machines after a failover or move operation, in the Failover/
In each column, specify the following:
■ MAC Address: Whether the Media Access Control address (MAC address) used on the protected site should be
replicated on the recovery site. The default is to use the same MAC address on both sites.
■ vNIC IP Mode: Which IP mode to use. Specify the IP address if you choose static IP pool.
36. Click OK.
37. Click NEXT.

Daily
Retention window.

Weekly
of the week.
down menu.
Retention window.
Monthly
down menu.
Retention window.

Yearly
July.
down menu.
Retention window.
46. Click NEXT. The Summary step appears, displaying the VPG’s configurations.
The virtual machines in the VPG are protected as a vCD vApp in the recovery site. When recovering the VPG, reverse
protection is configured back the virtual machines.
Replication From a Protected Site vCD to a Recovery Site vCD

When both sites have vCloud Director installed, you can protect:
■ Virtual machines in the underlying vCenter Server.
■ vCD vApps. For details of protecting from vCD to a vCenter Server, refer to “Replication From a Protected Site vCD to a
Recovery Site vCenter Server”, on page 160.
NOTES:
■ When the vCD site is set up within Zerto Cloud Manager, as described in Zerto Cloud Manager Administration Guide,
virtual machines in the underlying vCenter Server cannot be specified.
■ When machines are protected as a vCD vApp in a recovery site vCD, certain vCD settings are retained. To review
which settings are retained, see “Settings Maintained when Replicating from a Protected Site vCD to a Recovery
Site vCD”, on page 159.
NOTE:
The screen examples in the procedure below are based on VMware vCD version 5.6.3 and above, or 8.1 and above.
To create a VPG from vCloud Director, to vCloud Director:

VPGs have used it.
Replication From a Protected Site vCD to a Recovery Site vCD 138

3. Click NEXT. The VMs step is displayed.
4. Select vCloud Director then select the vCD vApp to protect in this VPG. The protected vCD vApp is recovered as a vCD
vApp.
■ The boot order for vCD vApps is defined in the vCloud Director console.
■ Only vCD vApps that are unprotected are displayed in the list. A VPG can include:
■ Only one vApp.
■ vApps that are not yet protected.
■ vApps that are already protected.
5. To view protected vApps, in the Advanced (One-to-Many) section, click Select vApp.

The Select vApp window is displayed.
6. Select a vApp, using one of the filters from the drop-down list, All/Unprotected/Already Protected, then click OK.
Note: With the One-to-Many feature, a VPG containing a single vApp can be recovered to a maximum of three different
sites and cannot be recovered to the same site more than once.
vApps protected in the maximum number of VPGs are not displayed in the Select VMs window.
Protecting vApps in several VPGs is enabled only if both the protected and recovery sites, and the VRAs installed on these
sites, are of version 5.0 and higher.
7. Click NEXT.
8. From the Recovery Site drop-down list, select vCD.

A new drop-down list, VC/vCD, is displayed.
9. From the VC/vCD drop-down list, select vCD.
The Replication step is re-displayed, with fields relevant for vCD.

Define as follows:
Guide.
11. Specify the Recovery Org vDC to use in the recovery site.
site.
Define as follows:

Journal History


storage/datastore.
datastore.
are not displayed.
grow.
datastore.
are not displayed.
warning.
is almost full.
14. Click OK.
is issued.


16. To change the replication settings per virtual machine, click VM SETTINGS.
To edit information for a single VM, click the field Storage Policy, and/or Journal Storage Policy, and update the
information.

Note: To review site-specific Storage Policy configurations, see Configure Provider vDCs Dialog.
■ Storage Policy: The Storage Policy in which the VM configuration files will reside. See considerations below.
■ Journal Storage Policy: The Storage Policy in which the VM Journal files will reside. See considerations below.

machine.


VPG
displayed.
are not displayed.


are not displayed.
is almost full.
23. Click Save.

25. Click NEXT.

to create the VPG.
IMPORTANT:
synchronization.

VM.
types.



Volume Source


■ Datastore
■ RDM
for the journal.

machine.
VMDKs.
Replication From a Protected Site vCD to a Recovery Site vCD a BusLogic SCSI controller, nor when protecting or recovering virtual
150

Path:


the recovery site.
times out.

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes
29. Click OK.

30. Click NEXT.
The Recovery step is displayed. Recovery details include the scripts that should be run either at the start or end of a
recovery operation.


■ vCD Guest Customization: When selected, VMware Guest OS Customization is enabled for the virtual machine in
vCloud Director. Enabling guest customization means that the computer name and network settings configured for
this virtual machine are applied to its Guest OS when the virtual machine is powered on. vCD Guest Customization
must be selected to enable re-IPing the recovered virtual machines.
■ Copy NAT Rules: When checked, NAT rules on source vCD vApp networks are copied to the recovery vCD vApp
during recovery. One of the following options can be selected:
■ Use automatically allocated IP: Allow the recovery site to automatically assign an external IP.
■ Use source external IP: Copy the rule’s external IP as the external IP on the recovery site.
■ vApp Network Mapping: The networks to use for failover and move operations, for failover test operations, and for
test failover operations after a failover or move when reverse protection is configured. The list of current Org
Networks is displayed and you can specify what network to use in each of the situations. <Isolated> means that the
network is an internal only vApp network.
performed.

NOTE:
resources.
33. Click NEXT.

Otherwise, go to step step 37.
The Edit vNIC window is displayed.
35. Specify the network details to use for the recovered virtual machines after a failover or move operation, in the Failover/
In each column, specify the following:
■ vNIC IP Mode: Which IP mode to use. Specify the IP address if you choose static IP pool.

36. Click OK.
37. Click NEXT.


Daily
Retention window.
.
Weekly
of the week.
down menu.
Retention window.


Monthly
down menu.
Retention window.
Yearly
July.
down menu.
Retention window.

Settings Maintained when Replicating from a Protected Site vCD to a Recovery Site vCD
The following tables display settings that are retained when replicating from a protected site vCloud Director to a recovery site
vCloud Director:
■ Edge Gateway Services, on page 159
■ vApp Properties, on page 159
■ Network, on page 159
■ VM Properties, on page 159
Edge Gateway Services

SETTING SETTING RETAINED?
DHCP No
Firewall No
Static Routing No
NAT Configurable
vApp Properties
Leases (Runtime / Storage) No
vApp Description No
VM Start / Stop Yes
Sharing No
Metadata Yes
Network
ORG Network No
(protected ORG vDC networks need to be mapped to recovery ORG vDC
networks)
Isolated vApp network Yes
(same gateway address used)
Routed vApp Network Yes
(same gateway address used, routed organization network mapped)
vApp Network Without NIC On It Yes
(same gateway address used)
VM Properties
Metadata and Description No

Replication From a Protected Site vCD to a Recovery Site vCenter Server

If you want to recover to a vCenter Server, the vCD vApp is replicated in the recovery site as individual VMs.
To create a VPG to protect a vCD vApp to a vCenter Server:

VPGs have used it.
3. Click NEXT.
Replication From a Protected Site vCD to a Recovery Site vCenter Server 160
vApp.
■ Only one vApp.
Note: Define any required boot order for vCD vApps in the vCloud Director console.
6. Click NEXT.
7. In the Replicate To area, specify VC as the recovery site and default values to use for the replication to this site.
This is the site to which you want to recover the virtual machines. After specifying the recovery site, other fields are
displayed including the host and datastore to use for replication.
Guide.
9. Host: The default cluster, resource pool or host in the recovery site that handles the replicated data.
If the site is defined in Zerto Cloud Manager, only a resource pool can be specified and the resource pool must also have
been specified as a resource in Zerto Cloud Manager.
Note: If Zerto Cloud Manager is used, vSphere Standard edition cannot be used.
For details about Zerto Cloud Manager, see Zerto Cloud Manager Administration Guide.
When a resource pool is specified, Zerto checks that the resource pool capacity is enough for any virtual machines
specified in the VPG.
All resource pool checks are made at the level of the VPG and do not take into account multiple VPGs using the same
resource pool. If the resource pool CPU resources are specified as unlimited, the actual limit is inherited from the parent
but if this inherited value is too small, failover, move, and failover test operations can fail, even without a warning alert
being issued by Zerto Virtual Manager.
Note: If a resource pool is specified and DRS is disabled for the site later on, all the resource pools are removed by VMware
and recovery will be to any one of the hosts in the recovery site with a VRA installed on it.
10. Datastore: The default datastore to use for recovered virtual machine files and for their data volumes. Every datastore for
the selected recovery host is included in the drop-down list. If a cluster or resource pool is selected for the host, only
datastores that are accessible by every host in the cluster or resource pool are displayed.

Journal History

storage/datastore.
datastore.
are not displayed.
grow.
datastore.
are not displayed.
warning.
is almost full.
13. Click OK.
is issued.

15. To change the replication settings per virtual machine, click VM Settings.
All the virtual machines from a vCD vApp are displayed.
18. Configure as follows:

machine.

VPG
displayed.
are not displayed.

are not displayed.
is almost full.
19. Click OK.

21. Click NEXT.
to create the VPG.
IMPORTANT:
synchronization.

VM.
types.

Volume Source

■ Datastore
■ RDM
for the journal.

machine.
VMDKs.
Replication From a Protected Site vCD to a Recovery Site vCenteraServer
BusLogic SCSI controller, nor when protecting or recovering virtual
171

Path:

the recovery site.
times out.

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes
You can use the vSphere Client console Performance tab for each virtual machine to help estimate the change rate. For
more details, refer to “WAN Sizing Requirements with Zerto”, on page 34.
25. Click OK.
26. Click NEXT.
27. Select the default

recovery settings. These are applied to every virtual machine in the VPG.
machines will run.
28. Recovery Folder: The folder to which the virtual machines are recovered.
Note: If the recovery site is a cloud service provider site, it is not possible to select a recovery folder.
performed.
NOTE:
resources.
30. Click NEXT.
The Edit vNIC window is displayed.
See the Zerto Interoperability Matrix for the list of operating systems for which Zerto supports Re-IPing.
suffix.
During a failover, move, or test failover, if the recovered virtual machine is assigned a different IP than the original IP, then
after the virtual machine has started, it is automatically rebooted so that it starts up with the correct IP. If the same
network is used for both production and test failovers, Zerto recommends changing the IP address for the virtual machines
started for the test, so that there is no IP clash between the test machines and the production machines.
34. Click OK.
35. Click NEXT.

Daily
Retention window.
.
Weekly
of the week.
down menu.
Retention window.

Monthly
down menu.
Retention window.
Yearly
July.
down menu.
Retention window.
Replication From a Protected Site vCD to Hyper-V

When creating a VPG from a vCD to Hyper-V, all recovery operations bring up the recovered machines on Microsoft Hyper-V
hosts.
When protecting a vCD vApp to Hyper-V, the operating systems of the protected machines must be supported by Hyper-V.
Refer to Hyper-V documentation for the list of supported operating systems. Also, virtual machine names cannot include any
of the following special characters: *?:<>/|\".
The following conversions are done to a protected virtual machine when it is recovered in Hyper-V:
■ A vCD vApp machine with a 32bit operating system is recovered in Hyper-V as a Generation 1 virtual machine.
■ A vCD vApp machine with a 64bit operating system is recovered in Hyper-V as either a Generation 1 or Generation 2
virtual machine, dependent on the operating system support in Hyper-V.
■ A vCD vApp virtual machine using up to 4 SCSI controllers is recovered as a virtual machine with 1 SCSI controller.
■ The vCD vApp virtual machine NICs are recovered with Hyper-V network adapters except for protected Windows 2003
virtual machines which are recovered with Hyper-V legacy network adapters.
■ When VMware Tools is installed on the protected vCD vApp virtual machine running Windows Server 2012, Integration
Services is installed on the recovered virtual machine automatically.
To create a VPG to protect a vCD vApp to Hyper-V:

VPGs have used it.
Replication From a Protected Site vCD to Hyper-V 180

3. Click NEXT.
vApp.
■ Only one vApp.

6. Select the vCD vApp to protect in this VPG.
Note: Define the required boot order for vCD vApps in the vCloud Director console.
7. Click NEXT.
8. Specify the Hyper-V recovery site and default values to use for the replication to this site.

■ Recovery Site: The site to which you want to recover the virtual machines. After specifying the Microsoft SCVMM
recovery site, the host and storage on the site to use for the replication can be specified.
site.
■ Host: The default cluster or host, in the recovery site that handles the replicated data.
■ Storage: The default storage volume to use for the recovered virtual machine files and for their data volumes. Every
storage for the recovery host is included in the drop-down list. If a cluster is selected for the host, only storage
accessible by every host in the cluster are displayed.
Guide.
10. Optionally, change the Service Level Agreement settings, which apply to every virtual machine in the group.
11. For additional journal-related fields, click ADVANCED.
The Advanced Journal Settings dialog is displayed. Configure as follows:
vSphere Hyper-V


Journal History
storage/datastore.
datastore.
are not displayed.
grow.
datastore.
are not displayed.
warning.
is almost full.
is issued.

13. To change the replication settings per virtual machine, click VM Settings


machine.
VPG
Recovery Storage (Hyper-V)
displayed.
are not displayed.


are not displayed.
is almost full.
15. Click OK.

17. Click NEXT.

■ Dynamic: Select this when the recovery volume is dynamic-provisioned.

■ Temp Data: If the virtual machine to be replicated includes a temp data disk as part of its configuration, mark the
recovery disk for this disk as a temp data disk. In this case, data is not replicated to the temp data disk after initial
synchronization.


Volume Source


■ Datastore
■ RDM
for the journal.

machine.
VMDKs.

Path:


the recovery site.
times out.

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes
19. Click OK.

20. Click NEXT.


machines will run.
performed.
NOTE:
resources.
23. Click NEXT.

The Edit VNIC window is displayed.

IMPORTANT Re-IP Information:
To utilize re-IP during failback, make sure that:

■ VMware Tools is installed on the virtual machine in vCenter server.
■ The user that is logged on to VMWare Tools has sufficient privileges to execute re-IP changes.
To change the vNIC IP configuration, select Yes in the Failover/Move or Test column. If you select to use a statically-
assigned IP address, set the IP address, subnet mask, and default gateway. Optionally, change the preferred and alternate
DNS server IP addresses and the DNS suffix. If you leave the DNS server and suffix entries empty, or select to use DHCP,
the IP address and DNS server configurations are assigned automatically, to match the protected virtual machine. You can
change the DNS suffix.
If the virtual machine has multiple NICs but is configured to only have a single default gateway, fill in a 0 for each octet in
the Default gateway field for the NICs with no default gateway.
Note: During a failover, move, or test failover, if the recovered virtual machine is assigned a different IP address than the
original IP address, after the virtual machine has started it is injected with the correct IP address. If the same network is
used for both production and test failovers, Zerto recommends changing the IP address for the virtual machines started for
the test, so that there is no IP address clash between the test machines and the production machines.
28. Click OK.
29. Click NEXT.


Daily
Retention window.
.
Weekly
of the week.
down menu.
Retention window.


Monthly
down menu.
Retention window.
Yearly
July.
down menu.
Retention window.
38.

Replication From a Protected Site vCD to AWS

You can protect a vCD vApp to Amazon Web Services (AWS).
When creating a VPG from vCloud Director to AWS the data is stored in S3 and all replicated data from protected virtual
machines to AWS is encrypted in S3. All recovery operations bring up the recovered machines in EC2 in AWS.
Before replicating from a protected vCD site to a recovery AWS site, review the following guidelines for AWS environments,
and considerations when protecting to AWS: Zerto Virtual Replication - Prerequisites & Requirements for Amazon Web
Services (AWS)
See also: “Import Methods for AWS”, on page 199

After reviewing the guidelines and considerations, proceed with “Creating a VPG from vCloud Director to AWS”, on page 202.
Import Methods for AWS

During recovery operations, Zerto uses a combination of the following APIs and methods to convert the Amazon S3 objects
into recovery disks in EC2 as EBS disks:
■ AWS Import:
■ Import-instance: for the boot volume
■ Import-volume: for data volumes
For more information see the relevant AWS documentation:
■ API_ImportInstance
■ API_ImportVolume
Note: The ImportImage API is not used by Zerto.
■ Zerto Import - zImport: an import method that does not have the same limitations as the AWS APIs. It creates an AWS
EC2 instance per protected VM volume, called zImporter, to convert the S3 objects and write them to a zImport local disk.
When all the data has been imported and its disk have been attached to the recovered instance, the zImport instance is
terminated.
Notes:
■ zImporter is based on an official AWS Linux AMI (Amazon Machine Image), into which a script is injected to perform
the import. The script is located online and downloaded to the zImporter, and thus the zImporter requires internet
access in order to access and download the script. The zImport instance is therefore created with a public IP.
■ The only network in the customer environment that is certain to have internet access is the network that the ZCA is
connected to.
■ To ensure that the zImport instance cannot be accessed from the outside world, a security group is created. During a
recovery operation the zImport instance is connected to this security group. All inbound traffic is blocked and only
outbound traffic to access the script online is allowed. The security group is deleted at the end of the recovery
operation.
■ Amazon's S3 encryption policy should not be enforced to Zerto's S3 bucket by adding a Bucket Policy. Some metadata
objects are uploaded to the S3 bucket without encryption.
■ The default zImporter instance type is c5.4xlarge and the AWS EC2 default maximum instance quota is 10. If during
the creation of zImport instances the maximum EC2 instance quota is reached, the creation of the next and
subsequent zImport instances will be queued, increasing the RTO. If during recovery operations, the ZVM identifies a
VPG with the potential to exceed the EC2 instance quota, the user will receive an alert with advice to contact AWS
support to increase the service limits in order to improve RTO.
■ Each zImporter VM is responsible for the import process of a single volume. Therefore, it is recommended to
contact AWS and increase the maximum instance quota of the c5.4xlarge instance type to the maximum number
of volumes you are planning to failover to AWS at once.
■ GPT formatted disks are supported for data volumes only, when using either of the zImport methods.
■ When using either of the zImport methods, each volume is created with EBS disk of type io1 with maximum 1000 EBS
Provision IOPS allocated. EBS disk type can be changed post recovery without downtime, see the relevant for more
information see the relevant AWS documentation. The minimum disk size for io1 is 4GB.
■ The default Max EBS Provision IOPS quota in a region across all io1 disks is 40000 EBS Provision IOPS, meaning that
with 1000 EBS Provision IOPS per volume, the maximum possible number of volumes is 40. If the Max EBS Provision
Replication From a Protected Site vCD to AWS 199

IOPS quota is reached, the failover process will switch to using slower gp2 disks. An event will notify the user of this,
and recommend that the user contact AWS support to increase the Max EBS Provision IOPS quota.
■ EBS encryption is enabled by default.
■ Depending on the desired RTO during recovery operations, or when testing failover, the user can select an import method
per VPG or per virtual machine from the following options:
■ “Zerto Import for Data Volumes”, on page 200
■ “Zerto Import for All Volumes”, on page 200
■ “AWS Import”, on page 201
Zerto Import for Data Volumes

This method is the default setting and has a faster RTO than AWS Import. This method uses a combination of the AWS
import-instance API for the boot volume, and the zImport method for data volumes.
less than 1GB are recovered with disks of 1GB. Temporary disks may be created based on the selected instance size.
■ The maximum protected data volume size is 16TB, while the boot volume can be up to 1TB.
■ The AWS ImportInstance API only supports single volume VMs. The boot volume of the protected virtual machine should
not be attached to any other volume to successfully boot. For more information, see http://docs.aws.amazon.com/
AWSEC2/latest/APIReference/API_ImportInstance.html
Zerto Import for All Volumes

This method uses the zImport method for all volumes and ensures the fastest RTO.
This method creates an AWS EC2 instance per protected VM volume, called zImporter, to convert the S3 objects and write
them to a zImport local disk. When all the data has been imported and its disk have been attached to the recovered instance,
the zImport instance is terminated.
■ The maximum protected data volume size is 16TB, while the boot volume can be up to 2047GiB.
Note: Some VMs use the MBR partitioning scheme, which only supports up to 2047 GiB boot volumes. If your instance
does not boot with a boot volume that is 2TB or larger, the VM you are using may be limited to a 2047 GiB boot volume
size. Non-boot volumes do not have this limitation. See AWS Documentation for more information: http://
docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
When using Zerto Import for All Volumes import method, if the protected virtual machine using this import method is running
Windows 2012, Windows 2012R2 or Windows 2016, the following drivers must be installed on the protected virtual machine
before starting recovery operations:
When recovering to C5/M5 instances using Zerto Import for All Volumes import method, only Windows 2012R2 and
Windows 2016 are supported. The following drivers must be installed on the protected virtual machine before starting
recovery operations when recovering to C5/M5 instances:
■ NVMe driver
Note: If these drivers are installed on a VM running Windows 2012R2, the other AWS import methods will fail. To overcome
this, you must uninstall the drivers before using the other AWS import methods.
The following steps must be performed to ensure that the virtual machine will be able to run on the recovery site:

1. Download and Install Windows ENA Drivers:
NOTE:
If you are recovering to C5/M5 instances, skip this step and go to step step 2.
If you are running Windows 2012 or Windows 2016 on any of the following AWS instance types:
■ C3 ■ I2
■ C4 ■ R3
■ D2 ■ M4 (excluding M4.16xlarge)
a) Go to http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/sriov-networking.html#enable-enhanced-
networking
b) Follow the instructions at the site for downloading and installing the Windows ENA Drivers.
2. When using C5/M5 instance types only, the following drivers need to installed:
a) Download ENA (Enhanced Network Adapter) from this link.
b) Extract and execute "InstallEna.ps1"
c) Download the NVMe driver from this link.
d) Extract and execute "Dpinst.exe"
NOTES:
C5/M5 instance types are supported with the Zerto Import for All Volumes import method only.
IMPORTANT:
When using this import method for Windows machines, ZertoTools for AWS needs to be run on the protected
Windows virtual machine in VMware before VPG creation. For more information, see ZertoTools for AWS.
AWS Import
This method uses a combination of the AWS import-instance and import-volume APIs for the boot and data volumes
respectively. This was the only method supported until version 5.5.
less than 1GB are recovered with disks of 1GB. Additional volumes might be created in the recovered instance, dependent
on the instance type used for the recovery. These volumes can be ignored.
■ Protected volumes are recovered in EC2 as EBS disks with magnetic disk type. Virtual machines with disks that are less
than 1GB are recovered with disks of 1GB. Additional volumes might be created in the recovered instance, dependent on
the instance type used for the recovery. These volumes can be ignored. Temporary disks may be created based on the
selected instance size.
■ The maximum protected data volume and boot disk size is 1TB.
The AWS ImportInstance API only supports single volume VMs. The boot volume of the protected virtual machine should not
be attached to any other volume to successfully boot. For more information, see http://docs.aws.amazon.com/AWSEC2/
latest/APIReference/API_ImportInstance.html

Creating a VPG from vCloud Director to AWS

Use the following procedure to create a virtual protection group to protect to AWS.
to create the VPG.
To create a VPG from vCloud Director to AWS:

VPGs have used it.
3. Click NEXT.

vApp.
■ Only one vApp.

6. Click NEXT.
7. Select the AWS recovery site.
■ Recovery Site: The site to which you want to recover the virtual machines. After specifying the recovery site, other
fields are displayed.

site.
Guide.
■ Service Profile: The name of the service profile to use which determines the VPG SLA settings for the group, which
apply to every virtual machine in the group. To change the VPG SLA settings, select the Custom Service Profile.
9. If the VPG Service Level Agreement settings are editable, when the Zerto Cloud Manager is not used or when a Custom
service profile is available, specify these settings for the group, which apply to every virtual machine in the group.
is issued.
10. Click NEXT.


12. Click NEXT.
The Recovery step is displayed. Here you define the Import Method, and Failover/Move Recovery and Failover Test
details, like network information, network security, instance family and type, and whether scripts should run as part of the
recovery process.

13. From the Import Method drop-down list, select an import method.
■ Zerto Import for data volumes (Faster): Uses the zImport method for data volumes only. This is the default setting
and usually has a faster RTO than AWS Import.
■ Zerto Import for all volumes (Fastest, Requires setup): This is usually the fastest import method and uses a zImport
VM for all volumes.
■ AWS Import: This was the only import method supported until version 5.5.
14. Select Failover/Move Recovery and Failover Test settings.
■ VPC Network: The virtual network dedicated to your AWS account. A security group and subnet must be assigned to
this VPC.
■ Subnet: The subnet for the VPC network.
■ When you select the import methods Zerto Import for data volumes (Faster), or Zerto Import for all volumes
(Fastest, Requires setup), only those subnets that are supported by the zImport method are displayed in the
drop-down list.
Other Subnets are grayed out and cannot be selected.

NOTE:
The zImport virtual machine must have access to the internet in order to access the S3 Bucket and the AMI in EC2. The
only network in the customer environment that is certain to have internet access is the network to which the ZCA is
connected.
If the import method is not AWS Import, then the user can select only subnets that are part of the same Availability
Zone as the one in which the ZCA resides. Other Subnets are disabled.
■ When you select the import methods AWS Import, all subnets are listed. A tool tip alert is displayed when the
user hovers over a subnet that is not supported.
NOTE:
If a subnet is chosen in a network that is not in the same Availability Zone as the one in which the ZCA resides, options
that utilize the zImport method will not be made available for selection.
■ Security Group: The AWS security to be associated with the virtual machines in this VPG.
■ Instance Family: The instance family from which to select the type. AWS instance families are optimized for different
types of applications. Choose the instance family appropriate for the application being protected in the VPG.
■ Instance Type: The instance type, within the instance family, to assign to recovered instances. Different types within
an instance family vary, for example in vCPU, RAM, and local storage size. Choose the instance type appropriate for
the application being protected in the VPG. The price per instance is related to the instance configuration.

The Advanced VM Settings window is displayed, which shows the recovery network settings for Failover/Move for virtual
machines in the VPG. You can see the recovery network settings for failover tests by selecting Test.

The Edit VM Settings window is displayed.
17. Update the values for VPC network, subnet, security group, instance family, instance type, and private IP as necessary.
recovery operation.
performed.
NOTE:
resources.
20. Click NEXT. The Retention Policy page appears. Retention Policy is not available in Cloud environments.

Replication From a Protected Site vCD to Azure

You can protect a vCD vApp to Microsoft Azure.
When creating a VPG from vCloud Director to Azure the data is stored in a storage account and all replicated data from
protected virtual machines to Azure is encrypted in the storage account. All recovery operations bring up the recovered
machines in resource groups in Azure.
Before protecting your virtual machines, review Zerto Prerequisites and Requirements for Microsoft Azure Environments.
NOTE:
To protect Premium Managed disks, see Converting Premium Virtual Machines for Protection.
To create a VPG from vCloud Director to Azure:

VPGs have used it.
3. Click NEXT.
Replication From a Protected Site vCD to Azure 209

vApp.
■ Only one vApp.

6. Click NEXT.
Specify the Azure Recovery Site. This is the site to which you want to recover the virtual machines. After specifying the
recovery site, other fields are displayed.
to create the VPG.

Guide.
8. When the Zerto Cloud Manager is used, select the service profile.
■ Service Profile: The name of the service profile to use which determines the VPG SLA settings for the group, which
apply to every virtual machine in the group. To change the VPG SLA settings, select the Custom Service Profile.
9. If the VPG Service Level Agreement settings are editable, when the Zerto Cloud Manager is not used or when a Custom
service profile is available, specify these settings for the group, which apply to every virtual machine in the group.
is issued.
10. Click NEXT.


12. Click NEXT.

The Recovery step is displayed. Here you define Failover/Move Recovery details, and Failover Test details, like network
information, network security, storage information, virtual machine types and sizes, and whether scripts should run as part
of the recovery process.
to create the VPG.
■ VNet: The virtual network dedicated to your Azure subscription.
■ Subnet: The subnet or the VNet network.
associate one network security group with the virtual machines. The NIC will be associated with the network security
group defined at the virtual machine level.
■ Recovery Disk Type: Select the Azure recovery storage type to which the entire VPG will be recovered to; Premium
Managed or Standard Storage. The Virtual Machine Series and Virtual Machine Size fields are updated with the
relevant options based on the selected Recovery Disk Type.
Note: To protect Premium Managed disks, see Converting Premium Virtual Machines for Protection.
■ Virtual Machine Size: The virtual machine size, within the virtual machine series, to assign to recovered virtual
machines. Different sizes within a virtual machine series vary, for example in a number of cores, RAM, and local
storage size. The default is set to Standard_DS1_v2. You can choose the virtual machine size appropriate for the
application being protected in the VPG. The price per virtual machine is related to the virtual machine configuration.
The Advanced VM Settings window is displayed, which shows the network settings for Failover/Move Recovery and for
Failover Test virtual machines in the VPG. Y
■ To see the recovery network settings for Failover Test select the View Test from the drop-down list.

The Edit VM Settings window is displayed.
16. Update the values for vNet, subnet, security group, storage information, virtual machine types and sizes, as necessary.
recovery operation.


performed.
NOTE:
resources.
19. Click NEXT. The Retention Policy step appears. This is not available in Cloud environments.

CHAPTER 8: MONITORING ZERTO
VIRTUAL MANAGER
You can monitor information about all the VPGs either protected at the local site or recovered to the local site in the VPGs tab.
You can also drill-down to monitor information about a specific VPG displayed in the VPGs tab or about the virtual machines
being protected by VPGs. You can also view summary details of the protected and recovery sites in either the protected or
recovery site as well as monitor the status of each virtual protection group and any of the virtual machines being protected in
either site.
The following general monitoring options are described in this section:
■ “The DASHBOARD Tab”, below
■ “Monitoring VPGs – The VPGs Tab”, on page 218
■ “Monitoring a Single VPG”, on page 221
■ “Monitoring Tasks”, on page 224
■ “Monitoring Protected Virtual Machines – The VMs Tab”, on page 226
The following site monitoring option is described in this section:
“Monitoring Peer Sites – The SITES Tab”, on page 228
The following VRA monitoring option is described in this section:
“Monitoring Virtual Replication Appliances”, on page 229
The following storage monitoring option is described in this section:
“Monitoring Datastores – The SETUP Tab – The DATASTORES Tab”, on page 235
The following performance counters are described in this section:
“Zerto Performance Counters”, on page 237
For details about monitoring Zerto Virtual Manager alerts and events, see Zerto Guide to Alarms, Alerts and Events.
For details about monitoring Zerto Virtual Manager Long Term Retention repositories, see Storing Retention Sets.
Monitoring Zerto Virtual Manager 216
Monitoring Zerto Virtual Manager
The DASHBOARD Tab

The DASHBOARD provides an overview of the sites and VPGs being protected at the site or recovered to the site.
The following information is displayed:
VPG HEALTH
The VPGs being recovered with the health of each VPG, represented by a colored block, where the color represents the
following:
Green: The VPG is being replicated, including syncing the VPG between the sites.
Orange: The VPG is being replicated but there are problems, such as an RPO value larger than the target RPO value
specified for the VPG.
Red: The VPG is not being replicated, for example because communication with the site is down.
Positioning the mouse over a block displays the VPG name as a tooltip. Clicking the block opens the details tab for the VPG.
STATUS
The status of the site, including the following:
■ The number of VPGs and virtual machines being protected or recovered.
■ The amount of storage being protected.
■ The average RPO.
■ The percentage compression of data passed between the site and peer sites.
Performance Graphs
The current site performance, which includes the following information:
IOPS (I/O per Second): The total amount of I/O write operations generated by the protected virtual machines on the viewed
site. (The IOPS graph is displayed for VPGs replicating from on-premise sites).
Throughput (MB per second): The total amount of uncompressed data written by the virtual machines protected to the
recovery sites.
The DASHBOARD Tab 217

During synchronization processes (such as bitmap sync, initial sync and delta sync) this value will also consist of the
uncompressed data read from the protected disks.
WAN Traffic (MB per second): The total amount of compressed data transferred between the viewed site and all its recovery
sites.
A listing of the currently active alerts and running tasks, and the events run during the last few hours.
User input, for example, stopping a failover test or committing or rolling back a Move or Failover operation, can be initiated
from the relevant task displayed in the RUNNING TASKS section.
ACTIVE ALERTS, RUNNING TASKS, and EVENTS

Monitoring VPGs – The VPGs Tab

View details of all VPGs in the VPGs tab. This tab lists all the VPGs from both the local and remote sites and provides summary
details of each VPG.
You can create a query using the view field to display VPG information in a list. You can filter the VPGs that will be displayed
according to their status by checking the checkboxes alongside the VPG status icons ( ). The query
can be customized by adding and removing filters.
List View - GENERAL

The following information is displayed in the GENERAL view:
■ Alert status indicator: The color indicates the status of the VPG. Hovering over the alert displays a popup of all active
alerts with descriptions:
Monitoring VPGs – The VPGs Tab 218

■ Green: The VPG is being replicated, including syncing the VPG between the sites.
■ Orange: The VPG is being replicated but there are problems, such as an RPO value larger than the Target RPO Alert
value specified for the VPG.
■ Red: The VPG is not being replicated, for example, because communication with the remote site is down.
■ VPG Name (#VMs): The name of the VPG. The name is a link: Click the VPG name to drill-down to more specific details
about the VPG that are displayed in a dynamic tab. The number of VMs protected in the VPG is displayed in parentheses.
■ Direction: The direction of the replication, from this site to the remote site or from the remote site to this site.
■ Peer Site: The name of the site with which this site is paired: the site where the VPG is protected or will be recovered to.
■ Priority: The priority of the VPG.
■ Protection Status: The current status of the VPG, such as Meeting SLA. Where appropriate, the percentage of the
operation completed, such as syncing, is displayed.
■ State: The current substatus of the VPG, such as Delta syncing. Where appropriate, the percentage of the operation
completed, such as syncing, is displayed.
■ Actual RPO: The time since the last checkpoint was written to the journal. This should be less than the Target RPO Alert
■ Operation: The operation, such as Move, that is currently being performed.
List View - PERFORMANCE

The following information is displayed in the PERFORMANCE view:
IOPS (I/O per Second): The total amount of I/O write operations generated by the protected virtual machines comprising the
Virtual Protection Group (VPG)
Throughput (MB per Second): The total amount of uncompressed data written by the protected virtual machines comprising
the Virtual Protection Group (VPG).
uncompressed data read from the protected disks.
Network: The amount of WAN traffic.
Provisioned Storage (not shown by default): The provisioned storage for all the virtual machines in the VPG. This value is the
sum of the values that are used in the vSphere Client console per virtual machine in the Virtual Machines tab for the root
vCenter Server node. Each value is the sum of both the hard disk and memory. Thus, a virtual machine with 1GB hard disk and
4GB memory will show 5GB provisioned storage.
Used Storage: The storage used by all of the virtual machines in the VPG. This value is the sum of the values that are used in
the vSphere Client console per virtual machine in the Virtual Machines tab for the root vCenter Server node.
List View - RETENTION

The following information is displayed in the RETENTION STATUS view:
■ Alert status indicator: The color indicates the status of the VPG. Clicking the alert displays a popup of all active alerts with
descriptions:

about the VPG that are displayed in a dynamic tab.
■ Retention Policy: Whether the VPG is protected against a disaster only with the ability to recover to a point in time up to
30 days before the disaster, or protection is extended to include retention sets of the virtual machines, going back for a
maximum of one year.
■ Retention Policy Status: The status of the retention set.
■ Repository Name: The name of the repository where the jobs are stored.
■ Restore Point Range: The restore points for the retention job out of the total retention jobs run for the VPG.
■ Retention Policy Scheduling: The schedule for the retention process.
Additional Fields and Options

In the GENERAL, PERFORMANCE, and RETENTION views you can:
■ Show/Hide Columns, Create View and Reset Columns using the settings ( ) menu.
■ Sort the list by a column by clicking in the column title.
■ Filter information in the columns by clicking the filter button ( ) that is displayed when the mouse cursor is moved into
the column title. Active filters are displayed with a yellow background.
Saving Details of Virtual Protection Groups to a File

You can save details of every VPG displayed in the VPGs tab to a CSV file, which can be opened using programs such as
Microsoft Excel.
In the VPGs tab, click EXPORT and specify where to save the VPG details.

Monitoring a Single VPG

You can monitor the status of a specific VPG by clicking the VPG name in the VPGs tab or clicking the VPG name in the VMs
tab. The VPG details are displayed in a dynamic tab.
General Tab
The tab on the left side shows the status of the VPG. The following information is displayed in this tab:
Performance Graphs
The current VPG performance, which includes the following information:
RPO: The current Recovery Point Objective (RPO) of the Virtual Protection Group (VPG).
IOPS (I/O per second): The total amount of I/O write operations generated by the protected virtual machines comprising the
Virtual Protection Group (VPG).
Throughput (MB per Second): The total amount of uncompressed data written by the protected virtual machines comprising
uncompressed data read from the protected disks..
WAN Traffic (MB per second): The total amount of compressed data transferred between the protected and recovery sites of
JOURNAL HISTORY
The journal history shows:
■ The SLA defined for the VPG.
■ The amount of time currently covered by information in the journal.
■ The earliest—oldest—checkpoint currently in the journal that can be used for a recovery operation.
LONG TERM RETENTION

If Long Term Retention is enabled, the following details are displayed:
Monitoring a Single VPG 221

■ Retention Status: The status of the retention set.
■ Repository: The name of the repository where the retention sets are stored.
■ Restore Point Range: The restore points for the retention sets out of the total retention sets run for the VPG.
■ Scheduling: The retention schedule.

PROTECTED VMs Tab
The PROTECTED VMs tab shows details about the protected virtual machines:
Name: The name of the virtual machine.
Group: The boot order group to which the virtual machine belongs.
Protection Host: The protected virtual machine host.
Storage Protected: The name of the protected storage.
Provisioned: The protected virtual machine provisioned storage.
Used: The amount of data used on the recovery site for this virtual machine.
Recovery Data Size: The total size of the data on the recovery site.
Failover Network: The failover network used when recovering this virtual machine.
Test Network: The test network used when testing the recovery of this virtual machine.
The following details are displayed with a vSphere recovery site:
Recovery Host: The host to use for recovery.
VM Recovery Datastore: The name of the recovery datastore.

Folder: The folder where the virtual machine is recovered to.

The following details are displayed with a Hyper-V recovery site:
Recovery Host: The host to use for recovery.
VM Recovery Storage: The name of the recovery storage.
The following details are displayed with an AWS recovery site:
Failover/Move VPC: The virtual network dedicated to your AWS account during a failover or move operation. A security
group and subnet must be assigned to this VPC.
Failover/Move Subnet: The subnet mask for the VPC network during a failover or move operation.
Failover/Move Security Groups: The AWS security to be associated with the virtual machines in this VPG during a failover
or move operation.
Test VPC: The virtual network dedicated to your AWS account during a failover test operation. A security group and
subnet must be assigned to this VPC.
Test Subnet: The subnet mask for the VPC network during a failover test operation.
Test Security Groups: The AWS security to be associated with the virtual machines in this VPG. during a failover test
operation.
Folder: The folder where the virtual machine is recovered to.
SITES Tab
The SITES tab shows the topology of the VPG, including both the protected and recovery sites.

SETTINGS Tab
The SETTINGS tab shows details about the VPG settings, divided into general, replication, recovery, and retention categories.
Monitoring Tasks
Tasks initiated by Zerto are also displayed in the vSphere Web Client and Client console.
Recent tasks can also be reviewed for a site by clicking the TASKS area in the status bar at the bottom of the user interface.
The following information is displayed for each task:

Status: The task status.
Name: The name of the task.
Description: A description of the task.
Action: The ability to perform an action directly. For example, stop a failover test, or commit or rollback a move or failover
operation.
Monitoring Tasks 224

The full details of the tasks can be monitored in the TASKS subtab under the MONITORING tab.
The following information is displayed for each task:

Task status indicator: The color indicates the status of the task. The following statuses exist for each task:
Green: The task was completed successfully.
Red: The task failed.
Task: The task name.
Status: The task status.
Related Entities: The sites which were effected by the task.
User: The user who initiated the task.
Started: The date and time the task started.
Completed: The date and time the task completed.
Notes: Notes added at the completion of a failover test.
Monitoring Tasks 225

Monitoring Protected Virtual Machines – The VMs Tab

View details of the protected VMs in the VMs tab. This tab lists all the protected virtual machines from both the local and
remote sites and provides summary details of each virtual machine.
You can filter information in columns via the filter icon next to each column title. You can also sort the list by each column.
GENERAL View
■ Alert status indicator: The color indicates the status of the VPG:
■ VM Name: The name of the virtual machine. The name is a link.
■ VPG Name: The name of the VPG. The name is a link: Click the VPG name to drill-down to more specific details about the
VPG that are displayed in a dynamic tab.
■ Direction: The direction of the replication, from this site to the remote site or from the remote site to this site.
■ Peer Site: The name of the site with which this site is paired: the site where the VPG is protected or will be recovered to.
■ Priority: The priority of the VPG.
■ Protection Status: The current status of the virtual machine, such as Meeting SLA. Where appropriate, the percentage of
the operation completed, such as syncing, is displayed.
■ State: The current substatus of the VPG, such as Delta syncing. Where appropriate, the percentage of the operation
■ Actual RPO: The time since the last checkpoint was written to the journal. This should be less than the Target RPO Alert
■ Operation: The operation, such as Move, that is currently being performed.
Monitoring Protected Virtual Machines – The VMs Tab 226

PERFORMANCE View
■ IO: The IO per second between all the applications running on the virtual machine and the VRA that sends a copy to the
remote site for replication.
■ Throughput: The MB per second for all the applications running on the virtual machines being protected. There can be a
high IO rate with lots of small writes resulting in a small throughput as well as a small IO with a large throughput. Thus,
both the IOPS and Throughput values together provide a more accurate indication of performance.
■ Network: The amount of WAN traffic.
Provisioned Storage: The provisioned storage for the virtual machine in the recovery site. This value is the sum of the values
that are used in the vCenter Server and displayed in the vSphere Client console per virtual machine in the Virtual Machines tab
for the root vCenter Server node. Each value is the sum of both the hard disk and memory. Thus, a virtual machine with 1GB
hard disk and 4GB memory will show 5GB provisioned storage.
Used Storage: The storage used by the virtual machine in the recovery site. This value is the sum of the values that are used in
the vCenter Server and displayed in the vSphere Client console per virtual machine in the Virtual Machines tab for the root
vCenter Server node.
RETENTION STATUS View

descriptions:
Additional Fields
In the GENERAL, PERFORMANCE, and RETENTION views you can:
■ Show/Hide Columns, Create View and Reset Columns using the settings ( ) menu.
■ Sort the list by a column by clicking in the column title.
■ Filter information in the columns by clicking the filter button ( ) that is displayed when the mouse cursor is moved into
the column title. Active filters are displayed with a yellow background.
Monitoring Protected Virtual Machines – The VMs Tab 227

Monitoring Peer Sites – The SITES Tab

View details of the paired sites in the SITES tab. This tab lists all the sites paired to the local site and provides summary details
of each paired site.
GENERAL View
Alert status indicator: The color indicates the alert status of the site:
Green: The Zerto Virtual Manager for the site is running without problems.
Orange: The Zerto Virtual Manager for the site has a problem that does not stop the protection of virtual machines, such
as an RPO value larger than the Target RPO Alert value for a VPG.
Red: The Zerto Virtual Manager for the site is not running correctly, for example, because communication with the site is
down.
Site Name: The name specified for the paired site during installation or in the Site Settings dialog.
Location: The location specified for the paired site during installation or in the Site Settings dialog.
Site IP: The IP of the peer site.
Network: The amount of WAN traffic.
IOPS: The IO per second between all the applications running on the virtual machine in the VPG and the VRA that sends a copy
to the remote site for replication.
Incoming Throughput: The MBs for all the applications running on the virtual machine being protected. There can be a high IO
rate with lots of small writes resulting in a small throughput as well as a small IO with a large throughput. Thus, both the IO and
Incoming Throughput values together provide a more accurate indication of performance.
Provisioned Storage (GB): The maximum storage that can be protected.

# VPGs: The total number of VPGs being protected by the site and replicated to the site.
# VMs: The total number of virtual machines being protected by the site and replicated to the site.
Monitoring Peer Sites – The SITES Tab 228

Additional Fields
There are additional fields that you can display that are listed when you select Show/Hide Columns from the dropdown list
shown by clicking the configuration icon ( ):
Used Storage (GB) – The amount of storage used by the virtual machines in the site.
ZORG Name – A name given to an organization by a cloud service provider. For details refer to Zerto Cloud Manager
Version – The Zerto version installed at this site.
Monitoring Virtual Replication Appliances

You can monitor information about all the VRAs for the local site in the VRAs subtab under the SETUP tab. You can also drill-
down to monitor information about a specific VRA displayed in the VRAs tab:
■ “Monitoring VRAs – The SETUP Tab – VRAs Tab”, below.
■ “Monitoring a Single VRA”, on page 231.
Monitoring VRAs – The SETUP Tab – VRAs Tab

View details of the VRAs in the VRAs subtab, under the SETUP tab. All the hosts in the vCenter Server are listed, and details of
VRAs for each host, when installed, are also shown.
General View
In this view, the number of installed VRAs is displayed in the VRAs tab. The following information is displayed in this view:
Cluster: The cluster name, if relevant.
Host Address: The host IP address for the VRA. If the host is part of a cluster, the cluster name is displayed with the hosts
under the cluster.
Monitoring Virtual Replication Appliances 229

Host Version: The host version.

Alert Status: The status of alerts in the VRA virtual machine.
VRA Name: The name of the VRA virtual machine.
VRA Status: The VRA status. For example, Installed or Ghost VRA.
VRA Version: Either Latest if the version installed is the most current version or Outdated if it can be upgraded. A tooltip
displays the actual version.
VRA Address: The IP address of the VRA virtual machine.
# VPGs: The number of VPGs with a virtual machine for which the VRA either manages the protection or the recovery of the
data.
# VMs: The number of virtual machines managed by the VRA.
SETTINGS View
The following information is displayed in the SETTINGS view:
VRA Group: The group of VRAs to which this VRA belongs. When VRAs use different networks, they can be grouped by
network.
VRA RAM: The amount of memory allocated to the VRA to buffer data before it is sent to the recovery site or at the recovery
site before it is written to the journal.
Datastore: The datastore used by the VRA.
Datastore Cluster: The datastore cluster used by the VRA, if relevant.
WORKLOAD PROTECTION View

The following information is displayed in the WORKLOAD PROTECTION view:
■ # VPGs: The number of VPGs with a virtual machine for which the VRA is used either for protection or recovery.
■ # VMs: The number of virtual machines for which the VRA is used either for protection or recovery.
■ # of Protected VPGs: The number of VPGs with a virtual machine for which the VRA manages the protection of their data.
■ # of Protected VMs: The number of virtual machines for which the VRA manages the protection of their data.
■ # of Protected Volumes: The number of volumes for which the VRA manages the protection of their data.
■ # of Recovery VPGs: The number of VPGs with a virtual machine for which the VRA manages the recovery of the data.
■ # of Recovery VMs: The number of virtual machines for which the VRA manages the recovery of the data.
■ # of Recovery Volumes: The number of volumes for which the VRA manages the recovery of the data.
Additional Fields
There are additional fields that you can display that are listed when you select Show/Hide Columns from the dropdown list
Cluster: The cluster with the host used by the VRA.
VC Network: The network used by the VRA.
# Volumes: The number of volumes for which the VRA manages the protection or recovery of data.

Monitoring a Single VRA

You monitor the status of a single VRA by clicking the VRA name in the VRAs tab. The VRA details are displayed in a dynamic
tab.
Installed Tab
The tab on the left side shows the status of the VRA. The following information is displayed when this tab is selected:
Performance Graphs
■ CPU Usage: The percentage of CPU used by the VRA.
■ Local Memory: The percentage of the VRA memory used by protected volumes managed by the VRA. If the memory
consumption is high you can consider vMotioning some of the virtual machines to a different host.
■ Remote Memory: The percentage of the VRA memory used by recovery volumes managed by the VRA. If the memory
consumption is high you can consider changing the target host of some of the virtual machines to a different host.


VPGs Tab
Information about the VPGs with virtual machines that are on the host with the VRA is displayed in the VPGs tab.
GENERAL View
Alert status indicator: The color indicates the status of the VPG:
Orange: The VPG is being replicated but there are problems, such as an RPO value larger than the Target RPO Alert
Red: The VPG is not being replicated, for example, because communication with the remote site is down.
Direction: The direction of the replication, from this site to the remote site or from the remote site to this site.
Protected Site: The name of the protected site.
Recovery Site: The name of the recovery site.
Name: The name of the VPG.
Protection Status: The current status of the VPG, such as Meeting SLA. Where appropriate, the percentage of the operation
State: The current substatus of the VPG, such as Delta syncing. Where appropriate, the percentage of the operation
PERFORMANCE View
# VMs on VRA/#VMs in VPG: The number of virtual machines on the VRA and the number of virtual machines in the VPG.
Provisioned Storage: The provisioned storage for all the virtual machines in the VPG. This value is the sum of the values that
are used in the vSphere Client console per virtual machine in the Virtual Machines tab for the root vCenter Server node. Each
value is the sum of both the hard disk and memory. Thus, a virtual machine with 1GB hard disk and 4GB memory will show 5GB
provisioned storage.
Used Storage: The storage used by all virtual machines in the VPG. This value is the sum of the values that are used in the
vSphere Client console per virtual machine in the Virtual Machines tab for the root vCenter Server node.

IO: The IO per second between all the applications running on the virtual machines in the VPG and the VRA that sends a copy
Throughput: The MB per second for all the applications running on the virtual machines being protected. There can be a high
IO rate with lots of small writes resulting in a small throughput as well as a small IO with a large throughput. Thus, both the
IOPS and Throughput values together provide a more accurate indication of performance.
RETENTION STATUS View

descriptions:
Additional Fields
There is an additional field that you can display. This field is listed when you select Show/Hide Columns from the dropdown list
ZORG – A name given to an organization by a cloud service provider. For details refer to Zerto Cloud Manager Administration
Guide.

VMs Tab
Information about the virtual machines that are on the host with the VRA is displayed in the VMs tab.
GENERAL View
Alert status indicator: The color indicates the status of the VPG:
Orange: The VPG is being replicated but there are problems, such as an RPO value larger than the Target RPO Alert
Red: The VPG is not being replicated, for example, because communication with the remote site is down.
Direction: The direction of the replication, from this site to the remote site or from the remote site to this site.
Protected Site: The name of the protected site.
Recovery Site: The name of the recovery site.
VM Name: The name of the virtual machine.
VPG Name: The name of the VPG with which this virtual machine is associated.
Protection Status: The current status of the virtual machine, such as Meeting SLA. Where appropriate, the percentage of the
operation completed, such as syncing, is displayed.
State: The current substatus of the virtual machine, such as Delta syncing. Where appropriate, the percentage of the operation
PERFORMANCE View
Provisioned on Host: The provisioned storage for the virtual machine on the host. This value is the sum of the values that are
used in the vSphere Client console for the virtual machine in the Virtual Machines tab for the root vCenter Server node. Each
value is the sum of both the hard disk and memory. Thus, a virtual machine with 1GB hard disk and 4GB memory will show 5GB
provisioned storage.
Used on Host: The storage used by the virtual machine in the VPG. This value is the sum of the values that are used in the
vSphere Client console for the virtual machine in the Virtual Machines tab for the root vCenter Server node.

IO: The IO per second between all the applications running on the virtual machines in the VPG and the VRA that sends a copy
Throughput: The MB per second for all the applications running on the virtual machine. There can be a high IO rate with lots of
small writes resulting in a small throughput as well as a small IO with a large throughput. Thus, both the IOPS and Throughput
values together provide a more accurate indication of performance.
Additional Fields
There is an additional field that you can display. This field is listed when you select Show/Hide Columns from the dropdown list
ZORG – A name given to an organization by a cloud service provider. For details refer to Zerto Cloud Manager Administration
Guide.
SETTINGS Tab
Information about the VRA is displayed in the SETTINGS tab. This includes its version, the host on which it is located, its
definition, the networks it uses, and its replication and recovery settings.
Monitoring Datastores – The SETUP Tab – The DATASTORES Tab

View details of the datastores used by Zerto in the DATASTORES subtab, under the SETUP tab. This tab lists all the datastores
used by Zerto with an option to show all the datastores per cluster or for the hosts, whether used by Zerto or not.

GENERAL View
In this view, the number of available datastores is displayed in the DATASTORES subtab. The following information is
displayed in the GENERAL view:
Datastore: The name of the datastore or cluster.
Alert status indicator: The color indicates the alert status of the datastore:
Green: The datastore is functioning as required.
Orange: The datastore is functioning, but there are problems, such as not enough free space.
Red: There is a problem with the datastore.
Status: The status of the datastore.
Device: The datastore device identifier.
Cluster: The cluster that the datastore is associated with.
Total Usage (GB): The amount of GB used in relation to the total amount available.
DR Usage (GB): The amount of GB used by Zerto in relation to the total amount available.
# VRAs: The number of VRAs using the datastore.
WORKLOAD PROTECTION View

The following information is displayed in the WORKLOAD PROTECTION view:
Datastore: The name of the datastore or cluster.
Alert status indicator: The color indicates the alert status of the datastore:
Green: The datastore is functioning as required.
Orange: The datastore is functioning, but there are problems, such as not enough free space.
Red: There is a problem with the datastore.
Total Usage (GB): The amount of space, in GB, used in relation to the total amount available.
Type: The type of datastore.
Recovery Size: The amount of space used for recovery.

Journal Size: The amount of space used by the journals.

# Protected VMs: The number of protected virtual machines using the datastore.
# Incoming VMs: The number of virtual machines to be recovered using the datastore.
Additional Fields
There are no additional fields that you can display. However, you can display all the fields shown in these views when you
select Show/Hide Columns from the dropdown list shown by clicking the configuration icon ( ).
Zerto Performance Counters

During installation of Zerto, Zerto-related performance counters are added to the Windows Performance Monitor on the
machine where the Zerto Virtual Manager runs.
Uninstalling Zerto, uninstalls the Zerto-related performance counters. Upgrading Zerto updates any changes to the Zerto-
related performance counters.
The Zerto-related performance counters are collected on the protected site only. These counters are described as follows.
Category Name Description
Zerto Checkpoints Checkpoint failures in last 10 minutes Number of checkpoints that failed to be inserted in last 10
minutes.
Checkpoint insertions in last 10 minutes Number of checkpoints inserted in last 10 minutes.
The maximum is 120; normal performance is 90–115; less
than 40 indicates a problem.
Time to insert last checkpoint Time in milliseconds needed to insert the last checkpoint;
normal is less than 5 seconds.
Zerto Connectivity # of connected VRAs Number of VRAs connected to the local Zerto Virtual
Manager.
# of peer Zerto Virtual Managers (ZVMs) Number of Zerto Virtual Managers connected to the local
Zerto GUI Concurrent GUI calls to the ZVM Number of concurrent GUI calls to the local Zerto Virtual
Manager.
Zerto Performance Counters 237


Zerto Reflections AWS reflection collection time Time in milliseconds needed to collect AWS environment
data.
Hypervisor reflection collection time Time in milliseconds needed to collect vCenter Server or
SCVMM environment data.
■ vCenter Server collection time should be less than 10
minutes.
■ SCVMM collection time should be less than 25
minutes.
Reflection data pushed in last 10 minutes Size in bytes of environment data pushed in last 10
minutes to Zerto Virtual Managers connected to this site.
Reflection data pushed to peer ZVMs Size in bytes of last pushed environment data.
Reflection data received from peer ZVMs Size in bytes of last received environment data.
Reflection data received in last 10 minutes Size in bytes of environment data received in last 10
minutes from Zerto Virtual Managers connected to the
local Zerto Virtual Manager.
Reflections pushed to peer ZVMs in last 10 Number of times environment data was pushed to peer
minutes Zerto Virtual Managers in the last 10 minutes.
Reflections received from peer ZVMs in Number of times environment data was received from
last 10 minutes peer Zerto Virtual Managers in the last 10 minutes.
Retained data Size in bytes of total retained pushed or received data.
vCD reflection collection time Time in milliseconds needed to collect vCD environment
data.
Zerto Remote Calls Active incoming remote calls Current number of active incoming calls being processed.
Active outgoing remote calls Current number of calls sent to WCF services for which
the Zerto Virtual Manager is still waiting for a response.
Incoming remote calls in last minute Number of incoming remote calls received in last minute.
Outgoing remote calls in last minute Number of outgoing remote calls executed in last minute.
Zerto RPO Average RPO Average RPO in seconds for all VPGs, displayed in the
Dashboard.
Current maximum RPO Current maximum RPO in seconds for all VPGs in this
site.
Current minimum RPO Current minimum RPO in seconds for all VPGs in this site.
Zerto System State Number of alerts Current number of active alerts.
System state loop length Execution time of one system state loop.
This should be less than 40 milliseconds.
Time to calculate statistics Time in milliseconds needed to calculate statistics during
a system state loop.
Time to retrieve active alerts Time in milliseconds needed to collect local Zerto Virtual
Manager active alerts during a system state loop.
Time to save VRA performance counters Time in milliseconds needed to save VRA performance
information to a file.


Zerto Visual Query Time to execute a VQ build loop Time in milliseconds needed to execute a single VQ build
loop. This should be less than 25 milliseconds.
Time to retrieve hypervisor information Time in milliseconds to execute a remote query on peer
(reflection) Zerto Virtual Managers to retrieve hypervisor
information from remote sites.
Time to retrieve local VM list Time in milliseconds needed to retrieve the list of virtual
machines from the local hypervisor.
Time to retrieve local VPG data Time in milliseconds needed to retrieve VPG data from
the local Zerto Virtual Manager.
Time to retrieve VPG list Time in milliseconds to execute a remote query on peer
Zerto Virtual Managers to build a list of VPGs on remote
sites.
Zerto VRA Counters # of VRAs not updated Should be zero or close to zero.
# of VRAs updated Should be near or equal to the number of active VRAs.
Average time of 5 most time-consuming Should be close to the median VRA update time.
VRA updates
Median VRA update time Median time in milliseconds of last 100 VRA updates.

CHAPTER 9: MANAGING VPGS
After defining virtual protection groups (VPGs) the virtual machines specified as part of each VPG are protected. There are a
number of ongoing management tasks that you can perform on a VPG, such as specifying a checkpoint to enable recovery to
that specific point or you can modify the configurations of existing VPGs.
The following VPG management options are described in this section:
■ “Editing a VPG”, below
■ “Adding Virtual Machines to a VPG - Overview”, on page 243
■ “Removing Virtual Machines from a VPG”, on page 247
■ “Removing Virtual Machines from a vCD vApp”, on page 248
■ “Removing Protected Virtual Machines from the Hypervisor Inventory”, on page 248
■ “Modifying Protected Virtual Machine Volumes”, on page 249
■ “Pausing and Resuming the Protection of a VPG”, on page 250
■ “Forcing the Synchronization of a VPG”, on page 250
■ “Handling a VPG in an Error State”, on page 251
■ “Deleting a VPG”, on page 251
■ “Ensuring Application Consistency – Checkpoints”, on page 252
■ “Running Scripts Before or After Recovering a VPG”, on page 253
■ “Exporting and Importing VPG Definitions”, on page 257
■ “VPG Statuses and Synchronization Triggers”, on page 259
■ “Managing Protection When the Recovery Datastore Will Be Unavailable (Datastore Maintenance)” on page 266
Monitoring VPGs and the VMs that are protected is described in “Monitoring Zerto Virtual Manager”, on page 216.
Note:
To set up Long Term Retention to protect VPGs, or to manually run a Retention process (unscheduled retention
process) on the VPG, and to restore the VPG see “Using Zerto’s Long Term Retention”, on page 365. Configuring Long
Term Retention is part of defining a VPG.
Managing VPGs 240
Managing VPGs
Editing a VPG
You can edit a VPG setting, including adding virtual machines to the VPG, as described in “Adding Virtual Machines to a VPG -
Overview”, on page 243, deleting virtual machines from the VPG, or changing the information about how virtual machines are
recovered.
Note: You cannot edit the VPG while a retention process is running.
After modifying the VPG, the setting is updated.
While the VPG settings are being updated, you cannot perform any operations on the VPG, such as adding a checkpoint,
editing the VPG properties, or failing the VPG.
After the settings are updated, the VPG is synchronized with the recovery site.
To modify a VPG:
1. In the VPGs tab in the Zerto User Interface, select the VPG to be edited and click MORE > Edit VPG. You can also select
the VPG, display the VPG details, and click EDIT VPG.
Note: The Edit VPG wizard is displayed, enabling editing the VPG, including adding and removing virtual machines from
the VPG. If the VPG was previously viewed, and the tab for this VPG is still displayed, you can access the details by
selecting the tab.
2. Make any required changes to the VPG settings, as described in “Protecting Virtual Machines from a vCenter Server”, on
page 45 or in “Protecting Virtual Machines to and From vCloud Director”, on page 117.
You can jump directly to a step to make a change in that step, for example, the REPLICATION step or the RECOVERY step,
by clicking the step.
Steps that have been completed are marked with a check.
Note: If the Journal Size Hard Limit or Journal Size Warning Threshold in the advanced journal settings for the VPG SLA
settings, or the default values are changed, the changed values are applied only to new virtual machines added to the VPG,
and not to existing virtual machines.
3. Click DONE.
The VPG is updated and then synchronized with the recovery site, if required, for example when the host was changed.
Editing a VPG 241

Managing VPGs
NOTE:
Changing a recovery Org vDC when recovering to vCD, results in an initial synchronization, resulting in all the
checkpoints being deleted.
See also:
■ “Modifying the Journal Size Hard Limit”, on page 242
■ “Modifying the Retention Period for Retention Sets”, on page 242
■ “Modifying VPG Recovery Volume”, on page 242
Modifying the Journal Size Hard Limit

If the journal size hard limit is reduced, and if the current size is greater than the newly defined size, the journal remains at the
current size. When the amount of the journal used falls below the hard limit value it will not grow greater than the new hard
limit. Unused journal volumes from the added volumes are marked for removal and removed after the time equivalent to three
times the amount specified for the journal history, or twenty-four hours, whichever is more.
Note: If the Journal Size Hard Limit or Journal Size Warning Threshold in the VPG SLA settings are changed, the changed
values are not applied to existing virtual machines but only to new virtual machines added to the VPG.
Modifying the Retention Period for Retention Sets

If the retention period is shortened, the number of retention jobs older than the new retention period are deleted from the
repository.
Modifying VPG Recovery Volume

If you change the recovery volumes in the Storage step from thin-provisioned to thick-provisioned or vice versa the volume
goes through initial synchronization.
Editing a VPG 242

Managing VPGs
Adding Virtual Machines to a VPG - Overview

You can add virtual machines that are not already included in a VPG, to an existing VPG. A virtual machine can be protected in
a maximum of three existing VPGs, provided that the VPGs are recovered to different sites.
■ Protecting virtual machines in several VPGs is enabled only if both the protected site and the recovery site, as well as the
■ You cannot add a virtual machine in an existing VPG, while a retention process is running.
■ Only virtual machines with a maximum of 60 disks can be protected.
■ 60 disks requires 4 SCSI controllers each with a maximum of 15 disks.
For AWS or Azure recovery sites, see the following topics, then continue with “How to Add Virtual Machines to an Existing
VPG”, on page 246.
“Adding Virtual Machines to a VPG - When the Recovery Site is AWS”, on page 243
“Adding Virtual Machines to a VPG - When the Recovery Site is Azure”, on page 243
Adding Virtual Machines to a VPG - When the Recovery Site is AWS

■ Only virtual machines that are supported by AWS can be protected by Zerto. Refer to AWS documentation for the
supported operating systems.
■ A VPC must exist, and a security group and subnet must be assigned to it and to all other VPCs you want to use for
recovered virtual machines.
■ AWS allocates EBS volumes by multiplications 1 GiB. When recovering VMs to AWS, whose volume sizes are not
multiplications of GiB, AWS rounds the recovered volumes to the closest GiB, resulting in a size mismatch between the
recovered and protected volumes. In this case, the original protected disks cannot be used for preseed and the VMs are
recovered in Needs Configuration state.
■ The following limitations apply when protecting to AWS:
■ For Linux, AWS supports virtual machines with up to 40 volumes, including the boot volume.
■ For Windows, AWS supports virtual machines with up to 26 volumes, including the boot volume.
■ Note that C5/M5 instances have 28 available devices and each volume/NIC utilizes one device. Windows supports
up to 26 volumes. For more information, see Elastic Network Interfaces.
■ GBT formatted disks are supported for data volumes only.
■ The following table describes the limitations per Import Method:
IMPORT METHOD
AWS Import zImport for Data Volumes zImport for all volumes
Boot Volume Additional Boot Volume Additional Boot Volumes Additional
OS Volume Volume Volumes
Linux 1 TB 1 TB 1 TB 16 TB 2047 GiB* 16 TB
Windows 1 TB 1 TB 1 TB 16 TB 2047 GiB* 16 TB
* Some VMs use the MBR partitioning scheme, which only supports up to 2047 GiB boot volumes. If your instance does not boot with
a boot volume that is 2 TB or larger,, the VM you are using may be limited to a 2047 GiB boot volume.
See the relevant AWS documentation for more information: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolume-
Types.html
■ For the AWS Import and zImport for Data Volumes import methods, the AWS ImportInstance API only supports
single volume VMs. The boot volume of the protected virtual machine should not be attached to any other volume to
successfully boot. For more information, see
http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportInstance.html
It is strongly recommended to perform a Failover Test to ensure that the recovered instance is successfully running on AWS.
See also: “Import Methods for AWS”, on page 91
Adding Virtual Machines to a VPG - When the Recovery Site is Azure

■ Azure ZCA can be installed only on Windows Server 2012 R2 and higher.
Adding Virtual Machines to a VPG - Overview 243

Managing VPGs
■ Only virtual machines that are supported by Azure can be protected by Zerto. All Windows operating systems are
supported.
Note: Microsoft does not support operating systems that are past the End of Support date, without a Custom Support
Agreement (CSA). For more information about Microsoft operating systems support for Microsoft Azure, refer to
https://support.microsoft.com/en-us/kb/2721672.
■ To replicate between Azure and your site, you must have a virtual machine in Azure with a Zerto Cloud Appliance installed
on it. This ZCA must be paired with your site.
■ Only general-purpose v1 (GPv1) accounts are supported. GPv2 storage accounts are not supported.
■ Each ZCA requires a separate storage account. Multiple ZCAs using the same account is not supported.
■ For Linux distribution, refer to Azure documentation:
■ Linux on Azure-endorsed distributions:
https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-endorsed-distributions/
■ Information for non-endorsed distributions:
https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-create-upload-vhd-generic/
■ Ultra SSD storage is not supported.
Requirements for Replication From Azure

■ For Virtual Machines to be protected from Azure, the VM volumes must reside in the GPv1 Standard storage account
defined during ZCA installation.
A Standard storage account is created or selected upon ZCA installation.
■ Type: Standard storage
■ Recovery and journal volumes reside on this Zerto Storage Account.
■ Only general-purpose v1 (GPv1) accounts are supported.
■ Azure VMs with all disks on this Zerto Storage Account can be protected by Zerto.
■ Blob Storage is not supported.
■ VMs which are not deployed via the Azure Resource Manager cannot be protected from Azure.
Requirements for Replication To Azure

Zerto uses the cloud native Azure Scale Set service to reduce RTO when failing over to Azure. When ZCA is installed in Azure,
and the ZVM is up and running, an Azure scale set with one virtual machine is created in your Azure environment. The new
virtual machine, created by the Scale Set, is prefixed with the site ID. When failing over to Azure, multiple VMs in the Scale Set
are deployed for the recovery process and created in the ZCA VNet. When recovery is completed, these VMs are terminated.
The following requirements apply when protecting to Azure:
■ Protected volumes are recovered in Azure as VHD disks in a page blob. Virtual machines with disks that are less than 1GB
are recovered with disks of 1GB.
Note: For some instance sizes, the Azure virtual machine is created with a Local SSD disk which is a temporary disk. This
disk is in addition to the disks associated with each protected virtual machine.
■ The protected virtual machines needs to have at least one NIC.
■ Internet access is required for the VMs created with the Azure scale set service.
■ ZCA primary NIC subnet requires minimum 50 IP addresses for the Azure Scale Set VMs.
■ Increase CPU quota, per Ds1v2 SKU family, to at least 50 for the Azure Scale Set service.
■ When failing over, up to 40 VMs are created of type Ds1_v2; with Ubuntu server 18.04 lts.
The following limitations apply when protecting to Azure
■ Virtual machines with UEFI Firmware cannot be protected.
■ You cannot protect machines that have a disk larger than 4TB
■ Reserve at least 2 CPUs and 4GB RAM for the machine using a subnet accessible by other Zerto sites.
■ The supported number of data disks and NICS per virtual machine is dependent on the selected instance size. For example,
instance size D3_v2 allows up to eight data disks per virtual machine.
Requirements for Replication within Azure

■ Azure ZCA on both Azure sites need to be version 6.0 and higher.
■ The following limitations apply when protecting within Azure:

Managing VPGs
■ Self replication is not supported.
Additional Azure Considerations

For additional considerations, see Azure subscription and service limits, quotas and constraints:
https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits.
For example from the link, see the following default values:
■ 20 cores per subscription
■ 200 Storage accounts per subscription
■ 20 VMs per region per subscription
■ 20 VMs per series (Dv2, F, etc.) cores per subscription per Region
Additionally, see the following example for maximum values:
■ A Standard storage account has a maximum total request rate of 20,000 IOPS. The total IOPS across all of your virtual
machine disks in a Standard storage account should not exceed this limit.
VM TIER BASIC TIER VM STANDARD TIER VM
Disk size 4TB 4TB
Max 8 KB IOPS per persistent disk 300 500
Max number of disks performing max IOPS 66 50
See also “Azure Limitations Which Affect Installation and Recoverability”, on page 245.
Azure Limitations Which Affect Installation and Recoverability

Below are the default Azure limitations which affect installation and recovery.
Default Azure limitations which Affect Installation

■ Storage Limitations:
■ Number of storage accounts: 200 per subscription (note: max is 250)
Default Azure Limitations which Affect Recovery and Recommendations
Virtual Machines # of Cores per subscription: Default: 20 (max: 10K)

Limitations
Increase this default to at least 50.
# of VMs per region per subscription: Default is 20
Increase this default to at least 50.
# of VMs per series, cores per Increase default to at least 50 for Ds1_v2.
subscription, per region:
Resource groups per subscription: 800

Managing VPGs
Networking Network interfaces per region: 350

NICs per instance: Depends on instance size:
■ Windows:
https://docs.microsoft.com/en-us/azure/virtual-
machines/virtual-machines-windows-sizes
■ Linux:
machines/virtual-machines-linux-sizes?toc=%2fa
zure%2fvirtual-machines%2flinux%2ftoc.json
Private IP Addresses per VNET per 4096
subscription per region:
Cloning of IP addresses during recovery Due to an Azure limitation, failing over Linux VMs with
operations: static IP is not supported.
Storage Storage account total size limitation: 500TB
(# of entities (blobs, containers etc) within a storage
account: unlimited)
Max size of a page blob (vhd): 4TB
Min size of a page blob (vhd): 20MB
Max number of data disks: Depends on instance size
■ Windows:
machines/virtual-machines-windows-sizes
■ Linux:
machines/virtual-machines-linux-sizes?toc=%2fa
zure%2fvirtual-machines%2flinux%2ftoc.json
■
How to Add Virtual Machines to an Existing VPG

Use the following procedure to add a virtual machine to an existing VPG.
To add a virtual machine to an existing VPG:

1. In the VPGs tab in the Zerto User Interface, select the VPG and click MORE > Edit VPG. You can also select the VPG to
display the VPG details and click EDIT VPG.
The Edit VPG wizard is displayed, enabling you to edit the VPG, including adding and removing virtual machines from the
VPG.
2. In the VMs step, select the virtual machines to add and click the arrow pointing right to include these machines in the VPG.
A VPG can include virtual machines that are not yet protected and virtual machines that are already protected.
■ You can view protected virtual machines by clicking Select VMs in the Advanced (Multi Target) section.
Note: Protecting virtual machines in several VPGs is enabled only if both the protected site and the recovery site, as well as
the VRAs installed on these sites, are of version 5.0 and higher.
3. To define the boot order of the VPGs, click DEFINE BOOT ORDER.
4. Configure the settings for the new virtual machines in the same way that you configured the other virtual machines in the
VPG, when you created the VPG.
5. Click DONE.

Managing VPGs
The virtual machines are added to the VPG. This process may take a few minutes. While the VPG definition is being updated,
you cannot perform any operation on the VPG, such as adding a checkpoint, editing its properties, or recovering it.
After the VPG definition has been updated, the protected and recovery sites are then synchronized. During the synchronization
period, the Protection Status displayed in the VPGs tab of the Zerto User Interface is: Meeting SLA n/m VMs where n is the
number of virtual machines that were originally in the VPG, and m is the total number of virtual machines in the VPG, including
the virtual machines that are currently being synced. While the virtual machines that were added are being synced, the VPG
can be failed over but the failover only includes the original virtual machines in the VPG.
When the sync process for a virtual machine is complete, Zerto Virtual Manager tags the first checkpoint that includes a new
virtual machine with: VM ’XXX’ is fully synced where XXX is the name of the virtual machine that was synced.
When you perform a recovery operation using one of these checkpoints, or any later checkpoint, all the virtual machines that
have completed syncing will be recovered.
If the virtual machine is added to a VPG replicating to a resource pool in VMware vSphere environments, Zerto checks that the
additional virtual machine doesn’t exceed the resource pool capacity, such that the sum of the virtual machine reservation is
less than or equal to the resource pool CPU and storage settings.
Removing Virtual Machines from a VPG

If a user removes a virtual machine from a VPG, the checkpoints of the VPG are retained.
Note: Once a virtual machine is removed, it is no longer possible to recover it.
To remove a virtual machine from an existing VPG:

1. In the VPGs tab in the Zerto User Interface, select the VPG and click MORE > Edit VPG. You can also select the VPG to
display the VPG details and click EDIT VPG.
The Edit VPG wizard is displayed, enabling you to edit the VPG, including removing virtual machines from the VPG.
2. In the VMs step, select the virtual machines to remove and click the arrow pointing left to remove these machines from the
VPG. The selected virtual machines will no longer be protected.
Removing Virtual Machines from a VPG 247

Managing VPGs
3. Click Done.
4. Select Keep the recovery disks at the peer site if you might reprotect the virtual machines. Checking this option means
that the target replica disks for the virtual machines are saved so that they can be used as preseeded disks if the virtual
machines are re-protected.
5. Click YES to delete .
The VPG configuration is updated. The VRA on the recovery site that handles the replication for the VPG is updated
including keeping or removing the replicated data for the deleted VM, dependent on the Keep the recovery disks at the
peer site setting during the deletion.
The locations of the saved target disks are specified in the description of the event for the virtual machines being removed,
event EV0040, displayed in MONITORING > EVENTS.
Removing Virtual Machines from a vCD vApp

If a user removes a virtual machine from a vCD vApp, the checkpoints of the VPG are retained. Once a virtual machine is
removed, it is no longer possible to recover it.
Removing Protected Virtual Machines from the Hypervisor Inventory

From time to time, a virtual machine or a host is removed from the hypervisor inventory for various purposes, such as
maintenance. If the removed virtual machines are protected in VPGs, the VPGs enter a pause state and the replication is
paused. The checkpoints of the VPG are retained. The removed virtual machine is grayed out in the virtual machines tab in the
dashboard as well as in the Edit VPGs, VMs tab.
When a VPG is in a state of pause, the recovery of all the virtual machines, including the removed, grayed out virtual machines,
is possible.
For VPGs to enter a state of pause and to enable the replication to pause, the following conditions must apply:
■ The ZVM on the protected and recovery sites are of version 5.5 and higher.
■ The VRA installed on the recovery site is of version 5.5 and higher.
To resume replication, do one of the following:
Removing Virtual Machines from a vCD vApp 248

Managing VPGs
■ Return the virtual machine or the host back into the hypervisor inventory.
■ In Edit VPG, remove from the VPG the virtual machine that was previously removed from VMware inventory.
Modifying Protected Virtual Machine Volumes

Adding or deleting volumes for a virtual machine protected in a VPG, is automatically reflected in the volumes used for the
mirror virtual machine, managed by the VRA in the recovery site.
Deleting a volume in any virtual machine protected in a VPG, causes the journal to be reset as all the checkpoints in the journal
are removed.
Adding a volume in an any virtual machine, protected in a VPG, causes a new checkpoint to be added, to mark the action.
When adding a volume to the virtual machine, the total number of disks cannot exceed 15 disks per SCSI controller and up to 4
SCSI controllers.
Resizing non-RDM volumes of a virtual machine protected in a VPG are automatically reflected in the volumes used for the
mirror virtual machine, managed by the VRA in the recovery site.
Note: If the protected volume is associated with an RDM as a target for replication, the RDM will need to be resized manually,
as described in “Modifying a Protected RDM Volume”, below.
Changing the defined size of a journal of a virtual machine in a VPG is automatically reflected in the VRA in the recovery site.
When protecting to AWS, if you add a volume to the virtual machine the total number of disks cannot exceed 12 for Linux
machines and 22 for Windows machines, including the boot disk.
See the following topics:
■ “Changing the Recovery Datastore for a Protected Virtual Machine”, on page 249
■ “Modifying a Protected RDM Volume”, on page 249
Changing the Recovery Datastore for a Protected Virtual Machine

To change the recovery datastore for a virtual machine volume, the new datastore must have 45GB or 25% of the storage size
for the change to be performed.
Modifying a Protected RDM Volume

If a RDM volume for a protected virtual machine is replicated to an RDM volume in the recovery site and the protected RDM
volume is resized, it is not automatically resized in the recovery site.
Note: If the RDM volume is replicated to a VMDK in the recovery site, the recovery site VMDK is automatically resized when
the protected site RDM is resized.
To enable protecting a VPG after resizing a protected virtual machine RDM volume:
1. Remove the protected virtual machine from the VPG.
Note: If the VPG contains more than one virtual machine, remove the protected virtual machine from the VPG, and save
the changes. If the VPG contains only one virtual machine, delete the VPG, and, if the virtual machine target disks are of
VMDK format, make sure to choose to keep the target disks when the option is displayed.
2. Resize the RDM (both local and remote) as described in the VMware Expanding the size of a Raw Device Mapping (RDM)
knowledge base article.
Note: The vCenter will not detect that RDMs were resized unless this procedure is followed.
3. Protect the virtual machine again after resizing the RDM.
At this point, the VPG will go through a Delta Sync to compare protected and recovery volumes for changes, and once
synchronized, it will enter the Meeting SLA state.
Modifying Protected Virtual Machine Volumes 249

Managing VPGs
Pausing and Resuming the Protection of a VPG

During periods when the WAN bandwidth is utilized to its maximum, you can pause the protection of a VPG, to free up some of
this bandwidth. After pausing the protection, the VPG can still be recovered to the last checkpoint written to the journal before
the pause operation.
Note:
■ Zerto recommends adding a checkpoint to the VPG immediately before pausing protection, if you might want to recover
the VPG to the latest point in time before the pause.
■ You cannot pause a VPG while a retention process is running.
To pause the protection of VPGs:

1. In the Zerto User Interface, click the VPGs or VMs tab and select one or more VPGs to pause protection.
2. Click MORE > PAUSE.
A warning is displayed. If you click PROCEED in this warning, the VPG protection is paused.
Note: If the VPG was previously viewed, and the tab for this VPG is still displayed, you can access the details by selecting
the tab.
The VPG protection is paused until you click Resume VPGs.
To resume the protection of VPGs:

1. In the Zerto User Interface, click the VPGs or VMs tab and select one or more VPGs to resume protection.
2. Click MORE > Resume.
After resuming protection, a Bitmap Sync will most probably be performed to synchronize the protection and recovery
sites.
Forcing the Synchronization of a VPG

If the protected virtual machines are updated such that they are no longer synchronized with their mirror machines in the
recovery site, you can force the resynchronization of the machines. An example of when the machines can be out-of-sync is
when there is a rollback of a virtual machine to a VMware snapshot. In this case, the recovery virtual machine will include
changes that have been rolled back in the protected machine, so that they are no longer synchronized.
You can force the synchronization of the machines in a VPG to remedy this type of situation.
Note: You cannot force the synchronization of a VPG while a retention process is running.
To forcibly synchronize a VPG:

1. In the Zerto User Interface, select the VPGs or VMs tab and click the VPG to display the VPG details.
2. Click MORE > Force Sync.
the tab.
The VPG, and it’s temp discs, start to synchronize with the recovery site. As the journal fills up during the synchronization,
older checkpoints are deleted from the journal to make room for the new data, and the data prior to these checkpoints are
promoted to the virtual machine virtual disks.
Thus, during the synchronization, you can recover the virtual machine to any checkpoint still in the journal, but as time
progresses, the list of checkpoints available can lessen.
If the journal is not big enough to complete the synchronization without leaving at least ten minutes worth of checkpoints,
the synchronization pauses, for the amount of time which is specified in the Replication Pause Time value, for the VPG to
enable intervention, to ensure recovery to a checkpoint remains available.
The intervention can be, for example, increasing the size of the journal, or cloning the journal as described in “Deleting a
Pausing and Resuming the Protection of a VPG 250

Managing VPGs
Handling a VPG in an Error State

When a volume connected to a virtual machine in a VPG is deleted, the VPG and all the virtual machines in that VPG enter an
error state and an alert is issued.
Note: When a VPG is in an error state, recovery operations cannot be performed.
Edit the VPG definition to resolve the error in one of the following ways.
■ Remove the virtual machine that was connected to the deleted volume from the VPG: In the VPGs tab in the Zerto User
Interface, select the VPG to be edited and click MORE > Edit VPG. In the Edit VPG wizard, go to the VMs step. Select the
virtual machine to be removed and click the arrow pointing left.
■ Replace the volume that was deleted: In the VPGs tab in the Zerto User Interface, select the VPG to be edited and click
MORE > Edit VPG. In the Edit VPG wizard, go to the STORAGE step and click the empty Recovery Volume Location field
or select that row and click EDIT SELECTED. In the Edit Volumes dialog that is displayed, choose the volume source:
Datastore, RDM, or Preseeded volume, specify other volume options and click OK.
NOTE:
■ If you choose a new volume, a volume initial sync is performed. During this period, new checkpoints are not added
to the journal and recovery operations cannot be performed on the VPG.
■ If you choose a preseeded volume, a delta sync is performed. During this period, new checkpoints are not added to
the journal but recovery operations are possible. During a delta sync, you can recover to the last checkpoint in the
journal.
IMPORTANT:
It is not possible to perform a move during a delta sync.
As soon as the VPG is updated, the VPG and all virtual machines in the VPG return to normal, and recovery operations can be
performed on the VPG.
Deleting a VPG
You can delete a VPG and either keep the target disks to use later for preseeding if you want to reprotect any of the virtual
machines in the deleted VPG or delete these disks. Any retention sets stored for the VPG are not deleted and the virtual
machines that were retained can be restored.
Note: You cannot delete a VPG while a retention process is running.
To delete a VPG:
1. In the Zerto User Interface, click the VPGs or VMs tab and select one or more VPGs to delete.
2. Click MORE > Delete.
The Delete VPG window opens.
3. Select Keep the recovery disks at the peer site if you might reprotect the virtual machines. Checking this option means
that the target replica disks for the virtual machines are saved so that they can be used as preseeded disks if the virtual
machines are re-protected.
4. Click APPLY to delete the VPG.
The VPG configuration is deleted. The VRA on the recovery site that handles the replication for the VPG is updated
including keeping or removing the replicated data for the deleted VPG, dependent on the Keep the recovery disks at the
peer site setting during the deletion.
The locations of the saved target disks are specified in the description of the event for the virtual machines being removed,
event EV0040, displayed in MONITORING > EVENTS.
Handling a VPG in an Error State 251

Managing VPGs
See also “Deleting a VPG When the Status is Deleting”, on page 252.
Deleting a VPG When the Status is Deleting

If, for some reason, the VPG cannot be deleted, the VPG status changes to Deleting and the substatus is VPG waiting to be
removed. Attempting to delete the VPG a second time causes the following to be displayed:
■ Retry: Retry deleting the VPG.
■ Force Delete: Forcibly delete the VPG.
■ Cancel: Cancel the delete operation.
Ensuring Application Consistency – Checkpoints

Checkpoints are recorded automatically every few seconds in the journal. These checkpoints ensure crash-consistency, and
are written to the virtual machines journals by the Zerto Virtual Manager.
Each checkpoint has the same timestamp which is set by the Zerto Virtual Manager.
During recovery you pick a checkpoint in the journal and recover to this point. The crash-consistent checkpoints guarantee
write order fidelity.
For Example:
If write A on a virtual machine in the VPG occurred before write B on a virtual machine in the VPG, then when a checkpoint is
written, the journal will contain:
■ Neither of the writes
■ Both writes, and if they overlap the B data takes precedence
■ Only A, indicating the checkpoint occurred between A and B
The coordination is done by the Zerto Virtual Manager.
You can also use a script to place the application in a quiesced mode, such as Oracle Hot Backup mode, and execute the Zerto
PowerShell cmdlet Set-Checkpoint, then release the quiesced mode. For more information about Zerto PowerShell cmdlets,
see Zerto Cmdlets.
Note:
■ To write application-consistent checkpoints, there is a performance impact on the virtual machine running the application
as a result of the application-consistent mechanism used. This is because the guest operating system and any integrated
applications will be quiesced.
This impact on performance may be negligible and does not always happen since not all applications require these
checkpoints in order to achieve successful application recovery. Also, Zerto only requires the guest and application to
quiesce for a brief moment, just long enough to add a checkpoint.
As previously mentioned, checkpoints are recorded every few seconds in the journal. After a while, the number of checkpoints
available from which to choose a recovery point can be in excess of thousands per VPG.
When this threshold is reached, in order to enable efficient management and use of the checkpoints, the number of
checkpoints is diluted with respect to time, as follows:
■ Within the latest 2 hours: All of the checkpoints are available for recovery.
■ Between 2 and ~4.5 hours: There are about two to three checkpoints every 15 minutes.
■ From 4.5 hours and over: 1 checkpoint is kept every 15 minutes.
Note: Checkpoints which are either added manually, or marked as part of a Failover test are not diluted..
This section describes the different options available to ensure application consistency:
■ “Adding a Checkpoint to a VPG to Identify a Key Point”, below.
Ensuring Application Consistency – Checkpoints 252

Managing VPGs
Adding a Checkpoint to a VPG to Identify a Key Point

In addition to the automatically generated checkpoints, you can add checkpoints manually to ensure application consistency
and to identify events that might influence recovery, such as a planned switch-over to a secondary generator. You can recover
the machines in a VPG to any checkpoint in the journal, to one added automatically or to one added manually. Thus, recovery is
done to a point-in-time when the data integrity of the protected virtual machines is ensured.
Note:
■ Adding a checkpoint manually does not guarantee transaction consistency.
■ Changes to a VPG that result in re-synchronization of the VPG results in all checkpoints being removed. Adding
checkpoints to the journal is resumed after synchronization completes. A forced synchronization of the VPG only removes
checkpoints if the journal fills up during the synchronization.
To add a checkpoint to a VPG:

1. In the Zerto User Interface select ACTIONS > ADD CHECKPOINT.
The Add Checkpoint dialog is displayed.
A list of VPGs is displayed with the requested VPG selected. You can select more VPGs to add the same checkpoint to, for
example, when something is happening at your site that affects multiple VPGs.
Note: Crash-consistency is per VPG and not across VPGs, even if a checkpoint was added to multiple VPGs.
2. Enter a name for the checkpoint.
3. Click SAVE.
When testing a failover, as described in “Testing Recovery”, on page 324, or actually performing a failover, as described in
“Managing Failover”, on page 345, you can choose the checkpoint as the point to recover to.
Running Scripts Before or After Recovering a VPG

Before and after executing a failover, move, or test failover, you can run executable scripts, such as Windows .bat files or
PowerShell scripts. A pre-recovery script is always run at the beginning of the recovery operation. A post-recovery script is run
after all the virtual machines are powered on at the recovery site.
The scripts must be saved to the machine where the remote Zerto Virtual Manager (ZVM) is installed.
Both pre-recovery and post-recovery scripts are run by the ZVM service on the ZVM machine. The account running the ZVM
service is the account that will run the scripts when they are executed.
Running Scripts Before or After Recovering a VPG 253

Managing VPGs
Zerto recommends duplicating scripts on the Zerto Virtual Managers for both the protected and recovery sites, so that if
reverse protection is required, the scripts are available. The location of the script for reverse protection, on the machine where
the Zerto Virtual Manager that manages the protected site is installed, must be to the same path as in the remote Zerto Virtual
Manager machine. For example, if the scripts are saved to C:\ZertScripts on the remote Zerto Virtual Manager machine,
they must be saved to C:\ZertScripts on the local Zerto Virtual Manager machine.
The scripts can include environment variables that can be included as part of the script itself, or passed to the script as
parameters. When the script is passed an environment variable as a parameter, the variable is evaluated before executing the
script. The following environment variables are available:
■ %ZertoVPGName%: The name of the VPG. If the name includes a space, enclose the variable in double quotes (”). For
example, the VPG MyVPG uses the format %ZertoVPGName% but the VPG My VPG uses the format
“%ZertoVPGName%”.
■ %ZertoOperation%: The operation being run: FailoverBeforeCommit, FailoverRollback, Test, MoveBeforeCommit,
MoveRollback. Use the result returned for this variable to limit when the script runs, dependent on the operation. The
scripts are run after all the virtual machines are powered on at the recovery site and the variable is set to
FailoverBeforeCommit or MoveBeforeCommit. Use FailoverRollback or MoveRollback when rolling back the Failover or
Move operation, to undo whatever changes a previous script has done (such as updating the DNS records).
■ %ZertoVCenterIP%:The IP address of the hypervisor manager, VMware vCenter Server or Microsoft SCVMM, where the
VPG is recovered.
■ %ZertoVCenterPort%: The port used by the Zerto Virtual Manager to communicate with the hypervisor manager,
VMware vCenter Server or Microsoft SCVMM.
■ %ZertoHypervisorManagerIP%: The IP address of the hypervisor manager, VMware vCenter Server or Microsoft
SCVMM, where the VPG is recovered.
■ %ZertoHypervisorManagerPort%: The port used by the Zerto Virtual Manager to communicate with the hypervisor
manager, VMware vCenter Server or Microsoft SCVMM.
■ %ZertoForce%: A Boolean value, Yes/No, that dictates whether to abort the recovery operation if the script fails. For
example, whether to rollback a Move operation when the script fails and returns a non-zero value.
For example, if a specific VPG should not be migrated, the pre-recovery script can determine whether to continue based on the
values of the %ZertoOperation% and %ZertoVPGName%.
When specifying scripts in the definition of a VPG, enter values for the Pre-recovery Script and Post-recovery Script:
See also:
■ “Creating a Script”, on page 254
■ “Example Scripts”, on page 256
Creating a Script
There are many ways to create scripts to run before or after recovering a VPG. The following procedure uses a Windows
PowerShell file (.ps1) or a batch (.bat) file.
To create a script:
1. Create a file on the machine where the Zerto Virtual Manager that manages the recovery is installed.
2. Enter the script that you want to run in the file.
3. Save the file as a Windows PowerShell file (.ps1) or batch (.bat) file.

Managing VPGs
When writing a PowerShell script, you can include the environment variables in the script. For example, the following code
snippet shows the use of the %ZertoOperation% and %ZertoVPGName% environment variables:
$Operation = $env:ZertoOperation
$VPG = $env:ZertoVPGName
$time = Get-Date
if ($Operation -eq "Test") {

"$time VPG: $VPG was tested." >> "C:\ZertoScripts\VPG_DR.txt"
}
if ($Operation -eq "FailoverBeforeCommit") {

"$time Failover before commit was performed. VPG: $VPG" >> "C:\ZertoScripts\VPG_DR.txt"
}
if ($Operation -eq "MoveBeforeCommit"){

"$time Move before commit was performed. VPG: $VPG" >> "C:\ZertoScripts\VPG_DR.txt"
}
Pre-recovery scripts must be saved on the protected site Zerto Virtual Manager machine. Post-recovery scripts must be
saved on the recovery site Zerto Virtual Manager machine.
Note: Zerto recommends having both pre- and post-recovery scripts, available on both the protected and recovery Zerto
Virtual Manager machines, so that they will work from the protected site and after reverse protection from the recovery
site.
4. Update Command to run and Params fields for all the VPG definitions that you want to run the script.
Passing parameters is implemented differently for the two script types. For information about passing command line
parameters, refer to the relevant PowerShell or batch file documentation.
Using a BAT File

Windows Batch (.bat) is an executable file that does not require anything in order to run. Update Command to run and
Params fields for all the VPG definitions that you want to run the script.
Command to run: <script_including_path>
C:\ZertoScripts\PostScript.bat
Use quotes (“) around the path if it includes spaces. The bat file is an executable file and is therefore included in the
Command to run field.
Params: <Zerto_Params>, for example:
%ZertoOperation% %ZertoVPGName%
Using a PowerShell Script

Windows PowerShell scripts require Windows PowerShell (.exe) to execute. To specify a PowerShell script, update
Command to run and Params fields for all the VPG definitions that you want to run the script.
Command to run: powershell.exe
Params: <script_including_path> <Zerto_Params>, for example:
C:\ZertoScripts\PostScript.ps1 %ZertoOperation% %ZertoVPGName%
Use quotes (“) around the path if it includes spaces.
Note: You might have to set the remote signed execution policy. For example, using the following:
##PowerCLI requires remote signed execution policy - if this is not enabled,
##it may be enabled here by uncommenting the line below.
##Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
Note: Zerto recommends testing both PowerShell and batch scripts by running them from the command line, to ensure that
they run correctly.

Managing VPGs
Example Scripts
IMPORTANT: The scripts are provided by example only and are not supported under any Zerto support program or service.
The following scripts are examples of how to provide scripts to use with Zerto:
■ “Example 1 – Recording Failover Tests”, below.
■ “Example 2 – Moving Virtual Machines to a Resource Pool After a Failover”, on page 256.
Example 1 – Recording Failover Tests

The following script, c:\ZertoScripts\TestedVPGs.bat, writes the VPG name and date to the
ListOfTestedVPGs.txt file every time a failover test is run:
SET isodt=%date:~10,4%-%date:~7,2%-%date:~4,2% %time:~0,2%-%time:~3,2%-%time:~6,2%
IF %1==Test ECHO %2 %isodt% >> c:\ZertoScripts\Results\TestedVPGs.txt
Where %1 is the first parameter in the list of parameters, %ZertoOperation%, and %2 is the second parameter in the list of
parameters, %ZertoVPGName%.
Note: If the file TestedVPGs.txt does not exist it is created, as long as the folder, c:\ZertoScripts\Results, exists.
Example 2 – Moving Virtual Machines to a Resource Pool After a Failover

The following PowerShell script is an example of how to move virtual machines into resource pools as a post-recovery script.
This script could be used when you want to move virtual machines into a resource pool following a failover and want to
designate the resource pool only at the time of the failover and not as part of the VPG definition. Note that this script is a basic
example and requires some configuration, as noted in the comments of the script:
##The following are a list of requirements for this script:
## - This script must be present in the same directory on both sites listed in
## the Manage VPGs dialog
## - PowerShell v2.0 installed on both Zerto Virtual Managers
## - VMWare PowerCLI installed on both Zerto Virtual Managers
##
##This script was written by Zerto Support and is used at the customer's own risk
## and discretion.
##
##Note: The desired resource pool MUST exist on the hypervisor manager prior to
##running this script.
##
##To run this script from the VPG screen, an example command is 'powershell.exe'
##with the parameter 'C:\ZertoScripts\Move-VMs.ps1'
##
##START OF SCRIPT
##
##PowerCLI requires remote signed execution policy - if this is not enabled,
##it may be enabled here by uncommenting the line below.
##Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
##Below are the variables that must be configured.

Managing VPGs
##Variables:
##The location of this script

$strMoveScriptLoc = "C:\Zerto Scripts\"
##vCenter IP address
$strVCenterIP = "10.10.10.10"
##vCenter user account to use; account must have ability to move desired machines
$strVCUser = "Administrator"
##vcenter user password
$strVCPw = "password"
##Name of resource pool in vCenter

$strResPool = "ResourcePool"
##Array of VMs to move; it includes ALL VMs in the VPG and is case sensitive.
$strVMtoMove = @("VM-1", "VM-2", "VM-3")
##The PowerCLI snap-in must first be registered

Add-PSSnapin VMware.VimAutomation.Core
##Move to directory where script is located

CD $strMoveScriptLoc
##Connect to target VC server based on variables above

Connect-VIServer -Server $strVCenterIP -Protocol https -User $strVCUser -Password $strVCPw
##execute the move for each VM specified

foreach ($objVM in $strVMtoMove){
Move-VM -VM $objVM -Destination $strResPool }
##Disconnect from session with VC server

Disconnect-VIServer -Server $strVCenterIP -Force
##End of script
Exporting and Importing VPG Definitions

You can save VPG definitions to an external file and import these definitions back to Zerto, for example, exporting the settings
before uninstalling a version of Zerto and importing the settings after reinstalling Zerto.
Note: Zerto regularly exports settings to the folder Zerto_Installation_Folder\Zerto Virtual Replication\ExportedSettings.
You can use one of these exported files instead of creating a new export file. The default location of Zerto_Installation_Folder
is C:\Program Files\Zerto.
Exporting and Importing VPG Definitions 257

Managing VPGs
To export VPG settings:

1. Open the Zerto Diagnostics application. For example, via Start > Programs > Zerto > Zerto Virtual Replication
Diagnostics.
The Zerto Virtual Replication Diagnostics menu dialog is displayed.
2. Select the Export Protection Group Settings option and click Next.
3. Select the destination for the file to contain exported settings and specify the Zerto Virtual Manager IP address and port
where the VPGs are protecting virtual machines.
4. Click Next.
The list of exported VPGs is displayed.
5. Click Done.
Note: If you are uninstalling Zerto, the VPGs are deleted. To prevent having to perform a full synchronization when the VPG
definitions are imported, Zerto recommends deleting the VPGs in the Zerto User Interface, keeping their target disks.
To import VPG settings:

1. Click Start > Programs > Zerto > Zerto Virtual Replication Diagnostics.
2. Select the Import Protection Group Settings option.
3. Click Next.
Exporting and Importing VPG Definitions 258

Managing VPGs
4. Select the file previously exported and enter the Zerto Virtual Manager IP address and port specified when exporting the
VPGs.
5. Click Next.
The list of exported VPGs is displayed.
6. Select the VPGs to import. Only VPGs with names that are not already defined can be imported. VPGs in the import files
with the same name as an existing VPG are disabled.
7. Click Next.
The list of imported VPGs is displayed. If the VPG could not be imported, the reason for the failure is specified.
Note: If a host was removed from and then re-added to the environment it is advisable to wait approximately 5 minutes
from when the host was re-added before performing the import of the VPGs.
8. Click Done.
VPG Statuses and Synchronization Triggers

During normal operations the VPG status can change. For example, a change can be made to the VPG definition, or an
operation such as move or failover is performed on the VPG, or an external event impacts the system such as the WAN going
down. When the status changes, resulting in the VPG being synchronized, for example with a Delta Sync, the estimated time to
complete the synchronization is displayed under the VPG status, and if relevant, the synchronization trigger, such as Network
Congestion.
See also:
■ “VPG Statuses”, on page 259
■ “VPG Synchronization Triggers”, on page 265
VPG Statuses
The following statuses are displayed:
STATUS SUBSTATUS COMMENT
Deleting Deleting the VPG
VPG waiting to be removed
Failing Over Committing Failover The VPG is being failed over.
Failing over – Before commit A VPG being failed over is in the initial stage, before
committing the failover.
Promoting The failover has completed and the data from the journal
is being promoted to the failed over virtual machine disk.
Rolling back Failover The failover is being rolled back to prior to the failover.
VPG Statuses and Synchronization Triggers 259

Managing VPGs

History Not Meeting SLA See Not Meeting SLA, below. The VPG is meeting the RPO SLA setting but not the
journal history.
None
Volume Initial Sync After adding a virtual machine to an existing VPG not
meeting the journal history SLA.
Initializing Creating VPG
Full Syncing
Initial Sync
Syncing
Volume Initial Sync
Meeting SLA or Based on —
Alerts Bitmap Syncing
Delta Syncing (When Force Sync is
applied)
Recovery is Possible After a rollback.
Rolling Back
User Paused Protection
Volume Initial Sync After adding a virtual machine to an existing VPG
meeting SLA.
Zerto Virtual Manager paused
protection
Moving Committing Move
Moving – Before commit
Promoting
Rolling back Move
Not Meeting SLA Site Delta Sync (when Force Sync is not
applied)
Delta Syncing a volume
Error
Journal/recovery disks are missing
Journal storage error
Needs configuration
Recovery storage error
Recovery storage profile error
Site disconnection
Site disconnection. No checkpoints
VM not protected
Volume Full Syncing
meeting the SLA.
VPG has no VMs
Recovered — The VPG has been recovered.

Managing VPGs

RPO Not Meeting SLA See Not Meeting SLA, above. The VPG is meeting the journal history SLA setting but
not the RPO.
None
meeting the RPO SLA.

Managing VPGs
The following provides a full description of the sub-statuses:

SUBSTATUS DESCRIPTION
Bitmap Syncing A change tracking mechanism of the protected machines during a disconnected state or when a
VRA buffer is full. In these situations, Zerto starts to maintain a smart bitmap in memory, in which
it tracks and records the storage areas that changed. Since the bitmap is kept in memory, Zerto
does not require any LUN or volume per VPG at the protected side.
Note: The VRA buffer is set via the Amount of VRA RAM value, specified when the VRA is
installed
The bitmap is small and scales dynamically, containing references to the areas of the protected
disk that have changed but not the actual I/O. The bitmap is stored locally on the VRA within the
available resources. For example, when a VRA goes down and is then rebooted.
When required, Zerto starts to maintain a smart bitmap in memory, to track and record storage
areas that change. When the issue that caused the bitmap sync is resolved, the bitmap is used to
check updates to the protected disks and send any updates to the recovery site. A bitmap sync
occurs when any of the following conditions occur:
■ Synchronization after WAN failure or when the load over the WAN is too great for the WAN
to handle, in which case the VPGs with the lower priorities will be the first to enter a bitmap
sync.
■ When there is storage congestion at the recovery site, for example when the VRA at the
recovery site cannot handle all the writes received from the protected site in a timely fashion.
■ When the VRA at the recovery site goes down and is then rebooted, for example during a
Zerto upgrade.
During the synchronization, new checkpoints are not added to the journal but recovery operations
are still possible, assuming there are valid checkpoints in the journal. If a disaster occurs requiring
a failover during a bitmap synchronization, the VPG status changes to Recovery Possible and
you can recover to the last checkpoint written to the journal.
For synchronization to work, the protected virtual machines must be powered on so that the VRA
has an active IO stack, which is only available when the virtual machine is powered on.
Note: If the synchronization takes longer than the configured history, all the checkpoints in the
journal can be lost, preventing a failover from being performed. For the resolution of this situation,
see “To configure disaster recovery policies:”, on page 313.
Note: Synchronization after a recovery starts after the promotion of data from the journal to the
virtual machine disks ends. Thus, synchronization of virtual machines can start at different times,
depending on when the promotion to the virtual machine ends. All synchronizations are done in
parallel, whether a delta sync or initial sync, etc
Committing Failover Failing over the VPG.
Committing Move Completing the move, including removing the protected virtual machines.
Creating VPG The VPG is being created based on the saved definition.
Deleting the VPG Deleting the VPG.

Managing VPGs
Delta Syncing The Delta Sync uses a checksum comparison to minimize the use of network resources. A Delta
Sync is used when the protected virtual machine disks and the recovery disks should already be
synchronized, except for a possible few changes to the protected disks, for example:
■ When a virtual machine was added to the VPG and the target recovery disk is defined as a
preseeded disk.
■ After a source VRA upgrade of a major release: Depending on the nature of the upgrade, a
VRA upgrade on the protected side may trigger either a Delta Sync or a Bitmap Sync. See the
version release notes to determine if a sync will be triggered with a source VRA upgrade.
■ For reverse protection after a move or failover.
■ A Force Sync operation was manually initiated on the VPG.
■ A host protecting virtual machines was restarted and the protected virtual machines on the
host had not been vMotioned to other hosts in the cluster or a protected virtual machine was
vMotioned to another host without a VRA, and then vMotioned back to the original host.
During the synchronization, new checkpoints are not added to the journal but recovery
operations are still possible, assuming there are valid checkpoints in the journal. If a disaster
occurs requiring a failover during a delta synchronization, you can recover to the last checkpoint
written to the journal.
Note: It is not possible to perform a move during a delta sync.
parallel, whether a delta sync or initial sync, etc.
Delta syncing a volume Synchronization when only delta changes for a volume needs synchronizing, for example, when a
volume is added to a protected virtual machine in a VPG, and a preseeded disk is used.
During the synchronization, new checkpoints are not added to the journal but recovery operations
are still possible, assuming there are valid checkpoints in the journal. If a disaster occurs requiring
a failover during a delta volume synchronization, you can recover to the last checkpoint written to
the journal.
Note: It is not possible to perform a move during a delta sync.
Error Problem situation, for example, when a ZVM is disconnected from a VRA used to protect virtual
machines. The VPG cannot be recovered until the problem is resolved,
Failing over - Before Preparing and checking the VPG virtual machines in the recovery site.
commit

Managing VPGs
Full Syncing Full synchronization to ensure that the protected disks and recovery disks are the same after
some change to the system. This type of sync is the same as an Initial Sync but occurs after
protection started. In general, this type of sync should not happen.
Note: During the synchronization, new checkpoints are not added to the journal. Also, recovery
operations are not possible.
Initial Sync Synchronization performed after creating the VPG to ensure that the protected disks and
recovery disks are the same. Recovery operations cannot occur until after the initial
synchronization has completed.
Adding a virtual machine to a VPG is similar to creating a new VPG, a volume initial sync is
performed for the new virtual machine. For more information, see Volume Initial Sync.
Journal/recovery disks are Zerto Virtual Manager cannot locate disks that were connected to a virtual machine. As a result,
missing recovery operations cannot be performed on the VPG containing the virtual machine.
Journal storage error There was an I/O error to the journal. For example, if the journal was full and the size was
increased. Once the problem is resolved a synchronization is required.
Moving - Before commit Preparing and checking the VPG virtual machines in the recovery site.
Needs Configuration One or more configuration settings are missing, for example, when reverse protection is not
specified.
Promoting Updating recovered virtual machines in the VPG with data from the journal.
Recovery is possible Communication with the Zerto Virtual Manager at the protected site is down so continuing
protection is halted, but recovery on the remote site is available (compare with Site
disconnection).
Recovery storage error There was an I/O error to the recovery storage. For example, the datastore is almost full or the
virtual machines are turned off and the recovery disks are inaccessible.
Recovery storage policy The storage policy in the recovery site specified to be used by the VPG cannot be found.
error
Rolling back Rolling back to an initial status, for example, after canceling a cloning operation on the VPG.
Rolling back Failover Rolling back a Failover operation before committing it.
Rolling back Move Rolling back a Move operation before committing it.
Site disconnection Communication with the Zerto Virtual Manager at the remote, recovery, site is down so
continuing protection is halted (compare with Recovery is possible).
Site disconnection. No Communication with the Zerto Virtual Manager at the remote, recovery, site is down and there
checkpoints are no checkpoints to use to recover the VPG at the recovery site.
Syncing Status while type of synchronization is being evaluated.

Managing VPGs
User paused protection Protection is paused to enable solving a journal disk space problem, for example, by increasing the
disk size or cloning the VPG.
VM not protected A virtual machine in the VPG is no longer being protected. For example, when the virtual machine
was moved to another host without a VRA.
Volume Full Syncing Synchronization when a full synchronization is required on a single volume.
During the synchronization, new checkpoints are not added to the journal. Also, recovery
operations are not possible.
Volume Initial Sync Synchronization when a full synchronization is required on a single volume, for example, when
changing the target datastore or adding a virtual machine to the VPG without using a preseeded
disk.
Recovery can be performed on a VPG while a Volume Initial Sync is being performed for virtual
machines added to an existing VPG. However, only the virtual machines that were already in the
VPG can be recovered. The new virtual machines can only be recovered after the volume initial
sync for them is complete.
VPG has no VMs A configured VPG where the virtual machines have been removed from it, for example when
changing both the datastore and host for the virtual machines in the VPG, causes the VPG to be
recreated.
VPG waiting to be An attempt to remove the VPG failed and it must be forcibly removed. For details, see “Deleting a
removed VPG When the Status is Deleting”, on page 252.
Zerto Virtual Manager Protection is paused to enable solving a journal disk space problem, for example, by increasing the
paused protection disk size or cloning the VPG.
VPG Synchronization Triggers

The following synchronization triggers can be applied:
TRIGGER DESCRIPTION
Force Sync The user requested to synchronize the VPG, as described in “Forcing the Synchronization of a
Network Congestion The network bandwidth is not wide enough to handle all the data, causing some of the data to be
backed up.
Protected Storage Error An I/O error occurred to a protected virtual machine, after the data was sent to the recovery
side.

Managing VPGs
TRIGGER DESCRIPTION
Protected VRA The host where the VRA is installed is highly loaded: many updates are made to the protected
Congestion machines at the same time, causing a time lapse before the updates are passed to the recovery
site.
Recovery or Journal There was an I/O error either to the recovery storage or journal, for example if the journal was
Storage Error full and the size was increased. Once the problem is resolved a synchronization is required.
Recovery Storage The recovery datastore is being written to a lot, causing a delay for some of the data passed from
Congestion the protected site to be written to disk.
Recovery VRA A network error, such as the network being down for a period, requires a synchronization of the
Communication Problem VPG between the two sites, for example a Bitmap Sync.
VPG Configuration The configuration of the VPG changed resulting in a synchronization being required. For example,
Changed the size of the journal was changed.
Managing Protection When the Recovery Datastore Will Be Unavailable (Datastore

Maintenance)
When access to a recovery datastore is not available, for example, during maintenance of the datastore, you have to change
the datastore in all affected VPGs to enable protection to continue.
Note: Changing the datastore directly in the Edit VM dialog or if the datastore used for the journal is not set to Default in the
Advanced Journal Settings dialog, causes the VPG to undergo an initial synchronization.
During the following procedures the journal used for recovery is reset and until the VPG returns to a protecting state, recovery
is not possible.
To enable protection to continue when a virtual machine recovery storage will be unavailable:
1. Remove all virtual machines from the VPG definitions that use the unavailable storage as the recovery storage.
When saving the VPG a warning is displayed.
2. Click No.
Note: A VPG must always have at least one virtual machine defined and therefore you cannot remove all the virtual
machines from a VPG at once. If all the VPGs use a datastore that requires maintenance, remove all but one of the virtual
machines and after completing this procedure, add the virtual machines back to the VPG and repeat the procedure with
the last virtual machine.
3. Change the default recovery datastore in the VPG definition to a new default datastore, if it was set to the unavailable
storage.
4. Move the saved volumes to the default datastore.
5. Add the virtual machine back to the VPG, and configure the virtual machine volumes to use the saved volumes as
preseeded volumes.
6. Save the VPG definition with the new settings.
The VPG will undergo a Delta Sync before returning to the status Meeting SLA.
To enable protection to continue when journal storage will be unavailable:

1. Delete the VPG but check Keep target disks at the peer site. Checking this option means that the target replica
disks for the virtual machines are kept so that you can preseed to these disks so the synchronization is faster.
2. Recreate the VPG, specifying the journal storage you want to use in the and the default recovery storage.
3. Add the virtual machine to the VPG, and configure the virtual machine volumes to use the saved volumes as preseeded
volumes.
4. Save the VPG definition with the new settings.
The VPG will undergo a Delta Sync before returning to the status Meeting SLA.
Managing Protection When the Recovery Datastore Will Be Unavailable (Datastore Maintenance) 266
CHAPTER 10: MANAGING VRAS
A VRA is a Zerto virtual machine that manages the replication of virtual machines across sites. A VRA must be installed on
every hypervisor that hosts virtual machines that require protecting in the protected site and on every hypervisor that will host
the replicated virtual machines in the recovery site. The VRA compresses the data that is passed across the WAN from the
protected site to the recovery site. The VRA automatically adjusts the compression level according to CPU usage, including
totally disabling it if needed.
The VRA is a custom, very thin, Linux-based virtual machine with a small footprint, disk – memory and CPU – and increased
security since there are a minimum number of services installed.
Zerto recommends installing a VRA on every host so that if protected virtual machines are moved from one host in the cluster
to another host in the cluster there is always a VRA to protect the moved virtual machines.
A VRA can manage a maximum of 1500 volumes, whether these are volumes being protected or recovered.
Note: VRAs and shadow VRAs are configured and managed by the Zerto Virtual Manager. You cannot take snapshots of VRAs
as snapshots cause operational problems for the VRAs.
The priority assigned to a VPG dictates the bandwidth used. The Zerto Virtual Manager distributes bandwidth among the
VRAs based on the VPG priority, and the VPGs with higher priorities are handled before writes from VPGs with lower priorities.
There are a number of tasks that you might need to perform on VRAs, including installing a new VRA on a host added to the
hypervisor management tool or uninstalling VRAs and moving the data maintained by a VRA to another VRA when a host
requires maintenance.
During normal operation, a VRA might require more disks than a single virtual machine can support. If this situation arises, the
VRA creates new shadow VRA virtual machines, used by the VRA to maintain additional disks (a diskbox). A shadow VRA
does not have an operating system and therefore does not have an IP address, or use VMware tools. A shadow VRA is created
proactively at the recovery site and prior to the recovery VRA reaching the SCSI target limit imposed by VMware: 15 SCSI
targets per SCSI controller and 4 SCSI controllers per virtual machine. This amounts to a limitation of 60 SCSI targets per
virtual machine. Similar to a VRA, a shadow VRA must be left to Zerto to manage, and must not be modified or removed for any
reason.
The following VRA management options are described in this chapter:
■ “Installing a VRA”, below
■ “Upgrading VRAs”, on page 272
■ “Editing VRA Settings”, on page 273
■ “Editing the VRA Connection Method or Password”, on page 275
■ “Changing a Recovery VRA”, on page 275
■ “Uninstalling VRAs”, on page 277
■ “Handling a VRA in an Error State (Ghost VRA)”, on page 278
■ “Managing Protection During VMware Host Maintenance”, on page 278
■ “Managing Protection When Moving a Host to a Different Cluster”, on page 279
■ “Support for VMware Virtual Update Manager (VUM)”, on page 279
Monitoring VRAs is described in “Monitoring Virtual Replication Appliances”, on page 229.
Managing VRAs 267
Managing VRAs
Installing a VRA
Zerto recommends installing a VRA on every host in every site so that if protected virtual machines are moved from one host in
the cluster to another host in the cluster there is always a VRA to protect the moved virtual machines.
VRA Installation Requirements

To install a VRA you require the following on the host:
■ 15GB storage space
■ At least 1GB of reserved memory.
■ (vSphere only) The ESX/ESXi version must be in accordance with supported ESX/ESXi versions in the Interoperability
Matrix, and Ports 22 and 443 must be enabled on the host during the installation.
■ Port 8100 must be enabled on SCVMM.
■ (Hyper-V only) Minimum PowerShell version: 4.0
■ The following PowerShell cmdlet has been run:
Install-WindowsFeature –Name Hyper-V -IncludeManagementTools -Restart
Before You Begin:

You must know the following information to install a VRA:
■ (vSphere only) If the ESXi version is 5.5 or higher and the VRA should connect to the host with user credentials, or if the
ESXi version is lower than 5.5, the password to access the host root account.
Note: For ESXi versions 5.5 or higher, by default the VRA connects to the host with a vSphere Installation Bundle, VIB.
Therefore, it is not necessary to enter the password used to access the host root account.
■ The storage the VRA will use, and the local network used by the host.
■ The network settings to access the peer site; either the default gateway or the IP address, subnet mask, and gateway.
Note: When the gateway is not required, you can specify 0.0.0.0 as the gateway, for example when performing self
replication.
■ Zerto recommendation is to use a static IP for the network configuration. When using Static IP, you need to know the IP
address, subnet mask, and default gateway to be used by the VRA.
Note: In a non-production environment it is often convenient to use DHCP to allocate an IP to the VRA. In a production
environment this is not recommended. For example, if the DHCP server changes the IP allocation on a reboot, the ZVM will
be disconnected from the VRA.
■ If the peer site VRAs are not on the default gateway, you must set up routing to enable the VRAs on this site to
communicate with the peer site VRAs before defining the VRAs.
■ Setting up routing after defining VRAs only applies to VRAs installed after the routing is set.
■ Any existing VRA is not affected and access to these VRAs continues via the default gateway.
■ If the default gateway stops being used, you must reinstall the VRAs that were installed before setting up paired site
routing.
■ (vSphere only) For the duration of the installation of the VRA, the Zerto Virtual Manager enables SSH in the vCenter Server.
■ (vSphere only) You must know the following information to install a VRA:
■ The password to access the host root account, for ESXi 5.x.
■ The datastore the VRA will use and the local network used by the host.
■ The network settings to access the peer site; either the default gateway or the IP address, subnet mask, and gateway.
■ If a static IP is used, instead of DHCP, which is the Zerto recommendation, you need to know the IP address, subnet
mask, and default gateway to be used by the VRA.
Note: In a non-production environment it is often convenient to use DHCP to allocate an IP to the VRA. In a production
environment this is not recommended. For example, if the DHCP server changes the IP allocation on a reboot, the VRA
does not handle the change.
Installing a VRA 268

Managing VRAs
If the peer site VRAs are not on the default gateway, you must set up routing to enable the VRAs on this site to communicate
with the peer site VRAs before defining the VRAs. Setting up routing after defining VRAs only applies to VRAs installed after
the routing is set. Any existing VRA is not affected and access to these VRAs continues via the default gateway. If the default
gateway stops being used, you must reinstall the VRAs that were installed before setting up paired site routing.
To set up routing:
1. In the SETUP > VRAs tab, select MORE > Paired Site Routing.
The Configure Paired Site Routing dialog is displayed.
2. Click Enable Paired Site Routing.

3. Specify the following, and then click SAVE:
■ Address: The IP address of the next hop at the local site, the router or gateway address, that is used to access the peer
site network.
■ Subnet Mask: The subnet mask for the peer site network.
■ Gateway: The gateway for the peer site network.
These access details are used to access all VRAs installed on the peer site after the information is saved.
To install Zerto Virtual Replication Appliances (VRAs) on ESX/ESXi hosts:

1. In the Zerto User Interface, click SETUP > VRAs.
2. Select a host which requires a VRA and click NEW VRA.

Managing VRAs
The Configure and Install VRA dialog is displayed. The dialog displayed depends on the ESX/i version:
ESXi versions from 5.5 ESXi versions before version 5.5

Note: If you selected a cluster or multiple hosts, the VRA is installed on the first host in the displayed list.
Specify the following Host Details:
■ Host: The host on which the VRA is installed. The drop-down displays the hosts that do not have a VRA installed, with
the selected host displayed by default.
(vSphere only) From ESXi 5.5, by default, Zerto Virtual Manager creates a .VIB (vSphere Installation Bundle) which is used
to set up a secure communication channel to the host. The .VIB is installed on the host when the VRA is installed. When
using VIB:
■ The user does not enter a password.
■ Once a day, Zerto Virtual Manager checks that the VRA and host can connect. If the connection fails, Zerto Virtual
Manager re-initiates the connection automatically and logs it.
(vSphere only) For ESX/i versions earlier than 5.5, when using a password, Zerto Virtual Manager connects to the host
using the root password. Once a day, Zerto Virtual Manager checks that the password is valid. If the password was
changed, an alert is issued, requesting the user enter the new password.
■ Use credentials to connect to host: When unchecked, the Zerto Virtual Manager uses VIB to set up a secure
communication channel to the host. This field is only relevant for ESXi 5.5 and later.
■ Host Root Password: When the VRA should connect to the host with a password, check Use credential to connect to
host and enter the root user password used to access the host. When the box on the right side is checked, the
password is displayed in plain text. This field is only relevant for ESXi 5.x hosts.
■ Datastore: The datastore that contains the OS disks of the VRA VM. You can install more than one VRA on the same
datastore.
■ Network: The network used to access the VRA.
■ VRA RAM: The amount of memory to allocate to the VRA. The amount determines the maximum buffer size for the
VRA for buffering IOs written by the protected virtual machines, before the writes are sent over the network to the
recovery VRA. The recovery VRA also buffers the incoming IOs until they are written to the journal. If a buffer
becomes full, a Bitmap Sync is performed after space is freed up in the buffer. For details, refer to Zerto Scale and
■ VRA Bandwidth Group: Choose the VRA Bandwidth Group from the dropdown list. To create a new VRA group, type
in the name of the new group and click CREATE. You can then choose the new group from the dropdown list.
You group VRAs together when VRAs use different networks so they can be grouped by network, for example when
the protected and recovery sites are managed by the same vCenter Server and you want to replicate from the branch
site to the main site. Within a group the priority assigned to a VPG dictates the bandwidth used and is applicable

Managing VRAs
within a group and not between groups. Thus, a VPG with a high priority is allocated bandwidth before VPGs with
lower priorities. VPGs that are on VRAs with different VRA groups, for example, VPG1 on VRA1 in group1 and VPG2 on
VRA2 in group2, do not affect each other, as the priority is relevant only within each group.
3. Specify the following VRA Network Details:
■ Configuration: Either have the IP address allocated via a static IP address or a DHCP server. If you select the Static
option, which is the recommended option, enter the following:
■ Address: The IP address for the VRA.
■ Subnet Mask: The subnet mask for the network. The default value is 255.255.255.0.
■ Default Gateway: The default gateway for the network.
4. Click INSTALL.
The VRA installation starts and the status is displayed in the TASKS popup dialog in the status bar and under
MONITORING > TASKS.
The VRA displayed name, and DNS name, is Z-VRA-hostname. If a virtual machine with this name exists, for example
when a previous VRA was not deleted, the VRA name has a number appended to it.
■

Managing VRAs
Upgrading VRAs
This section is applicable if Auto-Upgrade Virtual Replication Appliances was not selected when upgrading Zerto, or if a
manual VRA upgrade is required.
■ If a newer version of the installed VRAs exists, you can continue to use the current VRAs with the new version of Zerto, or
you can upgrade these VRAs from within the Zerto User Interface.
■ VRAs installed with the previous version of Zerto can work with VRAs installed with the current version of Zerto in any
combination (all from one version or a mix of VRA versions) as long as the VRAs are only one version lower than the
version of Zerto installed on the site.
■ Zerto recommends that you always upgrade the VRAs on your site to the latest version.
■ Not all new installations of Zerto require upgrading VRAs. If your VRA is outdated relative to your current version of
Zerto and an upgrade is available, the VRA version will be reported in the column as outdated. In addition, an alert is issued
on the site using the old VRA and on any site that is paired with it.
Note: You can move the mouse over the Outdated value to display the VRA version as a tooltip.
Considerations when upgrading VRAs

■ VRAs managing protected virtual machines: Either vMotion the protected virtual machines and datastores managed by
the VRA to another host with a VRA, or upgrade the VRA without vMotioning the virtual machines and a Bitmap Sync will
be performed following the upgrade.
■ Upgrading a VRA that manages the recovery of virtual machines results in a bitmap sync being performed after the
upgrade. Note that the time to upgrade a VRA is short so the bitmap sync should also be quick.
To upgrade VRAs:
1. For a VRA protecting virtual machines, if vMotioning the protected virtual machines:
a) Remove affinity rules for protected virtual machines on the host with the VRA to be upgraded.
b) vMotion these protected machines from the host to another host with a VRA.
2. In the Zerto User Interface, click SETUP > VRAs, select the VRAs to upgrade, and then click MORE > Upgrade.
The Upgrade VRAs dialog is displayed, listing the selected VRAs and whether an upgrade is available.
3. Review the list for the VRAs that you want to upgrade. Deselect any VRAs that you decide not to upgrade.
4. Click Upgrade Selected VRAs.
Upgrading VRAs 272

Managing VRAs
5. The upgrade progress is displayed in the VRAs tab.

■ After the upgrade, a bitmap sync is performed at both the protected and recovered sites.
Note: The VRA name does not change, even if the naming convention in the latest version is different.
Note: You do not need to upgrade VMware Tools on a VRA.
Editing VRA Settings

If you need to change the connection method (VIB or password), host password, VRA group, or network settings for a VRA, for
example when the gateway to the VRA is changed, you can do this by editing the VRA.
To edit the VRA:

2. Select the VRA to edit, and click MORE > Edit.
The Edit VRA dialog is displayed.
3. Edit the group if required.

■ VRA Group: You can change the free text to change the group that a VRA belongs. If you create a group and
then change the name when editing the VRA so that there is no VRA in the site that belongs to
the originally specified group, the group is automatically deleted from the system.
4. To create a new group, enter the new group name over the text New group, then click CREATE.
5. Edit the VRA network settings as follows:
■ Configuration: Either have the IP address allocated via a static IP address or a DHCP server. If the VRA was
originally installed with a static IP, you cannot change this to DHCP. If the VRA was originally
installed to use a DHCP server, you can change this to use a static IP. Zerto always recommends
using a static IP.
■ Address: The static IP address for the VRA to communicate with the Zerto Virtual Manager.
■ Subnet Mask: The subnet mask for the network. The default value is 255.255.255.0
■ Default Gateway: The default mask for the network.
6. Click SAVE.
Editing VRA Settings 273

Managing VRAs
The following folder is created as part of the VRA installation and must not be removed:
C:\zerto-temp-<storage_name> – VRA installation files. <storage_name> signifies the target host.
When a VRA is installed using the local storage (c:\), there is only one folder with this name.
When a VRA is installed on remote storage, a second folders with the same name is also created where the VRA is
installed
Editing VRA Settings 274

Managing VRAs
Editing the VRA Connection Method or Password

VRAs installed on ESXi 5.5 and later hosts can use either VIB or a password to access the host. VRAs installed on ESXi 5.1 and
earlier hosts can only use a password to access the host. When installing a VRA on a ESXi 5.5 or later host, you define whether
the VRA should use VIB or a password to connect to the host. After installation, you can change the method that VRAs use to
access the host, and, if a password is the method used, you can change this password.
When using vSphere Installation Bundle, VIB, Zerto Virtual Manager checks that the VRA can connect to the host. If
connecting fails, Zerto Virtual Manager re-initiates the connection automatically and notes this in the log.
When using a password, Zerto Virtual Manager checks that the password is valid once a day. If the password was changed, an
alert is triggered, requesting the user enter the new password. You can change the password stored by the VRA by editing the
VRA, either for a specific VRA, or when multiple hosts have their passwords changed, each with the same password, you can
update the password information for the affected VRAs globally.
To edit the VRA connection method:

2. Select the VRAs that need to be updated and click MORE > Change Host Password.
The Change Host Password VRA dialog is displayed.
3. To change the connection method or host password, do one of the following:

■ If the VRA is using a password to connect to the host and should use vSphere Installation Bundle, VIB, deselect Use
credentials to connect to host.
■ If the VRA is using VIB to connect to the host and should use a password, select Use credentials to connect to host
and enter the password. To display the password in plain text, click in the box next to the field.
■ If the VRA is connecting to the host with a password and the password for the host has changed, enter the new
password. To display the password in plain text, click in the box next to the field.
4. Click SAVE.
Changing a Recovery VRA

When a VPG is defined, the recovery host to use for each virtual machine in the VPG is specified. If required, you can edit the
recovery host for a single or multiple protected virtual machines. To edit the recovery host for selected virtual machines, see
“To change a recovery VRA for selected VMs:”, on page 275. To edit the recovery host for all protected virtual machines at
once, see “To automatically change the recovery host for all VMs:”, on page 276.
To change a recovery VRA for selected VMs:

2. Select the VRA to change and click MORE > Change VM Recovery VRA.
Editing the VRA Connection Method or Password 275

Managing VRAs
The EDIT VM Recovery VRA window is displayed, listing all the virtual machines being recovered on that host.
3. Review the list and select the virtual machines to change the target host to another specified target host.
4. To change the target host for the selected VM:
■ Click the Select the replacement host drop-down list to get a list of available target hosts and choose the target host.
■ Click the edit pencil icon under the Target Host column to get a list of available target hosts and choose the target
host.
■ Click Auto Select the Replacement Host and the best suitable host will be automatically selected for that virtual
machine. The auto-selection is based on a load-balancing algorithm.
You can move some virtual machines to one replacement target host, and then by repeating the operation, you can move
other virtual machines to a different target host.
■ Validation is performed to make sure the selected target host can be used. For example, the datastores used by both
the VRAs are accessible from both hosts.
■ Any implications of the change, such as whether synchronization might be required after the change is also displayed.
5. Click APPLY
■ During this procedure you cannot edit the affected VPGs nor attempt a failover, move, failover test, or clone
operation.
■ At the end of the procedure a Bitmap Sync might be required to resynchronize the protected machines with the
recovery VRAs.
To automatically change the recovery host for all VMs:

2. Select the VRA to change and click MORE > Evacuate Host.
Changing a Recovery VRA 276

Managing VRAs
The EVACUATE HOST window is displayed, listing all the virtual machines being recovered on that host and their
automatically selected target host.
The auto-selection is based on a load-balancing algorithm. The suggested hosts must share the same cluster as the
evacuated host meaning load-balancing will be executed at the cluster level.
■ Validation is performed to make sure the selected target host can be used. For example, the datastores used by both
the VRAs are accessible from both hosts.
■ Any implications of the change, such as whether synchronization might be required after the change is also displayed.
3. Click APPLY.
■ During this procedure you cannot edit the affected VPGs nor attempt a failover, move, failover test, or clone
operation.
■ At the end of the procedure a Delta Sync might be required to resynchronize the protected machines with the recovery
VRAs.
Uninstalling VRAs
VRAs are uninstalled via the Zerto User Interface and not via the vCenter Server user interface. You cannot uninstall a VRA
which is used to protect or recover virtual machines.
For a VRA protecting virtual machines: Before uninstallng the VRA, remove affinity rules for protected virtual machines on the
host and vMotion these protected virtual machines to another host in the cluster with a VRA installed.
For a VRA recovering virtual machines: Before uninstallng the VRA, change the host for all virtual machines in VPGs
recovering to this VRA to another host as described in “Changing a Recovery VRA”, on page 275. A bitmap sync occurs to
synchronize the VPGs with the new host.
Note: If the VRA has crashed, or was accidentally deleted, it must be forcibly uninstalled, as described in “Handling a VRA in an
Error State (Ghost VRA)”, on page 278.
For a VRA in a cluster, you can remove it and then install a new VRA. However, to ensure that virtual machines in the cluster
are not moved to the host without a VRA from the time the VRA is removed to the time a new VRA is installed, it is
recommended to perform the following procedure.
Uninstalling VRAs 277

Managing VRAs
To uninstall a VRA with virtual machines being recovered to it:

1. When the VRA to be removed is in a cluster, set VMware DRS to manual for the duration of the procedure, so that virtual
machines in the cluster are not moved to the host without a VRA from the time the VRA is removed to the time a new VRA
is installed.
2. Remove affinity rules for protected virtual machines on the host and vMotion any protected virtual machines to another
host with a VRA installed.
3. Change the host for all virtual machines in VPGs recovering to this VRA to another host as described in “Changing a
Recovery VRA”, on page 275.
4. Wait for any synchronization to complete.
5. Either select the VRAs to uninstall in the VRAs tab or for a single VRA display the VRA details by clicking the VRA Name
link in the VRAs tab, and click MORE > UNINSTALL.
6. Once the VRAs are completely removed, install a new VRA on the host.
Note: If a VRA cannot be removed, when the VRA was installed on an ESXi version 4.x or 5.x host and the password to the host
was changed, contact Zerto support.
After the VRA is uninstalled, connectivity from that VRA to any Zerto Cloud Connector is lost. After a VRA is reinstalled on the
host, the ports that were used for the connection to the Zerto Cloud Connector are not reused and new ports must be opened
in the firewall for the cloud site. For details about Zerto Cloud Connectors, refer to Zerto Cloud Manager Administration Guide.
Handling a VRA in an Error State (Ghost VRA)

When an event occurs that causes a VRA to enter an error state, for example the host machine crashes or the VRA or a shadow
VRA is accidentally deleted, if the VRA has shared storage disks that are accessible by other hosts in the site, you can copy
these disks to another VRA in the site.
To recover VRA disks from an VRA:

1. Remove the VPGs, keeping the recovery disks when removing to use as preseeded disks.
2. Uninstall the VRA.
3. Reinstall the VRA, as described in “Installing a VRA”, on page 268.
4. Recreate the VPGs using the preseeded disks.
Managing Protection During VMware Host Maintenance

When a host machine requires VMware maintenance, at least for the duration of the maintenance, to ensure continuous
protection:
■ For a host machine on the protected site: Remove affinity rules for protected virtual machines on the host that requires
maintenance and vMotion these machines to any other host with a VRA installed. When the host tries to enter
maintenance mode, the VRA will wait for the virtual machines to be removed from the host, or for a period of 10 minutes,
whichever occurs first. The VRA will then shut down. When the host exits maintenance mode, the VRA must be manually
powered on.
Note: If the protected virtual machines are powered off, and not vMotioned to another host, the VRA will wait 10 minutes
before shutting down.
■ For a host machine on the recovery site: VRA data and recovery volumes maintained by the VRA on the host should be
moved to another machine, by changing the destination host for all the virtual machines being recovered to that host, as
described in “Changing a Recovery VRA”, on page 275. Once host attempts to enter maintenance mode, the VRA is
automatically shut down. When the host exists maintenance mode, the VRA must be manually powered on.
The VRA shutdown will not complete if you cancel the host maintenance mode task.
Handling a VRA in an Error State (Ghost VRA) 278

Managing VRAs
Note: If the host is put into maintenance mode via the VMware’s vSphere Update Manager, the VRA is powered on
automatically when the host exits maintenance mode.
Note: Changing the VPG default host does not change the hosts for virtual machines already included in the VPG. These virtual
machine hosts must be changed directly by configuring the individual virtual machines in the VPG definition.
To enable VMware host maintenance for a VRA both protecting and recovering virtual machines:
1. Remove affinity rules for protected virtual machines on the host that requires maintenance and vMotion these machines to
any other host with a VRA installed.
2. Change the host for all virtual machines in VPGs recovering to this VRA to another host as described in “Changing a
Recovery VRA”, on page 275.
3. Wait for any synchronization to complete.
4. Enter VMware host into maintenance mode.
If prompted, do not migrate powered-off virtual machines. The VRA is automatically shut down.
5. (Optional) Remove the host from the cluster; place it under the data center entity, rather than the cluster entity.
6. Perform required maintenance. For example, upgrading the host.
7. Exit VMware host maintenance mode.
8. Power on the VRA.
Note: If the host is put into maintenance mode via the VMware’s vSphere Update Manager, the VRA is powered on
automatically when the host exits maintenance mode.
9. Wait for the Zerto Virtual Manager to connect to the local VRAs. You can monitor the alerts to determine when the
connections have been established.
10. (Optional) Add the host back into the cluster.
Note: If you do not remove the host from the cluster, a delta sync may accrue once the VMs are vMotioned back to the
host.
Managing Protection When Moving a Host to a Different Cluster

When a host machine has to be moved to another cluster:
For a host machine on the protected site: Remove affinity rules for protected virtual machines on the host that is going to be
moved and vMotion these machines to any other host in the cluster with a VRA installed. Shut down the VRA before moving
the host.
For a host machine on the recovery site: Shut down the VRA and place the host in VMware maintenance mode. After shutting
down the VRA VPGs with virtual machines being recovered to the VRA will enter an error state. Move the host to the new
cluster, exit maintenance mode and power on the VRA. The VPGs in an error state will enter a bitmap sync and then resume a
Meeting SLA status.
Note: Any VPGs that were defined with a recovery resource pool in the original cluster must be edited to change the default
and virtual machine specific target host settings for the new cluster, even when the new cluster has a resource pool that is
displayed in the VPG definitions.
Support for VMware Virtual Update Manager (VUM)

Some Virtual Update Manager upgrades require the host to enter maintenance mode.
If the user selected an upgrade which requires maintenance mode, and also selected the option Do not change VM power
state, the Remediation task might fail.
Note: Recovery and journal volumes that reside on the host are not automatically migrated to another host in the cluster.
To ensure that the Remediation task is successful, use the following procedure.
Managing Protection When Moving a Host to a Different Cluster 279

Managing VRAs
To ensure successful Virtual Update Manager upgrades:

1. Open the Site Settings window.
2. Click the Policies tab.
3. In the VMware Virtual Update Manager area, select Allow Zerto to always enter hosts to maintenance mode during
remediation.
■ When this is selected, if the Virtual Update Manager's Remediation task is detected, Zerto will automatically enter the
host into maintenance mode.
■ The host will exit maintenance mode when the Virtual Update Manager's Remediation task is completed.
■ The VRA is powered on automatically when the host exits maintenance mode.
Note: Automatic detection and powering off the VRA when running host maintenance mode is supported in vCenter
version 6.5. For more information see Zerto Virtual Replication Interoperability Matrix.
Support for VMware Virtual Update Manager (VUM) 280

CHAPTER 11: MANAGING A ZERTO
VIRTUAL MANAGER
The Zerto Virtual Manager runs as a Windows service and connects to Zerto components, such as VRAs, as well as hypervisor
management tools, such as VMware vCenter Server and Microsoft SCVMM.
For the maximum number of virtual machines, either being protected or recovered to the Zerto Virtual Manager, see Zerto
Scale and Benchmarking Guidelines.
■ “To check connectivity between Zerto Virtual Manager components:”, below
■ “Reconfiguring the Zerto Virtual Manager Setup”, on page 282
■ “Reconfiguring the Microsoft SQL Server Database Used by the Zerto Virtual Manager”, on page 284
■ “Replacing the SSL Certificate”, on page 285
■ “Pair to Another Site and Unpair Sites”, on page 285'
Check Connectivity Between Zerto Components

If you think that there are connectivity problems to or from a Zerto Virtual Manager, you can use the Zerto Virtual Replication
diagnostics utility to check the connectivity.
To check connectivity between Zerto Virtual Manager components:

1. Open the Zerto Virtual Replication Diagnostics application. For example, via Start > Programs > Zerto Virtual Replication
> Zerto Virtual Replication Diagnostics.
2. Select the Test Connectivity to Zerto Virtual Replication components option and click Next.
The IP Connectivity dialog is displayed.
You can use this dialog to check the following:

■ TCP communication between the Zerto Virtual Managers (ZVMs) on the protected and recovery sites. The default
port, specified during installation, is 9081.
■ Communication between VRAs on the protected and recovery sites, via the control port and the data port.
Managing a Zerto Virtual Manager 281
Managing a Zerto Virtual Manager
3. Select the connectivity you want to test and in the case of the Zerto Virtual Manager (ZVM), specify the TCP
communication port specified during the installation, if the default port, 9081, was changed.
4. Specify the type of test to perform:
Server: Test for incoming communication.
Client: Test for outgoing communication. Specify the IP address of the receiving Zerto Virtual Manager.
5. Click Next to test the specified connectivity.
The Server option listens for communication from a paired VRA. Stop listening by clicking Stop.
The Client options tests the client; on completion a result dialog is displayed.
6. Click Stop (server test) or OK (client test) to return to the Zerto Virtual Replication Diagnostics dialog.
Reconfiguring the Zerto Virtual Manager Setup

When installing Zerto, you provide the IP address of the vCenter Server to connect the Zerto Virtual Manager with, and the IP
address of the machine where the Zerto Virtual Manager runs to enable running the Zerto User Interface.
You can change these IP addresses if necessary, using the Zerto Diagnostics utility.
To reconfigure the Zerto Virtual Manager:

1. Click Start > Programs > Zerto > Zerto Virtual Replication Diagnostics.
2. Select the Reconfigure Zerto Virtual Manager option and click Next.
Reconfiguring the Zerto Virtual Manager Setup 282

The installation settings for the connection to the vCenter Server are displayed.
3. Change the IP and username and password if necessary.

■ IP / Host Name: The IP address or host name of the machine where the vCenter Server runs.
■ User Name: The user name for an administrator to the vCenter Server. The name can be entered using one of the
following formats:
■ username
■ domain\username
■ Password: A valid password for the given user name.
4. Click Next.
The dialog for Zerto Virtual Manager setup is displayed:
■ IP/Host name used by Zerto User Interface: The IP to access the Zerto Virtual Manager from the Zerto User
Interface. If the machine has more than one NIC, select the appropriate IP from the list, otherwise the IP that is
displayed is the only option.
■ HTTPS Port (ZVM <-> Zerto User Interface): The port used for inbound communication between the Zerto User
Interface and the Zerto Virtual Manager.
■ TCP Port (ZVM<->ZVMs on other sites): The port used for communication between Zerto Virtual Managers.
■ Both the protected and recovery sites belong to the same enterprise: If you change the value, when pairing sites,
use the TCP port value you specify here.
■ An enterprise using a cloud service provider to supply disaster recovery services: You must not change this
value.
■ TCP Port (ZVM->VBA): The port used for communication between the Zerto Virtual Manager and the Virtual Backup
Appliance.
■ HTTP Certificate: Check Replace SSL Certificate and browse for a certificate, if you change the certificate you have
been using.
5. Click Next.
The connectivity is checked.
Reconfiguring the Zerto Virtual Manager Setup 283

Note: If one of the tasks fails, click the link for information about why it failed. Usually it is a mistake when entering an IP
address.
6. Click Next.
The Zerto Virtual Manager is reconfigured.
7. Click Finish.
8. If you changed the IP address of the Zerto Virtual Manager, or the TCP port it uses to communicate with paired Zerto
Virtual Managers on other sites, you have to unpair these sites, both from this site and from the remote sites and then pair
the sites again.
Reconfiguring the Microsoft SQL Server Database Used by the Zerto Virtual Manager
1. Click Start > Programs > Zerto Virtual Replication > Zerto Diagnostics.
2. Select the Change SQL Server Credentials option and click Next.
The installation settings for the SQL Server are displayed. Change the IP and username and password if necessary.
Server Name: The domain name and server instance to connect to, with the format <server_name>\<instance_name>
or <Server_IP>\<instance_name>.
Reconfiguring the Microsoft SQL Server Database Used by the Zerto Virtual Manager 284
Specify either of the following authentication options:

Windows Authentication: Use Windows authentication. This option is only enabled if a specific service user account was
specified in the previous Service User dialog, in which case the service account name and password are used.
SQL Server Authentication: Use SQL Server authentication.
User Name: The user name for SQL Server database.
Password: A valid password for the given user name.
3. Click Next to the end of the wizard and then click Finish.
4. The Zerto Virtual Manager service is restarted using the new credentials.
Replacing the SSL Certificate

The communication between the Zerto Virtual Manager and the user interface uses HTTPS.
When you first logged in to the Zerto User Interface you installed a security certificate to continue working without each login
requiring acceptance of the security.
To replace the SSL certificate, follow the procedure “Reconfiguring the Zerto Virtual Manager Setup”, on page 282, and in the
Zerto Virtual Manager Setup window, in the HTTP Certificate area, select Replace SSL Certificate, and browse for a
replacement certificate.
Pair to Another Site and Unpair Sites

■ “Pair to Another Site”, below
■ “Unpairing Sites”, on page 286
Pair to Another Site

You can pair to any site where Zerto is installed.
Zerto can be installed at multiple sites and each of these sites can be paired to any other site on which Zerto has been installed.
Virtual machines that are protected on one site can be recovered to any paired site.
Replacing the SSL Certificate 285

To pair to a site:
1. In the Zerto User Interface, in the SITES tab click PAIR.
The Add Site dialog is displayed.
2. Specify the following:

Host name/IP: IP address or fully qualified DNS host name of the remote site Zerto Virtual Manager to pair to.
Port: The TCP port communication between the sites. Enter the port that was specified during the installation. The default
port during the installation was 9081.
3. Click PAIR.
The sites are paired, meaning that the Zerto Virtual Manager for the local site is connected to the Zerto Virtual Manager at
the remote site.
After the pairing completes the content of the SITES tab changes to include summary information about the paired site.
Unpairing Sites
You can unpair any two sites that are paired to each other.
IMPORTANT: if there is a VPG on either of the sites you are unpairing, the VPGs will be deleted.
To unpair two sites:

1. In the Zerto User Interface, in the SITES tab, select the site which you want to unpair.
2. Click UNPAIR.
A message appears warning the user that the sites are about to unpair.
If there are either protected or recovered VPGs on the paired sites, a message appears warning the user that the VPGs will
be deleted.
3. For vSphere, Hyper-V and Azure platforms, you can select to keep disks to use for preseeding if the VMs are re-protected.
If you select this option, the disks are not removed from the recovery site.
4. To unpair, click CONTINUE.
The sites are no longer paired. If there are VPGs on either site, they are deleted.
The VRA on the recovery site that handles the replication for the VPG is updated including keeping or removing the
replicated data for the deleted VPG, depending if you selected to keep disks to use for preseeding.
The locations of the saved target disks are specified in the Events tab in the ZVM application on the Recovery site.
Pair to Another Site and Unpair Sites 286

CHAPTER 12: MANAGING A ZERTO
VIRTUAL MANAGER CLUSTER
What is Zerto’s Failover Cluster?

When you have a Zerto system, you want your system to always be up and running, and to never go down. But, as with all
systems, your Zerto system will need maintenance, (like security patches, and operating system updates) and will need to be
upgraded with the latest Zerto releases.
In order to perform these maintenance procedures, Zerto has integrated with Microsoft’s Failover Cluster feature and now
allows their customers to install Zerto Virtual Manager in a clustered environment.
With a clustered ZVM environment running, you are then able to easily perform the following:
■ Operating System maintenance
■ Change an existing Zerto Virtual Manager to a clustered Zerto Virtual Manager
■ Upgrade your Zerto Virtual Manager
Clustered Concepts
TERM OR PHRASE DEFINITION
clustered role Clustered applications and services
node Clustered nodes (meaning, servers) are connected by physical cables and by software.
If one or more of the cluster nodes fail, other nodes begin to provide service
continuously.
Active/passive node A resources cluster where only one instance is active at any given time.
Zerto Failover Cluster Role Mover The Zerto Failover Cluster Role Mover tool facilitates an unobtrusive move of the
clustered role from one node to the other, with minimal consequences to Zerto Virtual
Manager.
switch node
Microsoft Failover Clustering A Windows Server feature that enables you to group multiple servers together into a
fault-tolerant cluster (renamed in Windows Server 2008 from Microsoft Cluster
Service (MSCS))
Minimal downtime The time it takes for the ZVR to start.
Use Cases
With your clustered Zerto Virtual Manager environment running, you are able to perform the following procedures:
OPERATION DESCRIPTION FOLLOW PROCEDURE...
Operating System maintenance You have a running clustered Zerto Virtual “Performing Maintenance on
Manager, which has one active and one passive your Zerto Virtual Manager
node. Operating System”, on
page 288
You need to perform operating system
maintenance on both of the nodes.
Managing a Zerto Virtual Manager Cluster 287
Managing a Zerto Virtual Manager Cluster
OPERATION DESCRIPTION FOLLOW PROCEDURE...

Change existing ZVM to a clustered You have an existing ZVM environment, and you “Switching from a Non-
ZVM want to change it to a clustered ZVM Clustered (Standard)
environment, then you can follow the procedure Environment to a Clustered
Environment”, on page 290
Zerto Virtual Manager upgrade You have a running clustered Zerto Virtual After release of Zerto 7.0U1
Manager, which has one active and one passive you will be able to perform this
node. procedure to upgrade from
Zerto 7.0 to Zerto 7.0U1.
You need to perform ZVM upgrade on both of the
nodes.
Note:
To install a ZVM cluster, see Zerto Virtual Replication Installation Guide for VMware vSphere and Microsoft Hyper-V
Environments, in the section Installing Zerto in Clustered vSphere Environments.
Performing Maintenance on your Zerto Virtual Manager Operating System

Use the following procedure to perform operating system maintenance on both of the ZVM clustered nodes.
STEP DESCRIPTION
Step 1: Log into the passive node, and perform your maintenance operation. Zerto continues to run on the active node.
When the maintenance operation is complete, and the passive node is back online, continue to the next step.
Step 2: Switch the nodes using the procedure “Using the Zerto Failover Cluster Role Mover Tool”, on page 288.
Outcome: The passive node which was updated with the maintenance operation is now the active node.
Step 3: Connect to the now passive node (in other words, the node which still needs to be maintained) and perform the
same maintenance operation.
Using the Zerto Failover Cluster Role Mover Tool

The Zerto Failover Cluster Role Mover tool facilitates an unobtrusive move of the clustered role from one node to the other,
with minimal consequences to Zerto Virtual Manager.
The user defines a timespan, during which time the tool will identify the best available point in time to move the clustered role.
Although it is possible to use the Failover Cluster Manager to move a role from one node to the other, the Zerto Failover Cluster
Role Mover can identify a time which will cause minimal interference to Zerto Virtual Manager.
To use the Zerto Failover Cluster Role Mover Tool:

1. Copy and replace the tweak.txt file to the node to which you are moving.
2. On the relevant cluster node, navigate to Zerto > Zerto Virtual Replication.
3. Right-click the file ZFailoverClusterRoleMover.exe, and select Run as administrator.
A command prompt window opens.
Performing Maintenance on your Zerto Virtual Manager Operating System 288

The tool runs with the default timespan settings.

TIP:
■ To change the default timespan, see To change the default timespan settings.
■ You can stop the tool from running by entering Ctrl+C.
4. When the tool completes moving the role from one node to the other, a success or failure message appears.
5. If a failure message appears, verify the following before trying again:
■ The active node is up (and not down).
■ That no failover or retention activities are running on the active node.
6. If a failure message appears again, call Zerto Support.
To change the default timespan settings

1. Open and Command Prompt, and Run as administrator.
2. Change directory to Zerto > Zerto Virtual Replication.
3. To view the tool help, enter:
ZFailoverClusterRoleMover.exe --help
4. To change the default time span (in minutes), enter:

ZFailoverClusterRoleMover.exe -t <enter a new timespan>
5. You can stop the tool from running by entering Ctrl+C.
Performing Maintenance on your Zerto Virtual Manager Operating System 289

Switching from a Non-Clustered (Standard) Environment to a Clustered Environment

Before switching from a non-Clustered (standard) environment to a clustered environment, review the Considerations and
Before you Begin sections below.
Considerations
■ This procedure can be performed only when an external SQL Server is used.
■ The ZVM IP will be used as the Cluster IP. It is configured in the Zerto role IP. This is used so as to maintain connections to
existing peer sites and to retain VPG configurations.
If you change the IP, you will need to pair all the peer sites, and reconfigure the VPGs.
Note:
When relevant, you are able to switch back from a clustered environment to a non-clustered environment.
Go to, Switching from a Clustered Environment to a Non-Clustered (Standard) Environment.
Before you Begin

Make sure:
■ You have decided on the following, and have the information accessible:
■ Cluster Name
■ Cluster IP
■ Zerto Role Name
■ Zerto Role IP
■ You have:
■ Access to the Registry.
■ (Recommended) A backup of the Registry
To Switch from a Non-Clustered (Standard) Mode to a Clustered Mode:

1. In the Failover Cluster Manager, create a cluster. Review the Microsoft procedure.
2. In one of the cluster nodes, on the VM, install ZVM. See First Clustered Node - Installing Zerto Virtual Replication.
3. In the Failover Cluster Manager, create an empty role. To do this, right click the roles menu on the left pane, and select
Create Empty Role.
When the role is created, it is automatically in the state, Running.
4. Name the Role:
a) Right-click the role, and select Properties.
b) In the General tab, define the role Name.
c) Click Apply.
5. Configure Failover settings.
a) Navigate to the Failover tab and define the following:
Maximum restarts in the specified period 12
Period 1 hour
b) In the Failback area, select Prevent failback.
c) Click Apply, then click OK.
6. Stop the role. To do this, right-click the role, and select Stop Role.
7. Select the node where ZVM is not installed, and install ZVM. See Second Clustered Node - Installing Zerto Virtual
Replication.
8. Copy and replace the tweak.txt file from the first node to the second node.
9. Select the node where ZVM is installed, and Stop all Zerto Services.
Switching from a Non-Clustered (Standard) Environment to a Clustered Environment 290

10. Reconfigure the Zerto Services Startup Type from Automatic to Manual. To do this:
a) Open the Services manager.
b) Select and right-click the service Zerto Virtual Manager.
c) Navigate to Properties > General tab, Startup type drop-down list, and select Manual.
d) Repeat steps b and c for the services Zerto Virtual Backup Appliance, and Zerto Online Services Connector.
11. Change the Log On modes to a domain account for the services Zerto Virtual Manager and Zerto Virtual Backup
Appliance. To do this:
a) Navigate to Properties > Log On tab.
b) Select This account, then enter the same domain account credentials which you entered when you installed the first
clustered node, First Clustered Node - Installing Zerto Virtual Replication.
12. Update the Registry. Go to the Registry, navigate to HKEY_LOCAL-MACHINE > SOFTWARE > Zerto > Zerto Virtual
Replication, and create the FailOverCluster key with it’s sub-keys.
a) Right-click the key Zerto Virtual Replication, and select New > Key, then enter FailoverCluster.
b) Right-click the key FailoverCluster, and select New > Key, then enter ClusterDetails.
c) Right-click the key FailoverCluster, and select New > Key, then enter ZvmRoleDetails.
13. Select the ClusterDetails sub-key, then set the cluster IP value:
a) In the right pane, right-click and select New > String value.
b) Enter the value name: IP
c) Right-click IP, select Modify, then enter the value data: Cluster IP
14. Select the ClusterDetails sub-key, then set the cluster name value:
b) Enter the value name: Name
c) Right-click Name, select Modify, then enter the value data: Cluster Name
15. Select the ZvmRoleDetails sub-key, then set the ZVM role IP value:
b) Enter the value name: IP
c) Right-click IP, select Modify, then enter the value data: Role IP
16. Select the ZvmRoleDetails sub-key, then set the ZVM role name value:
b) Enter the value name: Name
c) Right-click Name, select Modify, then enter the value data: Role Name
17. Configure the ZVM Role on the cluster. See Configuring the Role with Zerto Services.
First Clustered Node - Installing Zerto Virtual Replication

Use the following procedure to configure ZVR on the first clustered node.
Before you Begin:
■ vCD environments only: When you install and configure an AMQP Server for Zerto Virtual Replication, make sure you
enter the Cluster role IP in the field AMQP host.
To install Zerto Virtual Manager on the first clustered node:

1. On the first cluster node, run the Zerto Installer.
■ If the required version of Microsoft .NET Framework is not installed, you are prompted to install the required version
of .NET Framework, which is included as part of the Zerto installation package.
After .NET is installed, the machine automatically restarts and the Zerto installation begins.
2. Follow the wizard until the Installation Type window appears, then select the option, Custom Installation.
The Choose Stand-alone Or Clustered Installation window appears.

3. Select Clustered Installation, then click Next.

The Windows Service User window appears.
This is the account which will run the Zerto Virtual Manager Service.
Note:
The user who runs the Windows Zerto Virtual Manager service must be configured with permission to ‘logon as a
service’.
4. Best Practice: Enter the domain username and password of the user who will run the Zerto Virtual Manager Service.
Note:
Make sure that the domain user has the required privileges.
5. Click NEXT.
The Database Type window appears.
■ In the Database Type window you connect the first node to an external Microsoft SQL Server. This is the same
database which will be used for the second node.

■ Do not select Connect to an existing database - that option will be used when you install Zerto on the second node,
later on.
6. Connect to the external database by selecting Connect to an external Microsoft SQL Server or Microsoft SQL Server
Express database, then enter the SQL Server Authentication details.
a) Server Name: The domain name and server instance to connect to, with the format:
<server_name>\<instance_name> or <Server_IP>\<instance_name>
b) Specify an authentication method. Select one of the following:
■ Windows Authentication
- or -
■ SQL Server Authentication
c) If you selected Windows Authentication: This option is enabled only if a specific service user account was specified in
Windows Service User, in 4. In this case, the service account name and password are used.
d) If you selected SQL Server Authentication, the Test Authentication button is also displayed.
Define the following:
■ Username: The user name for the SQL Server database.
The installer checks whether it can connect to the specified database with the specified username and password.
e) Click TEST CONNECTION. You can only continue when the authentication is successful.
7. Click NEXT. The vCenter Server Connectivity window appears.
8. Enter connection settings that the Zerto Virtual Manager uses to communicate with the vCenter Server:
■ IP/Host name: The IP address or host name of the machine where the vCenter runs.
■ Username: The user name for a user with administrator level privileges to the vCenter Server. The name can be
entered using either of the following formats:
■ username
■ domain/username
9. Click NEXT.
■ For further steps on vCloud Direct (vCD) Connectivity, continue to 10.
■ Otherwise, go to 15.
10. The vCloud Director Connectivity window is displayed.

11. When using vCloud Director and you have installed an AMQP server, click the Enable vCD BC/DR checkbox and enter the
VMware vCloud Director access details:
■ IP / Host name: The IP address or host name of the machine where vCD runs. When connecting to vCD with multiple
cells, enter the virtual IP for the network load balancing used by the cells.
■ Username: The user name for an administrator to vCD.
■ AMQP Username: The user name for the AMQP server.
■ AMQP Password: A valid password for the given AMQP user name.
If the vCD connection settings are not specified, for example, when you do not have an AMQP server installed, they
can be set in the Advanced Settings dialog in the Site Configuration panel, in the Zerto User Interface after
installation, as described in the Zerto Cloud Manager Administration Guide.
TIP:
Zerto provides an AMQP installation kit if you do not have one installed for vCD.
■ Run ZertoAMQPInstallWizard.exe as described in the Zerto Cloud Manager Administration Guide, and enter the
following credentials:
■ Username: The AMQP user account Zerto will use. RabbitMQ prior to version 3.3 installs with a default
administrator user: guest. In RabbitMQ version 3.3 and higher, specify a user with administrator privileges.
■ Password: The password for the user. RabbitMQ prior to version 3.3 installs with a default password of guest.
12. Click NEXT.
The Cluster Details window appears.

13. Enter the cluster details:

Cluster Name The exact name of the cluster, as it was created in the Failover Cluster Manager.
Cluster IP The IP of the cluster, as it was defined in the Failover Cluster Manager.
Zerto role name The exact name of the role, as it appears in the Failover Cluster Manager.
Zerto role IP The IP of the role, as it appears in the Failover Cluster Manager.
14. Click NEXT.
15. The Zerto Virtual Manager Site Details window appears, where you define general information about the site.
16. Enter the site details:

Site Name: A name to identify the site. This name is displayed in the Zerto User Interface. This field is
mandatory.
Location: (Optional) Information such as the address, or name of the site to identify it.
Contact Information: (Optional) The name of the person to contact if a need arises.
Contact Email: (Optional) The email address to contact if a need arises.
Contact Phone: (Optional) The phone number to contact if a need arises.
17. Click NEXT.

The Online Services and Zerto Mobile Application window appears.
The Online Services and Zerto Mobile Application are enabled by default.
■ You can disable these services by deselecting Enable Online Services and Zerto Mobile Application.
18. Click NEXT.

The Zerto Virtual Manager Communication window appears.

In this window you define the connection settings (ports) which are used by Zerto Virtual Manager to communicate with
Zerto Virtual Managers on other sites.
PORT DESCRIPTION PARAME- DEFAULT COMMUNICATION BETWEEN... COMMENTS

TER PORT DIRECTION
NUMBER
IP/Host Name Used by the NA Zerto User Interface IP to access the Zerto Virtual
Zerto User Interface Manager from the Zerto User
- and -
Interface.
Zerto Virtual Manager
If the machine has more than
one NIC, select the
appropriate IP from the list.
Otherwise, the IP that is
HTTP Port (ZVM) 9080 Inbound Zerto Virtual Manager
- and -
Zerto internal APIs, and
Cmdlets
HTTP Port (clients<->ZVM) 9669 Inbound Zerto User Interface
- and -


TER PORT DIRECTION
NUMBER
TCP Port (ZVM<->ZVM) 9081 Inbound and Zerto Virtual Manager ■ When both the protected
outbound and recovery sites belong
- and -
to the same enterprise:
Zerto Virtual Manager ■ If you change this
value, when pairing
sites, use the TCP
port value specified
here. Pairing the sites
is described in Zerto
Installation Guide for
Microsoft Hyper-V or
VMware vSphere, in
the section Pairing
Sites.
■ When an enterprise uses
a cloud service provider
to supply disaster
recovery services:
■ Do not change this
value
TCP Port (ZVM->VBA) 9180 Inbound and Zerto Virtual Manager
outbound
- and -
Virtual Backup Appliance
(VBA)
19. Click NEXT.
The installation performs checks to verify that the installation can proceed successfully.
20. If you intend managing your disaster recovery from this machine, you can select to open the Zerto Virtual Manager (ZVM)
Interface at the end of the installation, logging in with the user name and password for the vCenter Server connected to the
Zerto Virtual Manager. In this user interface you set up Zerto, as described in Zerto Installation Guide for Microsoft Hyper-V
or VMware vSphere, in the section Initial Configuration.
21. You must exclude the following folders from antivirus scanning:
22. Add the machine to the relevant host boot configuration, so that on starting up the host, this machine, running the Zerto
Virtual Manager, is also powered on automatically.
Note: If the vSphere Client console was open during the installation, close it and reopen it to ensure you have the Zerto
Virtual Manager user interface loaded.
23. Continue with step 3 on 290.

Second Clustered Node - Installing Zerto Virtual Replication

Use the following procedure to configure ZVR on the second clustered node.
Before You Begin:
■ Verify you installed and configured Zerto Virtual Manager on the first node.
■ vCD environments only: When you install and configure an AMQP Server for Zerto Virtual Replication, make sure you
enter the Cluster role IP in the field AMQP host.
To install Zerto Virtual Manager on the second clustered node:

1. Copy the storage_properties.xml file from the first node, to a folder in the second node.
1. On the first cluster node, run the Zerto Installer.
■ If the required version of Microsoft .NET Framework is not installed, you are prompted to install the required version
of .NET Framework, which is included as part of the Zerto installation package.
After .NET is installed, the machine automatically restarts and the Zerto installation begins.
2. Follow the wizard until the Installation Type window appears, then select the option, Custom Installation.
The Choose Stand-alone Or Clustered Installation window appears.
3. Select Clustered Installation, then click Next.

The Windows Service User window appears.
This is the account which will run the Zerto Virtual Manager Service.
Note:
The user who runs the Windows Zerto Virtual Manager service must be configured with permission to ‘logon as a
service’.
4. Best Practice: Enter the domain username and password of the user who will run the Zerto Virtual Manager Service.
Note:
Make sure that the domain user has the required privileges.
5. Click NEXT.

The Database Type window appears.
You now configure the database for the second node.

6. Select Connect to an existing database using a “storage_properties.xml” file, then browse to the storage_properties.xml
file which you copied over to a folder in the second node in 1.
This automatically connects the database from the first node to the second node.
7. Click TEST CONNECTION. You can only continue when the authentication is successful.
8. Click NEXT. The vCenter Connectivity window appears.
9. Enter connection settings that the Zerto Virtual Manager uses to communicate with the vCenter Server:
■ IP/Host name: The IP address or host name of the machine where the vCenter runs.
■ Username: The user name for a user with administrator level privileges to the vCenter Server. The name can be
entered using either of the following formats:
■ username
■ domain/username
10. Click NEXT.
■ For further steps on vCloud Direct (vCD) Connectivity, continue to 11.
■ Otherwise, go to 16.

11. The vCloud Director Connectivity window is displayed.
12. When using vCloud Director and you have installed an AMQP server, click the Enable vCD BC/DR checkbox and enter the
VMware vCloud Director access details:
■ IP / Host name: The IP address or host name of the machine where vCD runs. When connecting to vCD with multiple
cells, enter the virtual IP for the network load balancing used by the cells.
If the vCD connection settings are not specified, for example, when you do not have an AMQP server installed, they
can be set in the Advanced Settings dialog in the Site Configuration panel, in the Zerto User Interface after
installation, as described in the Zerto Cloud Manager Administration Guide.
TIP:
Zerto provides an AMQP installation kit if you do not have one installed for vCD.
■ Run ZertoAMQPInstallWizard.exe as described in the Zerto Cloud Manager Administration Guide, and enter the
following credentials:
■ Username: The AMQP user account Zerto will use. RabbitMQ prior to version 3.3 installs with a default
administrator user: guest. In RabbitMQ version 3.3 and higher, specify a user with administrator privileges.
■ Password: The password for the user. RabbitMQ prior to version 3.3 installs with a default password of guest.
13. Click NEXT. The Cluster Details window appears.

14. Enter the cluster details, exactly as they were entered on the first node:
Cluster Name The exact name of the cluster, as it was created in the Failover Cluster Manager.
Cluster IP The IP of the cluster, as it was defined in the Failover Cluster Manager.
Zerto role name The exact name of the role, as it was created in the Failover Cluster Manager.
Zerto role IP The IP of the first role, at it appears in the Failover Cluster Manager.
15. Click NEXT.
16. The Zerto Virtual Manager Site Details window appears, where you define general information about the site.
17. Enter the site details:

Site Name: A name to identify the site. This name is displayed in the Zerto User Interface. This field is
mandatory.
Location: (Optional) Information such as the address, or name of the site to identify it.
Contact Information: (Optional) The name of the person to contact if a need arises.
Contact Email: (Optional) The email address to contact if a need arises.
Contact Phone: (Optional) The phone number to contact if a need arises.
18. Click NEXT.

The Online Services and Zerto Mobile Application window appears.
The Online Services and Zerto Mobile Application are enabled by default.
■ You can disable these services by deselecting Enable Online Services and Zerto Mobile Application.
19. Click NEXT.
The Zerto Virtual Manager Communication window appears.

In this window you define the connection settings (ports) which are used by Zerto Virtual Manager to communicate with
Zerto Virtual Managers on other sites.

TER PORT DIRECTION
NUMBER
IP/Host Name Used by the NA Zerto User Interface IP to access the Zerto Virtual
Zerto User Interface Manager from the Zerto User
- and -
Interface.
If the machine has more than
one NIC, select the
appropriate IP from the list.
Otherwise, the IP that is
HTTP Port (ZVM) 9080 Inbound Zerto Virtual Manager
- and -
Zerto internal APIs, and
Cmdlets
HTTP Port (clients<->ZVM) 9669 Inbound Zerto User Interface
- and -


TER PORT DIRECTION
NUMBER
TCP Port (ZVM<->ZVM) 9081 Inbound and Zerto Virtual Manager ■ When both the protected
outbound and recovery sites belong
- and -
to the same enterprise:
Zerto Virtual Manager ■ If you change this
value, when pairing
sites, use the TCP
port value specified
here. See the section
Pairing Sites.
■ When an enterprise uses
a cloud service provider
to supply disaster
recovery services:
■ Do not change this
value
TCP Port (ZVM->VBA) 9180 Inbound and Zerto Virtual Manager
outbound
- and -
Virtual Backup Appliance
(VBA)
20. Click NEXT.
The installation performs checks to verify that the installation can proceed successfully.
21. If you intend managing your disaster recovery from this machine, you can select to open the Zerto Virtual Manager (ZVM)
Interface at the end of the installation, logging in with the user name and password for the vCenter Server connected to the
Zerto Virtual Manager. In this user interface you set up Zerto. See the section Initial Configuration.
22. You must exclude the following folders from antivirus scanning:
23. Add the machine to the relevant host boot configuration, so that on starting up the host, this machine, running the Zerto
Virtual Manager, is also powered on automatically.
Note: If the vSphere Client console was open during the installation, close it and reopen it to ensure you have the Zerto
Virtual Replication user interface loaded.
24. Continue with step 8 on 290.
Configuring the Role with Zerto Services

Use the following procedures to add Zerto services to the role, and to configure the role for Zerto Virtual Manager - in the
following order:

1. Adding and Configuring the Zerto Virtual Manager Service

2. Adding and Configuring the Zerto Virtual Backup Appliance Service
3. Adding and Configuring the Online Services Connector Service
Adding and Configuring the Zerto Virtual Manager Service

Procedure 1: To add the Zerto Virtual Manager service
Procedure 2: To configure the Zerto Virtual Manager service
Procedure 1: To add the Zerto Virtual Manager service

1. Select the role which you created in Creating a Role for the Zerto Services.
2. Right-click the role and select Add Resource > Generic Service.
3. From the list of services, select Zerto Virtual Manager service, then click Next.
4. Complete the wizard.
Procedure 2: To configure the Zerto Virtual Manager service

1. Right-click the service Zerto Virtual Manager, and select Properties.
2. Define the service’s startup parameter:
a) Click the General tab.
b) In the Startup Parameters field enter the following parameter: /RUNASPARTOFCLUSTER
3. Configure the service’s dependencies:
a) Click the Dependencies tab.
b) In the first row, select the network resource name, which you entered in Procedure 2: To add and configure a network
resource to the role, and click Apply.
4. Define the Policies. Navigate to the Policies tab, and configure the following:
If resource fails, attempt restart on current node Select this option
Period for restart 15:00 (minutes)
Delay between restarts 30 (seconds)
If restart is unsuccessful, fail over all resources in this Role Select this option
If all the restart attempts fail, begin restarting again after the specified period Deselect this option
5. Proceed to Adding and Configuring the Zerto Virtual Backup Appliance Service.
Adding and Configuring the Zerto Virtual Backup Appliance Service

Procedure 1: To add the Zerto Virtual Backup Appliance service
Procedure 2: To configure the Zerto Virtual Backup Appliance service
Procedure 1: To add the Zerto Virtual Backup Appliance service

1. Select and right-click the role, then navigate to Add Resource > Generic Service.
2. Select the service Zerto Virtual Backup Appliance, then click Next.
Procedure 2: To configure the Zerto Virtual Backup Appliance service

1. Right-click the service Zerto Backup Appliance, and select Properties.
b) In the first row, select Zerto Virtual Manager, and click Apply.

If restart is unsuccessful, fail over all resources in this Role Deselect this option
If all the restart attempts fail, begin restarting again after the specified period Select this option
4. Proceed to Adding and Configuring the Online Services Connector Service.
Adding and Configuring the Online Services Connector Service

Procedure 1: To add the Zerto Online Services Connector service
Procedure 2: To configure the Zerto Online Services Connector service
Procedure 1: To add the Zerto Online Services Connector service

1. Select and right-click the role, then navigate to Add Resource > Generic Service.
2. Select the service Zerto Online Services Connector, then click Next.
Procedure 2: To configure the Zerto Online Services Connector service

1. Right-click the service Zerto Online Services Connector, and select Properties.
b) In the first row, select the network resource name, and click Apply.
If restart is unsuccessful, fail over all resources in this Role Deselect this option
If all the restart attempts fail, begin restarting again after the specified period Select this option
4. Click Apply, and click OK.
5. Right-click the role, and select Start Role.

Switching from a Clustered Environment to a Non-Clustered (Standard) Environment

In clustered mode, the clustered ZVM is connected to all its peer sites via the IP which is configured in the cluster, in the Zerto
role IP.
When switching from clustered mode to a non-clustered mode, this IP is used as the IP for the ZVM’s VM.
If you decide not to use this IP, all the peer sites and VPGs will be removed, and you will need to re-pair the ZVM with all it’s
peer sites and to reconfigure all the VPGs.
Before you Begin:
Make sure you have:
■ Access to the Registry.
■ (Recommended) A backup of the Registry
To switch from Clustered to Standard mode:

1. In the Failover Cluster Manager, navigate to the ZVM cluster and select the Zerto role.
2. Right-click the role, and select Stop Role.
3. Then select Remove, to remove the ZVM role.
4. Select the ZVM cluster, right-click and select Shutdown Cluster, or Destroy Cluster.
There are now two nodes, each with ZVM, but which are not connected.
5. Decide which node will be used as the non-clustered mode.
6. Select the other node, (not the one you selected in step 5) and uninstall ZVM. You can also clean or delete the VM.
7. Connect to the VM which will become the non-clustered VM, (which you selected in step 5).
8. Verify that all running Zerto Services are Stopped. Specifically the following Zerto services:
■ Zerto Virtual Manager
■ Zerto Virtual Backup Appliance
■ Zerto Online Services Connector
9. Go to the Registry, navigate to HKEY_LOCAL-MACHINE > SOFTWARE > Zerto > Zerto Virtual Replication, and select the
FailOverCluster key.
10. Right-click the FailOverCluster key and select Delete.

Once this key is deleted, ZVM will no longer identify itself in cluster mode.
11. Reconfigure the Zerto Services Startup Type from Manual to Automatic. To do this:
a) Open the Services manager.
b) Select and right-click the service Zerto Virtual Manager.
c) Navigate to Properties > General tab, Startup type drop-down list, and select Automatic.
Switching from a Clustered Environment to a Non-Clustered (Standard) Environment 306

d) Repeat steps b and c for Zerto Virtual Backup Appliance service.

e) For the Zerto Online Services Connector, select and right-click the service Zerto Online Services Connector, then
navigate to Properties > General tab, Startup type drop-down list, and select Automatic (Delayed Start).
12. Using the Diagnostics application, run the flow Reconfigure Zerto Virtual Manager.
a) Open the Zerto Diagnostics application.
For example, via Start > Programs > Zerto Virtual Replication > Zerto Diagnostics.
b) Select Reconfigure Zerto Virtual Manager, then click Next.

c) Complete the Diagnostics wizard.
Switching from a Clustered Environment to a Non-Clustered (Standard) Environment 307

CHAPTER 13: ADVANCED SITE
CONFIGURATION
There are a number of configuration tasks that you can perform, some of which should be done as part of the initial site
configuration.
■ “Site Settings”, below
■ “Seeing What Is Licensed”, on page 316
■ “Submitting a Support Ticket”, on page 317
■ “Submitting a Feature Request”, on page 318
■ “About Zerto”, on page 318
Site Settings
The Site Settings dialog enables configuring various site settings. These include the default script timeout and protection
policies such as the commit policy for a failover or move operation.
To specify site information:

1. In the Zerto User Interface (top right), click SETTING ( ) and select Site Settings.
The Site Settings dialog is displayed.
■ In vSphere and Hyper environments, the following window is displayed.
Advanced Site Configuration 308
Advanced Site Configuration
■ In AWS environments, the following window is displayed.
■ In Azure environments, the following window is displayed.
2. Make any required changes to the settings, click SAVE and then APPLY. The following settings can be defined:
■ “Editing Information About a Site”, below
■ “Defining Performance and Throttling”, on page 311
■ “Defining Site Policies”, on page 313
■ “Configuring Email Settings”, on page 314
■ “Defining Resource Report Sampling Period”, on page 315
■ “Reviewing Supported Host Versions”, on page 316
Licensing is described in “Seeing What Is Licensed”, on page 316. You also use the Site Settings to set up Zerto cloud connector
static routes and VMware vCloud Director from the Cloud Settings item. For details, refer to Zerto Cloud Manager
Editing Information About a Site

You provide information about the site during installation, to make it easier to identify the site in the in the user interface and to
identify the contact person at the site. After installation you can updated these settings.
Site Settings 309

To update information about the local site:
■ In vSphere and Hyper-V sites, the following fields are displayed:
■ In AWS sites, the following fields are displayed:
■ In Microsoft Azure sites, the following fields are displayed:
2. Define general information about the site.

■ (Mandatory) Site Name: The name used to identify the site.
■ (Mandatory) Site Location: Information such as the address of the site or a significant name with which to identify the
site location.
■ (AWS environments only) Bucket Name: The name of the bucket that was created when Zerto was installed. This
cannot be changed.
Site Settings 310

■ (Mandatory) Contact Name: The name of the person to contact if a need arises. Mandatory.
■ Contact Email: An email address to use if a need arises.
■ Contact Phone: A phone number to use if a need arises.
3. (On premise environments) To change the User Credentials to access the vCenter or Hyper-V SCVMM server from the
Zerto Virtual Manager:
■ User Name: The administrator name used to access the vCenter or SCVMM server. The name can be entered using
either of the following formats:
■ username
■ domain\username
■ Password: The password used to access the vCenter or SCVMM server for the given user name. To ensure security,
after saving the settings, the password field is cleared.
4. (Azure environments only) Azure Settings:
■ Application Name: The name used to access Azure.
■ Client ID: A unique identifier that is associated with the access name.
■ Subscription: The subscription associated with the user.
■ Resource Name: The name of the resource the user created.
■ Storage Account Name: The name of the storage account created or selected for this site during installation.
5. Click SAVE.
Defining Performance and Throttling

Performance and throttling settings include bandwidth settings and the maximum time a script can run before timing out.
You can specify bandwidth throttling, which is the maximum bandwidth that Zerto uses from this site to all peer recovery sites.
The default value is for Zerto to automatically assign the bandwidth used per VPG, based on using the maximum available and
then prioritizing the usage according to priority set for the VPGs sending data over the WAN.
Note: For minimum bandwidth requirements, see Zerto Scale and Benchmarking Guidelines.
For details about estimating the bandwidth, see “WAN Sizing Requirements with Zerto”, on page 34.
To configure bandwidth throttling:

■ Click Performance and Throttling.
■ Bandwidth Throttling:
Define this to control the amount of traffic going out of your site. When defined, this is the maximum bandwidth that Zerto
uses from this site to all peer recovery sites.
If you do not specify bandwidth throttling, the default is for Zerto to automatically assign the bandwidth used per VPG,
based on using the maximum available and then prioritizing the usage according to the priority set for the VPGs sending
data over the WAN.
Site Settings 311

■ By default, Limited is selected.
■ In the text box, set the MB/sec. The valid range is from 0 to 1300 MB/sec.
■ With 0 MB/sec, Zerto automatically assigns the bandwidth used per VPG, based on using the maximum available and
then prioritizing the usage according to the priority set for the VPGs sending data over the WAN.
■ Enter the MB/sec when the value required is 100 MB/sec or more.
■ Time-based Throttling:
Define this to throttle the bandwidth during specific times. For example, during the daily peak transaction period you can
change the bandwidth throttling, to override the general setting.
■ Limited: Select to define the limit, then define:

■ From: The hour and the minute to start the throttling, using a 24-hour clock.
■ To: The hour and the minute to end the throttling, using a 24-hour clock.
■ Click Show advanced settings...
IMPORTANT:
Advanced settings must only be changed in coordination with Zerto support.
■ Enable Bandwidth Regulation: Use this for troubleshooting - to enable regulating the bandwidth.
■ Enable IO throttling: If a host is handling too many IOs, then the IOs begin to get high latencies. To offset this the VRA
sends fewer concurrent IOs. The latency is measured by taking the average latency for all IOs over a set period of time. For
example, when the period is 5000 milliseconds and the bad IO latency is 40, the average latency is calculated every 5
seconds, and if the average latency exceeds 40, the VRA sends fewer concurrent IOs.
■ Bad IO Latency VM: The threshold above which the latency is considered high, and therefore bad.
■ Requested Duration (ms): The period of time used to measure the average latency.
Site Settings 312

Defining Site Policies

You can set default recovery and replication policies.
Configuring Disaster Recovery Policies
To configure disaster recovery policies:

1. Click Policies tab.
2. In the Disaster & Recovery area, choose the Failover/Move Commit Policy to use during a failover or move operation,
described in Initiating Failover Live and Moving Protected Virtual Machines to a Remote Site respectively. The following
options are available:
■ None: The failover or move operation must be manually committed or rolled back by the user.
■ Commit: After the time specified in the Default Timeout field the failover or move operation is committed, unless
manually committed or rolled back by the user before the time-out value is reached. During the specified time you can
check the recovered VPG virtual machines.
■ Rollback: After the time specified in the Default Timeout field the failover or move operation is rolled back, unless
manually committed or rolled back by the user before the time-out value is reached. During the specified time you can
check the recovered VPG virtual machines.
The value set here applies as the default for all failover or move operations from this point on but can be changed when
defining a failover or move operation.
3. Specify the Default Timeout after which a Commit or Rollback commit policy is performed. A value of zero indicates that
the system will automatically perform the commit policy, without waiting for any user interaction.
4. In the Pre/Post Recovery Operations Scripts area, specify the timeout in seconds for a script to run before or after a
failover, move, or test failover in the Default Script Execution Timeout field.
For information about scripts, see “Running Scripts Before or After Recovering a VPG”, on page 253.
5. In the Replication area:
■ If the same site is to be used as both the protected and recovery site, select Enable Replication to Self.
For more details, see “Enabling Replication to the Same Site”, on page 32.
■ Choose the Replication Pause Time, which is the time to pause when the journal might have problems, resulting in the
loss of all checkpoints. For example, when the datastore for the journal is almost full.
■ Replication pause time is the amount of time that the transfer of data from the protected site to the journal on the
recovery site is paused.
■ This time can then be used by the administrator to resolve the issue, for example by cloning the virtual machines
in the VPG, described in “Cloning Protected Virtual Machines to the Remote Site”, on page 355.
■ The value defined here is applied to existing and new VPGs.
Site Settings 313

■ The value defined here is applied to this site only.

■ To pause the protection in both directions, for example to cover reverse protection back to the original site after a
move operation, you must define Replication Pause Time on both sites.
■ To preserve the BIOS UUID of the protected VM after recovery operations, in the recovery ZVM Site Settings
window, select For incoming replication, copy the BIOS UUID of the protected VM to the recovered VM.
Notes:
■ Preserving of the BIOS UUID is not supported in Clone and Self-Replication recovery operations.
■ Preserving of the BIOS UUID is not supported in Public Cloud.
■ Cross replication is not supported.
6. To enter the host to maintenance mode during remediation, in the VMware Virtual Update Manager area, select Allow
Zerto to always enter hosts to maintenance mode during remediation. When this is selected, if the Virtual Update
Manager's Remediation task is detected, Zerto will automatically enter the host into maintenance mode. The host will exit
maintenance mode when the Virtual Update Manager's Remediation task is completed.
■ In some upgrade environments, Virtual Update Manager requires the host to enter maintenance mode. For further
details, see “Support for VMware Virtual Update Manager (VUM)”, on page 279.
Notes:
■ Recovery and journal volumes that reside on the host are not automatically migrated to another host in the cluster.
■ Automatic detection and powering off the VRA when running host maintenance mode is supported in vCenter version
6.5. For more information see Zerto Virtual Replication Interoperability Matrix.
Configuring Email Settings

You can configure Zerto alerts to be sent to an email address, so as to be better informed when an alert occurs and retention
processes are run.
Email Settings
To configure email settings:

1. Click Email Settings.
2. Specify the SMTP server Address. The Zerto Virtual Manager must be able to reach this address.
3. If the SMTP Server Port was changed from the default, 25, specify the port number.
4. Specify a valid email address for the email sender name in the Sender Account field.
5. Specify a valid email address where you want to send the email in the To field.
You can test that the email notification is set up correctly by clicking SEND TEST EMAIL. A test email is sent to the email
address specified in the To field.
Site Settings 314

Alerts and Reports

You can configure when to send alerts and retention reports.
To configure when to send emails about alerts and retention sets:

1. To send an email when an alert is issued, select Enable sending alerts.
2. To send an email with a retention report, select Enable retention reports.
3. Specify whether you want a retention report sent daily or weekly.
Daily: Send a daily retention report
Weekly: Send a weekly retention report. Select the day of the week from the drop-down list.
4. Specify day of the week and the time of day to send the retention report.
Defining Resource Report Sampling Period

Specify when you want to take resource samples to identify resource usage, either daily at a specific hour and minute or hourly
at a specific minute within each hour.
1. Click Reports.
2. Choose the Sampling Rate.

Information is saved for 90 days when the sampling period is hourly, and for one year when the sampling period is daily.
3. Choose the Sampling Time.
If you set the daily time to be 12:00, you will get a sample taken at noon every day. Collecting a sample hourly provides a
higher resolution picture of replication traffic than if collected daily.
These samples are used to generate resource reports as described in “Zerto Reports”, on page 393.
Site Settings 315

Reviewing Supported Host Versions

Zerto works with most VMware hypervisor hosts. For a list of supported hosts, click Compatibility.
Seeing What Is Licensed

The Zerto license includes information such as the number of virtual machines that can be protected and the license expiry
date. You can see these details by clicking in the top right of the header and selecting License.
The Zerto license includes the following details:

■ License: The license key itself.
Seeing What Is Licensed 316

■ License Type: What is licensed: whether the license restricts the number of virtual machines that can be protected or the
number of sockets used.
■ Expiry Date: The license expiry date.
■ Quantity: The maximum amount licensed, either virtual machines or sockets, based on the license type. If blank, the
quantity is unlimited.
■ Usage: The sites using the license and the number of protected virtual machines in each site.
A warning is generated when either the license expires or more than the licensed number of virtual machines are being
protected. Protection continues but the license should be updated. After getting a new license key you can update Zerto with
this key.
To update a license key:
1. In the Zerto User Interface, in the top right of the header click SETTING ( ) and select License.
2. Enter a valid license key and click APPLY or SAVE.
The license is updated on the local site and the paired remote sites.
Submitting a Support Ticket

You can open a ticket to Zerto support directly from Zerto.
Note: The clocks on the machines where Zerto is installed must be synchronized with UTC and with each other (the timezones
can be different). Zerto recommends synchronizing the clocks using NTP. If the clocks are not synchronized with UTC,
submitting a support ticket can fail.
To open a support ticket:

Support cases can be opened directly in the Zerto User Interface.
Creating a support case in the Zerto User Interface simplifies the submission process since much of the information that is
required when entering a case using the Zerto Support Portal, such as the version and build numbers, is automatically added to
the case when it is submitted via the Zerto User Interface.
In addition, when the case is submitted, a snapshot of the current environment is also attached to the case. The snapshot
information includes the lists of alerts, events, tasks, VPGs, and virtual machines that are protected.
This information is used to help Zerto resolve the case quickly and, whenever possible, without the need to request more
information from you.
Note: The clocks on the machines where Zerto is installed must be synchronized with UTC and with each other (the timezones
can be different). Zerto recommends synchronizing the clocks using NTP. If the clocks are not synchronized with UTC,
submitting a support case can fail.
Submitting a Support Ticket 317

To open a support case:
1. In the Zerto User Interface, click in the top right of the header and select Open a Case.
The Open Support Case window for the site opens.
2. Specify the case details:

■ Subject: The subject of the support case.
■ Type: The type of case being opened. Available options are:
■ Problem
■ Question
■ Description: A description of the problem or question in addition to the information supplied in the subject.
■ Allow remote log collection: How many logs is Zerto allowed to collect. Available options are:
■ Only for this case
■ For the next 30 days
■ Never
■ SSP Email Address: A valid email address registered with Zerto, with permission to open cases.
3. Click SUBMIT.
The case is processed and its progress is displayed. If the email address is not valid, the case is rejected. Once the case
submission starts, it cannot be canceled.
Submitting a Feature Request

From the Zerto User Interface, you can access the Feature Requests page in myZerto in order to submit a feature request.
To submit a feature request:
1. In the Zerto User Interface, on the top right of the header, click .
2. Click Submit Feature Request; the Feature Requests page in myZerto opens.
About Zerto
Submitting a Feature Request 318

In the About window, you can do the following:

■ View the version of Zerto being run.
■ Enable or disable the Zerto CALLHOME feature. The Zerto CALLHOME feature enables support notification and analytics
for the following purposes:
■ To improve Zerto.
■ To send notifications to the user when a new Zerto version is available, or when new hypervisor versions are
supported by Zerto.
■ Enable or disable Zerto Virtual Manager to send data to the SaaS platform for monitoring purposes, using the Zerto Mobile
App. This action is done by licensed Zerto Virtual Manager users.
When clicking About, the following options appear:
To perform these actions, do the following:

1. In the Zerto User Interface, in the top right of the header, click , and then click About.
The version and build of Zerto installed in the site are displayed.
2. The Zerto CALLHOME feature is selected by default; Enable Support notification and product improvement feedback.
Note: This option is grayed out for Microsoft Azure and AWS.
If the user deselects Enable Support notification and analytics, a warning appears notifying the user that deselecting this
option will stop Zerto from sending notifications when new Zerto updates are available, or when new hosts are supported.
3. If you want Zerto to send information to our Online Services and Zerto Mobile App, and enable remote upgrade, select
Enable Zerto SaaS features. Include Zerto Analytics, Zerto Mobile App and Remote upgrade. This is selected by default.
This allows licensed Zerto Virtual Manager users to enable or disable data being sent from the Zerto Virtual Manager to
the SaaS platform, thereby enabling site monitoring using the Zerto Mobile App.
■ If the user deselects Enable Online Services and Zerto Mobile, a warning appears notifying the user that deselecting
this option will stop Zerto from sending information to Online Services and to the Zerto Mobile Application, rendering
these services inoperable for the entire installation.
About Zerto 319

CHAPTER 14: OVERVIEW OF
DISASTER RECOVERY OPERATIONS
Zerto provides a number of operations to recover virtual machines at the remote site. This chapter describes these operations.
■ “The Failover Test Operation”, on page 320
■ “The Move Operation”, below
■ “The Failover Operation”, on page 321
■ “The Restore File Operation”, on page 322
■ “The Clone Operation”, on page 322
In addition, when Long Term Retention (extended recovery) is defined, a VPG can be restored as described in “Restoring VMs
or VPGs from a Repository”, on page 387.
The Failover Test Operation

Use the Failover Test operation to test that during recovery the virtual machines are correctly replicated at the recovery site.
The Failover Test operation creates test virtual machines in a sandbox, using the test network specified in the VPG definition as
opposed to a production network, to a specified point-in-time, using the virtual disks managed by the VRA. All testing is written
to scratch volumes. The longer the test period the more scratch volumes are used, until the maximum size is reached, at which
point no more testing can be done. The maximum size of all the scratch volumes is determined by the journal size hard limit
and cannot be changed. The scratch volumes reside on the storage defined for the journal. Using scratch volumes makes
cleaning up the test failover more efficient. For details, see “Testing Recovery”, on page 324.
During the test, any changes to the protected virtual machines at the protected site are sent to the recovery site and new
checkpoints continue to be generated, since replication of the protected machines continues throughout the test. You can also
add your own checkpoints during the test period.
The following diagram shows the positioning of the virtual machines before and during a Failover test operation.
Overview of Disaster Recovery Operations 320
Overview of Disaster Recovery Operations
The Move Operation

Use the Move operation to transfer protected virtual machines from the protected site to the recovery site in a planned
migration.
When you perform a planned migration of the virtual machines to the recovery site, Zerto assumes that both sites are healthy
and that you planned to relocate the virtual machines in an orderly fashion. For details, see “Migrating a VPG to a Recovery
The following diagram shows the positioning of the virtual machines before and after the completion of a Move operation.
Note: The Move operation without reverse protection does not remove the VPG definition but leaves it in a Needs Configuration
state.
The Failover Operation

Following a disaster, use the Failover operation to recover protected virtual machines to the recovery site. A failover assumes
that connectivity between the sites might be down, and thus the protected virtual machines and disks are not removed, as they
are in a planned Move operation.
When you set up a failover you always specify a checkpoint to which you want to recover the virtual machines. When you
select a checkpoint – either the last automatically generated checkpoint, an earlier checkpoint, or a tagged checkpoint – Zerto
makes sure that virtual machines at the remote site are recovered to this specified point-in-time. For details, see “Managing
Failover”, on page 345.
Note: To identify the checkpoint to use, you can perform a number of test failovers, each to a different checkpoint.
Failback after the Original Site is Operational

After completing a failover, when the original site is back up and running you can move the recovered virtual machines back
again using the Move operation. The VPG that is now protecting the virtual machines on the recovery site has to be configured
and then a Delta Sync is performed with the disks in the original protected site. Once the VPG is in a protecting state the virtual
machines can be moved back to the original site. For details, see “Moving Protected Virtual Machines to a Remote Site”, on
page 337.
The Move Operation 321

The following diagram shows the positioning of the virtual machines before and after the completion of a Failover operation.
Note: The Failover operation without reverse protection does not remove the VPG definition but leaves it in a Needs
Configuration state.
The Restore File Operation

Use the Restore File operation to recover individual files and folders from the recovery site.
running Windows operating systems. You can recover the files and folders from a specific point-in-time. For details, see
“Recovering Files and Folders”, on page 359.
The Clone Operation

Use the Clone operation to create a copy of the VPG virtual machines on the recovery site in the production network. The virtual
machines on the protected site remain protected and live.
Note: When the recovery site is vCD, the clone is created in vCenter Server and the virtual machines have to be manually
imported into vCD.
You might want to create a clone if you need to have a copy of the virtual machines saved to a specific point-in-time, for
example, when the VPG enters a Replication Paused state, or when testing the VPG in a live DR test. For details, see “Cloning a
VPG to the Recovery Site”, on page 355.
The cloned machines are named the after the protected virtual machine name along with the timestamp of the checkpoint used
for the clone. The cloned virtual machines are not powered on.
The Restore File Operation 322

The following diagram shows the positioning of the virtual machines before and after the completion of a Clone operation.
The Clone Operation 323

CHAPTER 15: TESTING RECOVERY
In order to verify that the disaster recovery that you have planned is the one that will be implemented, Zerto recommends
testing the recovery of the VPGs defined in the protected site to the recovery site. This chapter describes how to test VPG
recovery.
■ “The Test Failover Process”, below
■ “Starting and Stopping Failover Tests”, on page 325
■ “Viewing Test Results”, on page 329
■ “Live Disaster Recovery Testing”, on page 329
Note: You cannot perform a failover test while a retention process is running.
The Test Failover Process

Use the Failover Test operation to test that during recovery the virtual machines are correctly replicated at the recovery site.
The Failover Test operation creates test virtual machines in a sandbox, using the test network specified in the VPG definition,
as opposed to creating virtual machines in a production network, to a specified point-in-time, using the virtual disks managed
by the VRA. All testing is written to scratch volumes. The longer the test period the more scratch volumes are used, until the
maximum size is reached, at which point no more testing can be done. The maximum size of all the scratch volumes is
determined by the journal size hard limit and cannot be changed. The scratch volumes reside on the storage defined for the
journal.
During the test, any changes to the protected virtual machines at the protected site are sent to the recovery site and new
checkpoints continue to be generated, since replication of the protected machines continues throughout the test. You can also
add your own checkpoints during the test period. You can initiate a failover during a test, as described in “Initiating Failover Live
During a Test”, on page 354.
The Failover Test operation has the following basic steps:
1. Starting the test.
a) The test virtual machines are created at the remote site using the network specified for testing in the VPG settings and
configured to the checkpoint specified for the recovery.
b) The virtual machines are powered on, making them available to the user. If applicable, the boot order defined in the
VPG settings is used to power on the machines.
2. Testing. The virtual machines in the VPG are created as test machines in a sandbox and powered on for testing using the
test network specified in the VPG definition and using the virtual disks managed by the VRA. All testing is written to
scratch volumes. The longer the test period the more scratch volumes are used, until the maximum size is reached, at
which point no more testing can be done. The maximum size of all the scratch volumes is determined by the journal size
hard limit and cannot be changed. The scratch volumes reside on the storage defined for the journal. Using scratch
volumes makes cleaning up the test failover more efficient.
Note: You must not delete, clone, migrate to another host or change the disk properties of any of the test virtual machines.
3. Stopping the test.
a) The test virtual machines are powered off and removed from the inventory.
b) The following tag is added to the checkpoint specified for the test: Tested at startDateAndTimeOfTest
The tagged checkpoint can be used to identify the point-in-time to restore the virtual machines in the VPG during a
failover.
Testing that recovery is accomplished successfully should be done periodically so that you can verify that a failover will work.
Zerto also recommends testing all the VPGs being recovered to the same cluster together. For example, in a cluster, if the HA
configuration in a cluster includes admission control to prevent virtual machines being started if they violate availability
Testing Recovery 324
Testing Recovery
constraints, testing the failover of every VPG configured for recovery to this cluster, at the same time, will show whether the
constraints are violated or not.
When configuring a VPG, specify the period between tests for that VPG in the Test Reminder field in the REPLICATION step of
the Create VPG wizard.
See also:
■ “Starting and Stopping Failover Tests”, on page 325
■ “Viewing Test Results”, on page 329
■ “Live Disaster Recovery Testing”, on page 329
Starting and Stopping Failover Tests

You can test specific VMs in a VPG, a single VPG or multiple VPGs to make sure that if an actual failover is needed, the failover
will perform as expected.
By default, test virtual machines are started with the same IPs as the protected machines in the protected site. This can create
clashes so Zerto recommends ensuring that different IPs are assigned to the virtual machines when they start, by configuring
virtual machine NIC properties in the VPG. For details, refer to “Protecting Virtual Machines from a vCenter Server”, on
page 45. If you have defined the new virtual machines so that they are assigned different IPs, the re-IP cannot be performed
until the new machine is started. Zerto changes the machine IPs and then reboots these machines with their new IPs.
Note: You can initiate the failover test from either the protected site or recovery site. You cannot select specific VMs in a VPG
for failover test if the protected site is down.
To test failover:
1. In the Zerto User Interface click .

The Failover Test wizard is displayed.
2. Select the VPGs to test. By default, all VPGs are listed.

a) To select specific VMs in a VPG, click the icon next to each VPG to get a list of VMs. The Select VMs to Failover dialog
is displayed. By default, all VMs are selected.
Starting and Stopping Failover Tests 325

Testing Recovery
b) Select the VMs to test.

Note: Selecting specific VMs in a VPG to failover is not supported when replicating from a vCD site.
At the bottom, the selection details show the amount of data and the total number of virtual machines selected.
The Direction arrow shows the direction of the process: from the protected site to the peer, recovery, site.
3. Click NEXT.
The PARAMETERS step is displayed.
You can select the checkpoint to use for the recovery and see if a boot order and scripts are defined for the VPG.
4. By default, the last checkpoint added to the journal is displayed in the Checkpoint column
■ To use this checkpoint, proceed to the next step.
■ To change the checkpoint, click the link that appears as the checkpoint.
A window appears, displaying a list of the VPGs’ checkpoints.

Latest: Recovery is to the latest checkpoint. This ensures that the data is crash-consistent for the recovery.
When selecting the latest checkpoint, the checkpoint used is the latest at this point.
If a checkpoint is added between this point and starting the failover, this later checkpoint is not used.
Latest Tagged Checkpoint: The recovery operation is to the latest checkpoint added in one of the following situations:
■ By a user.
■ When a failover test was previously performed on the VPG that includes the virtual machine.
■ When the virtual machine was added to an existing VPG after the added virtual machine was synchronized.

Testing Recovery
To use a checkpoint which is not the latest checkpoint, or the latest tagged checkpoint, choose Select from all available
checkpoints. By default, this option displays all checkpoints in the system. You can choose to display only automatic, or
tagged checkpoints, or any combination of these types.
5. Click OK. If the selected VMs were not protected when the selected checkpoint was taken, a warning will appear informing
the user that these VMs cannot be recovered. If all selected VMs cannot be recovered, an error will appear.
6. Click NEXT.
The FAILOVER TEST step is displayed. The topology shows the number of VPGs and virtual machines being tested to
failover to each recovery site.
7. To start the test, click START FAILOVER TEST.

The test starts for the selected VPGs. The test begins with an initialization period during which the virtual machines are created
in the recovery site.
What Happens After Starting a Test?

During the initiation phase, the virtual machines in the virtual protection group are created at the recovery site with the suffix
testing recovery.
Note: The following conversions are done to a protected virtual machine when it is recovered in Hyper-V:
■ A machine with a 64bit operating system is recovered in Hyper-V as either a Generation 1 or Generation 2 virtual
machine, dependent on the operating system support in hyper-V.
■ When VMware Tools is installed on the protected virtual machine running Windows Server 2012, Integration Services
is installed on the recovered virtual machine automatically.
All testing is written to scratch volumes. The longer the test period the more scratch volumes are used, until the maximum size
is reached, at which point no more testing can be done. The maximum size of all the scratch volumes is determined by the
journal size hard limit and cannot be changed. The scratch volumes reside on the storage defined for the journal. Using these
test scratch volumes makes cleaning up the test failover more efficient.
While a test is running:
■ The virtual machines in the VPGs continue to be protected throughout the test.
■ You can add checkpoints to the VPGs, and if necessary fail over the VPGs, as described in “Initiating Failover Live During a
Test”, on page 354.
■ You cannot take a snapshot of a test machine, since the virtual machine volumes are still managed by the VRA and not by
the virtual machine. Using a snapshot of a test machine will create a corrupted virtual machine.

Testing Recovery
■ You cannot move VPGs being tested.

■ You cannot delete, clone, migrate to another host or change the disk properties of any of the test virtual machines.
■ You cannot initiate a failover while a test is being initialized or closed.
Monitor the status of a failover test by doing the following:
■ In the Zerto User Interface, click the VPGs tab. The Operation field in the GENERAL view displays Testing Failover when
a failover test is being performed.
■ In the Zerto User Interface, click the VPGs tab, and then click the name of a VPG you are testing. A dynamic tab is created
displaying the specific VPG details including the status of the failover test.
To stop a failover test:

1. Click the Stop icon, in either the Dashboard or the dynamic tab, to stop the test in the specific VPG tab.
You can also stop the test via the TASKS popup dialog in the status bar, or by selecting MONITORING > TASKS.

Testing Recovery
The Stop Test dialog is displayed.
2. In the Result field specify whether the test succeeded or failed.

3. Optionally, in the Notes field, add a description of the test. For example, specify where external files that describe the tests
performed are saved. Notes are limited to 255 characters.
4. Click STOP.
After stopping a test, the following occurs:
■ Virtual machines in the recovery site are powered off and removed.
■ The resource group created for the operation is deleted.
■ The checkpoint that was used for the test has the following tag added to identify the test:
Tested at startDateAndTimeOfTest.
This checkpoint can be used to identify the point-in-time to use to restore the virtual machines in the VPG during a failover.
\
Viewing Test Results

After stopping a test, you can see the test results as part of Zerto reports. Refer to “Recovery Reports”, on page 395.
Live Disaster Recovery Testing

This section describes how to use the basic Zerto recovery operations to perform live disaster recovery tests, in different
situations.
When performing a live DR test you need to consider the following:
■ The purpose of the live DR test:
■ Do you only want to verify that the VMs can recover properly?
- Or -
■ Do you want to conduct a full DR test that will include running user traffic against the recovered VMs?
■ The length of time you want to test the recovery, a few hours or several days.
■ Whether the changes to the recovered machine need to be retained after the test or can they be discarded?
■ Whether you are willing to accept temporary downtime of the application.
■ Whether you want to simulate an actual disaster at the protected site, for example by simulating a network outage or
bringing down the protected site.
Viewing Test Results 329

Testing Recovery
The following flowchart shows the testing decision flow:
During any live test, Zerto recommends that you only maintain one working version of the same virtual machine.
As such, the first step in any test, except for a Failover Test or Clone, is to make sure that the protected virtual machines are
shut down before starting to test recovered machines.
During a Zerto Move operation the first step Zerto performs is to shut down the protected machines, to ensure data integrity.
However, a Zerto Failover operation assumes that the protected virtual machines are no longer accessible (the total site
disaster scenario) and does not attempt to shut them down at the beginning of the operation.
In a live test using a Failover operation you have to manually shut down the virtual machines to be tested at the beginning of
the test in order to prevent potential split-brain situations where two instances of the same applications are live at the same
time.
If you want to perform a live DR test that includes a simulated disaster you can simulate the disaster, for example, by
disconnecting the network between the two sites. In this type of test, once the disaster is simulated a Move operation cannot
be used, since it requires both sites to be healthy, while a Failover operation can be used.
Basic Verification – User Traffic Is Not Run against the Recovered VMs
Basic testing that the virtual machines can recover is done using either a Failover Test operation or an uncommitted Move
operation, using the Rollback setting.
Using a Failover Test Operation

You use a Failover Test operation if recovering the virtual machines in a sandbox, using the test network specified in the VPG
definition for network isolation, is sufficient for a test. The Failover Test operation is described in “The Failover Test Operation”,
on page 320 and in “Starting and Stopping Failover Tests”, on page 325.
Live Disaster Recovery Testing 330

Testing Recovery
■ “Using a Failover Test Operation: Recommended Procedure for a Live DR Test”, on page 331
■ “Using a Failover Test Operation: Failover Test Considerations”, on page 331
Using a Failover Test Operation: Recommended Procedure for a Live DR Test

1. Change the VPG Failover Test Network to the production network used at the recovery site.
2. Manually shut down the virtual machines in the VPG.
3. Insert a new checkpoint. This avoids potential data loss since the virtual machines are shut down and the new checkpoint
is added after all I/Os have been written to disk.
4. Optionally simulate a disaster, for example by disconnecting the two sites.
5. Perform a test failover on the VPG, choosing the checkpoint you added in step 3.
6. Verify that the test machines are recovered as expected.
7. Run user traffic against the virtual machines.
8. Stop the failover test.
9. Reconnect the sites.
Using a Failover Test Operation: Failover Test Considerations

■ You do not have to shut down the protected virtual machines, and changes from the test phase are not kept or applied to
the protected applications.
■ You can recover to a specific point-in-time.
■ You can use an isolated network to enable testing in a sandbox environment and not a live DR environment. This is the
recommended practice.
■ During the testing period, every change is recorded in a scratch volume.
■ Therefore, since both the scratch volume and virtual machines tested are on the same site, performance can be
impacted by the increased IOs during the failover test.
■ In addition, the longer the test period the more scratch volumes are used, until the maximum size is reached, at
which point no more testing can be done.
■ The maximum size of all the scratch volumes is determined by the journal size hard limit and cannot be changed.
■ The scratch volumes reside on the storage defined for the journal.
■ At the end of the test, if you powered off the virtual machines in the protected site, you can power them back on and
continue to work without the need to save or replicate back any data changed during the test.
■ You can also use a Failover Test operation if you want to simulate an actual disaster for around an hour or less and do not
want to save any changes on the recovery site.
Using an Uncommitted Move Operation

Use a Move operation with the commit/rollback policy set to rollback after the test period, if you need to test the recovery of
virtual machines in the recovery site production environment. The Move operation is described in “Moving Protected Virtual
Machines to a Remote Site”, on page 337.
Note: Committing the Move operation requires failing the migrated virtual machines back to the production site after a Delta
Sync has been performed on the committed machines in the recovery site.
Recommended Procedure for a Live DR Test

1. In the Move wizard, in the EXECUTION PARAMETERS tab, for commit policy, select None.
2. Either power off the relevant virtual machines or check the Force Shutdown checkbox, in the EXECUTION PARAMETERS
tab, to make sure that the virtual machines are shut down, if they cannot be powered off using VMware Tools.
3. After testing the machines in the recovery site, roll back the Move operation, which will return the virtual machines to their
pre-test state.
■ Changes from the pre-commit phase are not kept or applied to the protected applications.
■ The virtual machines are allocated disks and connected to the network for a full test of the environment.

Testing Recovery
■ The protected machines are turned off until the end of the test, ensuring that there are no conflicts between the protected
site and recovery site.
■ During the testing period, every change is recorded in a scratch volume to enable rolling back.
■ Therefore, since both the scratch volume and virtual machines being moved are on the same site, performance can be
impacted by the increased IOs during the testing period.
■ In addition, the longer the test period the more scratch volumes are used, until the maximum size is reached, at
which point no more testing can be done.
■ You can only recover to the last checkpoint written to the journal, at the start of the Move operation.
■
Run User Traffic Against the Recovered VMs

Testing actual user traffic against recovered virtual machines can be done using a Clone, Move, or Failover operation, as
follows:
Move operation: When you can shut down the protected virtual machines but you do not want or need to simulate an actual
disaster.
Failover operation: When you want to simulate an actual disaster.
Clone operation: When the protected application has to run throughout the test.
Using a Move Operation

Use a Move operation when you can shut down the protected virtual machines but you do not want to simulate an actual
disaster. After the virtual machines have been recovered in the target site, they are used as the protected machines for as long
as the test lasts. The Move operation is described in “The Move Operation”, on page 321 and in “Moving Protected Virtual
Machines to a Remote Site”, on page 337.
■ “Using a Move Operation - Recommended Procedure for a Live DR Test”, on page 332
■ “Using a Move Operation - Move Considerations”, on page 332
Using a Move Operation - Recommended Procedure for a Live DR Test

1. To enable using the Move functionality for a DR test, in the Move wizard, in the EXECUTION PARAMETERS tab, for
commit policy, select None.
2. Move the VPG back to the original protected site. A Delta Sync is performed to copy the new transactions performed on the
virtual machines in the recovery site back to the original protected site.
Using a Move Operation - Move Considerations

■ You can test the moved machines before they are committed.
■ You can test for as long as you want.
■ The virtual machines are allocated disks and connected to the network for a full test of the environment.
■ The originally protected disks are maintained for a faster failback when reverse replication is specified.
■ The protected machines are turned off until the move is committed and then they are removed from the protected site.
This ensures that there are no conflicts between the protected site and recovery site.
■ You must test to the last checkpoint, taken after the protected virtual machines are shut down.
■ An actual disaster is not simulated.
■ During the testing period, if reverse replication is not specified, there is no protection for the recovered machines.

Testing Recovery
Using a Failover Operation

Use a Failover operation when you can shut down the protected virtual machines and you want to simulate an actual disaster.
After the virtual machines have been recovered in the target site they are used as the protected machines for as long as the test
lasts.
Using a Failover operation to test DR requires specific steps to ensure that the virtual machines are gracefully migrated to the
target site, similar to a Move operation and that, like a Move operation, they can be verified prior to committing the failover.
The Failover operation is described in “The Failover Operation”, on page 321.
■ “Using a Failover Operation - Recommended Procedure for a Live DR Test”, on page 333
■ “Using a Failover Operation - Failover Considerations”, on page 333
Using a Failover Operation - Recommended Procedure for a Live DR Test

1. Manually shut down the virtual machines.
2. Insert a new checkpoint. This avoids potential data loss since the virtual machines are shut down and the new checkpoint
is added after all I/Os have been written to disk.
3. Optionally simulate a disaster, for example by disconnecting the two sites.
4. Perform a live failover on the VPG, specifying the commit policy and choosing the checkpoint you added in step 2. Choose
a commit policy that will give you the necessary time to check that the failed over virtual machines have been successfully
recovered to the correct point-in-time and if they are not, you are able to roll back the failover.
5. Continue to use the recovered virtual machines.
6. The VPG is in a Needs configuration state, because there is no access to the protected site.
After testing the recovered virtual machine you can finalize the live DR test and fail the virtual machines back to the original
protected site:
1. Reconnect the sites.
2. Enable protection for the virtual machines by editing the VPG and clicking DONE.
3. Zerto uses the original disks to preseed the volumes and expedite the synchronization between the two sites, using a Delta
Sync.
■ The time it will take for the Delta Sync to complete is based on total size of the disks and storage performance at both
sites.
■ After the synchronization completes, the VPG enters the Meeting SLA state.
4. Perform a Move operation to fail back the virtual machines to the original protected site.
5. In the Move wizard, in the EXECUTION PARAMETERS tab, for commit policy, set the commit policy to enable basic testing
before the move is committed.
The virtual machines are recovered at the original protected site, and the VPG enters a Delta Sync phase before it enters a
Meeting SLA state.
Using a Failover Operation - Failover Considerations

■ The originally protected disks are maintained for a faster failback.
■ Using the Failover operation for testing is non-intuitive.
■ Testing by using the Failover operation requires performing manual procedures, such as shutting down the protected
virtual machines.
■ During the testing period, there is no protection for the recovered machines.

Testing Recovery
Using a Clone Operation

Use the Clone operation when the protected application must continue to run throughout the test. Create a clone of the virtual
machines in a VPG on the recovery site to a specific point-in-time. The clone is a copy of the protected virtual machines on the
recovery site, while the virtual machines on the protected site remain protected and live. The Clone operation is described in
“The Clone Operation”, on page 322 and in “Cloning a VPG to the Recovery Site”, on page 355.
The cloned virtual machines are independent of Zerto. At the end of the test you can remove these machines or leave them.
■ You use the Clone operation when the source application has to continue throughout the test.
■ You can create a clone of the virtual machines in a VPG on the peer site to a specific point-in-time.
■ The clone is a copy of the protected virtual machines on the recovery site, while the virtual machines on the protected site
remain protected and live.
■ The Clone operation is described above, and in the Zerto Virtual Manager Administration Guide for the VMware vSphere
Environment.
■ The cloned virtual machines are independent of Zerto. At the end of the test you can remove these machines or leave
them.
Using a Clone Operation - Clone Considerations

■ You can clone to a specific point-in-time.
■ There is no protection for the cloned machines.
■ After use of the clone ends, no changes made to the cloned virtual machines are applied to the protected virtual machines.
■ The original virtual machines on the source site are live and online throughout the test.

CHAPTER 16: MIGRATING A VPG TO
A RECOVERY SITE
This chapter describes a planned migration of a VPG to a remote site. The following topics are described in this chapter:
■ “The Move Process”, below
■ “Moving Protected Virtual Machines to a Remote Site”, on page 337
■ “Reverse Protection For a Moved VPG”, on page 341
Note: You cannot perform a move while a retention process is running.
The Move Process

Use the Move operation to move groups of protected virtual machines from a protected site to a recovery site in a planned
migration.
When you perform a planned migration of virtual machines to a recovery site, Zerto assumes that both sites are healthy and
that you plan to relocate the virtual machines in an orderly fashion without loss of data.
Note: To recover virtual machines on the recovery site during disaster recovery, see “Managing Failover”, on page 345.
The MOVE operation has the following basic steps:
■ Shutting down the protected virtual machines gracefully. This ensures data integrity.
If the machines cannot be gracefully shut down, for example, when VMware Tools or Microsoft Integration Services is not
available, you must manually shut down the machines before starting the Move operation or forcibly power off the virtual
machines as part of the Move operation. If the machines cannot be gracefully shut down automatically and are not shut
down manually and the Move operation does not forcibly power them off, the Move operation stops and Zerto rolls back
the virtual machines to their original status.
■ Inserting a clean checkpoint. This avoids potential data loss since the virtual machines are not on and the new checkpoint
is created after all I/Os have been written to disk.
■ Transferring all the latest changes that are still in the queue to the recovery site, including the new checkpoint.
■ Creating the virtual machines in the recovery site and attaching each virtual machine to its relevant virtual disks, based on
the last checkpoint.
Also, as long as the virtual machines are created, the operation is considered successful, even if the virtual machines are
not created with their complete definition, for example re-IP cannot be performed.
■ Preventing automatically moving virtual machines to other hosts: Setting HA to prevent DRS. This prevents automatic
vMotioning of the affected virtual machines during the Move operation.
■ Powering on the virtual machines making them available to the user. If applicable, the boot order defined in the VPG
settings is used to power on the machines.
Note: If the virtual machines do not power on, the process continues and the virtual machines must be powered on
manually. The virtual machines cannot be powered on automatically in a number of situations, such as when there are not
enough resources in the resource pool, or the required MAC address is part of a reserved range, or there is a MAC address
conflict or IP conflict, for example, if a clone was previously created with the MAC or IP address.
■ Committing the Move operation. The default is to automatically commit the Move operation without testing. However,
you can also run basic tests on the machines to ensure their validity to the clean checkpoint. Depending on the commit/
rollback policy that you specified for the operation, the operation is committed, finalizing the move, or rolled back, aborting
the operation.
■ If Keep Source VMs is not selected, the protected virtual machines are removed from the inventory.
Note: If Keep Source VMs is not selected, and the virtual machines or vCD vApp are already protected in other VPGs,
continuing with the operation will cause the virtual machines or vCD vApp to be deleted from other VPGs that are
protecting them and to the journals of these VPGs to be reset. In the event of vCD vApp or if no other virtual machines are
left to protect, the entire VPG will be removed.
Migrating a VPG to a Recovery Site 335
Migrating a VPG to a Recovery Site
If reverse protection is not possible, the original protected site virtual machines or vCD vApp are not powered off and
removed.
Protecting virtual machines or vCD vApps in several VPGs is enabled only if both the protected site and the recovery site,
as well as the VRAs installed on these sites, are of version 5.0 and higher.
■ Promoting the data from the journal to the machines. The machines can be used during the promotion and Zerto ensures
that the user sees the latest image, even if this image, in part, includes data from the journal.
Note: Virtual machines cannot be moved to another host during promotion. If the host is rebooted during promotion, make
sure that the VRA on the host is running and communicating with the Zerto Virtual Manager before starting up the
■ If reverse protection is specified, the virtual disks used by the virtual machines in the protected site are used for the reverse
protection. A Delta Sync is performed to make sure that the two copies, the new recovery site disks and the original
protected site disks, are consistent. A Delta Sync is required since the recovered machines can be updated while data is
being promoted.
If reverse protection is not specified, the VPG definition is saved but the state is Needs configuration and the virtual disks
used by the virtual machines in the protected site are deleted. Thus, in the future if reverse protection is required, the
original virtual disks are not available and an initial synchronization is required.
Note: If reverse protection is specified, the Keep Source VMs option is grayed out because the virtual disks of the VMs
are used for replication and cannot have VMs attached. If Keep Source VMs is selected before reverse protection is
specified, the Keep Source VMs selection is canceled.
A move differs from a failover in that with a move you cannot select a checkpoint to restore the virtual machine to. Also, to
ensure data integrity, the protected virtual machines are powered off completely and a final checkpoint created so that there is
no data loss before the move is implemented.
You can initiate the Move operation from either the protected site or recovery site.
The Move Process 336

Moving Protected Virtual Machines to a Remote Site

You can move the virtual machines in a virtual protection group (VPG) to a remote site, where the virtual machines are
replicated. As part of the process you can also set up reverse protection, where you create a VPG on the remote site for the
virtual machines being moved, pointing back to the original site. This is commonly used, for example, when the protected site
has planned downtime.
To initiate a move:
1. In the Zerto User Interface select ACTIONS > MOVE VPG.
The Move wizard is displayed.
2. Select the VPGs to move.

The Direction arrow shows the direction of the process: from the protected site to the peer, recovery, site.
3. Click NEXT.
The EXECUTION PARAMETERS step is displayed.
You can change the following values to use for the recovery:
■ Commit Policy
■ Force Shutdown policy
Reverse Protection settings
■ Keep Source VMs settings
You can also see if a Boot Order and Scripts are defined for the VPG.
4. To change the commit policy, click on the field or select the VPG and click EDIT SELECTED.
Moving Protected Virtual Machines to a Remote Site 337

a) To commit the recovery operation automatically, with no testing, select Auto-Commit and 0 minutes.
b) Select None if you do not want an automatic commit or rollback. You must manually commit or roll back.
If some VMs in a VPG fail to recover properly and Auto-Commit was selected for the operation, the commit policy will
change to None. You must manually commit or rollback.
c) To test before committing or rolling back, specify an amount of time to test the recovered machines, in minutes.
This is the amount of time that the commit or rollback operation is delayed, before the automatic commit or rollback
action is performed.
During this time period, check that the new virtual machines are OK and then commit the operation or roll it back.
The maximum amount of time you can delay the commit or rollback operation is 1440 minutes, which is 24 hours.
Testing that involves I/O is done on scratch volumes.
■ The more I/Os generated, the more scratch volumes are used, until the maximum size is reached, at which point no
more testing can be done.
5. To force a shutdown of the virtual machines, click the Force Shutdown checkbox. If the virtual machines cannot be
gracefully shut down, for example if VMware Tools is not installed on one of the virtual machines in the VPG, the Move
operation fails unless you specify that you want to force the shutdown. If a utility is installed on the protected virtual
machines, the procedure waits five minutes for the virtual machines to be gracefully shut down before forcibly powering
them off.
6. To specify reverse protection, where the virtual machines in the VPG are moved to the recovery site and then protected in
the recovery site, back to the original site, double-click the Reverse Protection field and click the REVERSE link.
The Edit Reverse VPG wizard is displayed.
■ You can edit the reverse protection configuration. The parameters are the same as described when you create a VPG,
described in “Protecting Virtual Machines from a vCenter Server”, on page 45, with the following differences:
■ You cannot add or remove virtual machines to the reverse protection VPG.
■ By default, reverse protection is to the original protected disks. You can specify a different datastore to be used for
the reverse protection.
■ If VMware Tools are available, for each virtual machine in the VPG, the IP address of the originally protected
virtual machine is used. Thus, during failback the original IP address of the virtual machine on the site where the
machine was originally protected is reused. However, if the machine does not contain the utility, DHCP is used.
■ The host version must be 4.1 or higher for re-IP to be enabled.
7. To prevent the protected virtual machines or vCD vApp from being deleted in the protected site, click the Keep source
VMs checkbox.
IMPORTANT:
■ The virtual machines or vCD vApp will be removed from the other VPGs that are protecting them if the following
conditions apply:
■ The virtual machines or vCD vApp are already protected in other VPGs
■ Reverse protection is specified
■ Keep Source VMs is not checked
■ If your VPG has a vCD vApp, or if there are no other virtual machines left to protect, the entire VPG will be removed.
■ Protecting virtual machines or vCD vApps in several VPGs is enabled only if both the protected site and the recovery site,
8. Click NEXT.
■ A warning appears informing the user that the virtual machines or vCD vApp will be removed from the other VPGs
that are protecting them.

■ When reverse protection is specified for a VPG residing on a vCD site that is replicating to either a vSphere or Hyper-
V site, the boot order settings will not reserve the start delay vCD vApp settings for virtual machines with the same
order number.
The MOVE step is displayed. The topology shows the number of VPGs and virtual machines being moved to each peer site.
In the following example, 2 VPGs will be moved to Site6-Ent2-R2, and they contain 5 virtual machines; and 1 VPG will be
moved to Site5-Ent2-P2-R2 and it contains 2 virtual machines.
9. Click START MOVE to start the migration.

A warning message appears, presenting a summary of your Commit Policy.
10. Review the Commit Policy summary, and either click Change Settings, or click START MOVE to start the migration.
11. If a commit policy was set with a timeout greater than zero, as described in step 4, you can check the moved virtual
machines on the recovery site before they are removed from the protected site.
Note: If a virtual machine exists on the recovery site with the same name as a virtual machine being migrated, the machine
is moved and named in the peer site with a number added as a suffix to the name, starting with the number 1
The status icon changes to orange and an alert is issued, to warn you that the procedure is waiting for either a commit or
rollback.
All testing done during this period, before committing or rolling back the Move operation, is written to thin-provisioned
virtual disks, one per virtual machine in the VPG. These virtual disks are automatically defined when the machines are
created on the recovery site for testing. The longer the test period the more scratch volumes are used, until the maximum
size is reached, at which point no more testing can be done. The maximum size of all the scratch volumes is determined by
the journal size hard limit and cannot be changed. The scratch volumes reside on the storage defined for the journal. Using
these scratch volumes makes committing or rolling back the Move operation more efficient.
Note: You cannot take a snapshot of a virtual machine before the Move operation is committed and the data from the
journal promoted to the moved virtual machine disks, since the virtual machine volumes are still managed by the VRA and
not directly by the virtual machine. Taking a snapshot of a machine that is in the process of being moved will corrupt that
machine.
12. Check the virtual machines on the recovery site, then either:
■ Wait for the specified Commit Policy time to elapse, and the specified operation, either Commit or Rollback, is
performed automatically.
■ Or, in the specific VPG tab, click the Commit or Rollback icon ( ).

■ Click Commit to confirm the commit and, if necessary set, or reset, the reverse protection configuration. If the
protected site is still up and you can set up reverse protection, you can reconfigure reverse protection by checking
the Reverse Protection checkbox and then click the Reverse link. Configuring reverse protection here overwrites
any of settings defined when initially configuring the failover.
■ Click Rollback to roll back the operation, removing the virtual machines that were created on the recovery site and
rebooting the machines on the protected site. The Rollback dialog is displayed to confirm the rollback.
You can also commit or roll back the operation in the TASKS popup dialog in the status bar or under
MONITORING > TASKS.
After the virtual machines are up and running and committed in the recovery site, the powered off virtual machines in the
protected site are removed from the protected site. Finally, data is promoted from the journal to the moved virtual machines.
Notes:
■ If virtual machines or vCD vApp are already protected in several VPGs, and reverse protection is configured, the virtual
machines or vCD vApp are deleted from the protected site. This will result in the removal of these virtual machines from
other VPGs that are protecting them and to the journals of these VPGs to be reset. In the event of vCD vApp or if no other
virtual machines are left to protect, the entire VPG will be removed.
Protecting virtual machines in several VPGs is enabled only if both the protected site and the recovery site, as well as the
■ If Keep Source VMs is selected, the protected virtual machines are not removed from the protected site.
Protecting virtual machines or vCD vApps in several VPGs is enabled only if both the protected site and the recovery site, as
well as the VRAs installed on these sites, are of version 5.0 and higher.
During promotion of data, you cannot move a host on the moved virtual machines. If the host is rebooted during promotion,
make sure that the VRA on the host is running and communicating with the Zerto Virtual Manager before starting up the
Note: If the virtual machines do not power on, the process continues and the virtual machines must be manually powered on.
The virtual machines cannot be powered on automatically in a number of situations, such as when there are not enough
resources in the resource pool or the required MAC address is part of a reserved range or there is a MAC address conflict or IP
conflict, for example, if a clone was previously created with the MAC or IP address.
When a vCD vApp is moved to a vCenter Server recovery site, a vCenter Server vCD vApp is created in the recovery site. If
reverse protection was specified, the VPG state is Needs Configuration and the VPG must be recreated by protecting the
virtual machines in the vCD vApp as separate machines and not as part of the vCD vApp.

Reverse Protection For a Moved VPG

When moving the virtual machines in a VPG you specify whether you want reverse protection from the recovery site back to
the original protected site.
Reverse Protection Specified

When you specify reverse protection, the virtual machines are moved to the recovery site and then protected using the values
specified during the move. Data is promoted from the journal to the moved virtual machines and then synchronization with the
original site is performed so that the VPG is fully protected. The synchronization performed uses the original protected disks
and is either a Delta Sync or, if there is only one volume to synchronize, a Volume Delta Sync. A sync is required since the
recovered machines can be updated while data is being promoted.
Reverse Protection Not Specified

If you do not specify reverse protection, the protected disks are removed along with the protected virtual machines at the end
of the procedure. In this case, if you want to move the virtual machines back again to the original site, you will not be able to use
the original disks and an initial synchronization will have to be performed. The VPG definition is kept with the status Needs
Configuration and the reverse settings in the VPG definition are not set.
Clicking EDIT VPG displays the Edit VPG wizard with the settings filled in, using the original settings for the virtual machines in
the VPG from the original protected site, except for the volumes, since the last step of the Move operation is to delete the
virtual machines from the original protected site inventory, including the disks. To start replicating the virtual machines in the
VPG, specify the disks to use for replication and optionally, make any other changes to the original settings and click DONE. An
initial synchronization is performed.
Notes:
■ If Keep Source VMs is not selected, and virtual machines or vCD vApp are already protected in several VPGs, the virtual
machines or vCD vApp are deleted from the protected site. This will result in the removal of these virtual machines from
other VPGs that are protecting them and to the journals of these VPGs to be reset. In the event of vCD vApp or if no other
virtual machines are left to protect, the entire VPG will be removed.
Reverse Protection For a Moved VPG 341

■ You can edit the VPG definition from either of the sites, the site where the VPG virtual machines were initially protected or
the site they were moved to.
■ When reverse protection is specified for a VPG residing on a vCD site that is replicating to either a vSphere or Hyper-V
site, the boot order settings will not reserve the start delay vCD vApp settings for virtual machines with the same order
number.
Reverse Protection For a Moved VPG 342

CHAPTER 17: MIGRATING ZERTO
TO A NEW VIRTUAL MACHINE
This section describes how to migrate the Zerto to a new Virtual Machine.
When Zerto is installed, the installation includes the following:
■ Zerto Virtual Manager (ZVM): A Windows service, Zerto Virtual Manager service, that manages the replication at the
site level.
■ Virtual Replication Appliance (VRA): A virtual machine installed on each Hyper-V hosting virtual machines to be
protected or recovered, to manage the replication of data from protected virtual machines to the recovery site.
■ Virtual Backup Appliance (VBA): A Windows service that manages File Level Recovery operations within Zerto. These
repositories can be local or on a shared network.
■ DSS: Installed on the VRA machine, and runs in the same process as the VRA. IT is responsible for all the retention data
path operations.
■ Zerto User Interface: Recovery using Zerto is managed in a browser.
Before you Begin

From the Source VM, make a note of the following information which you will need later:
■ Make a note of the exact Zerto installation configuration settings.
■ Navigate to Control Panel > Network and Internet, and make a note of the IP address
■ If a DNS name was used instead of an IP address, make a note of the DNS name
IMPORTANT:
■ The Optional steps that are included in the procedure below are highly recommended.
■ Perform them before connecting the new ZVM to peer ZVM sites, in order to verify that the ZVM on the target VM is
working correctly, and with the correct configurations.
■ If the ZVM on the target VM is not working correctly with the correct configurations, VPGs could be automatically
deleted.
To migrate Zerto to a target VM:

1. Prepare the target VM for the Zerto. To do this, review the machine requirements to install Zerto, and make sure that the
target VM complies with these minimum requirements. For these details, see Zerto Installation Guide for your
environment, in the section Installing Zerto Virtual Replication.
2. On the source VM, verify which version of the Zerto Virtual Replication Installer file is currently installed, and then copy
and paste that same version to the target VM.
3. On the source VM, stop all Zerto related services:
■ Zerto Virtual Manager Service
■ Zerto Virtual Backup Appliance Service
■ Zerto Remote Log Collection Service
4. On the source VM, navigate to the Zerto installation folder and copy the entire folder, including all its contents. By default,
this folder is named Zerto Virtual Replication.
TIP: To save space, you can leave out, or delete old log files which are no longer relevant. Navigate to the path: \Zerto
Virtual Replication\logs\
5. On the target VM, create a temp folder, and into this folder paste the entire Zerto installation folder, including all its
contents, which you copied in 4.
6. On the source VM, first change the IP address to a different IP address, then disconnect the source VM network
connection.
Migrating Zerto to a New Virtual Machine 343
Migrating Zerto to a New Virtual Machine
7. On the target VM, run the ZVM Installer and complete the installation with the same settings and configurations as the
ZVM that was installed on the source VM.
■ If the ZVM on the source VM was configured to use VCD, and in addition the amqp service was installed, then on the
target VM, the same amqp services must be reinstalled. These are the following:
■ amqp_installer
■ Erlang
■ RabbitMQ
8. On the target VM, stop all Zerto related services:
9. (Optional) On the target VM, open the Windows Firewall and configure a new rule to block all outgoing TCP traffic on
ports 9080 and 9081.
10. On the target VM, navigate to the temp folder which you created in 5 and copy the entire Zerto installation folder, then
navigate to the Zerto installation folder which was created when you ran the ZVM installer, and paste and overwrite all
files.
11. On the target VM, navigate to Control Panel > Network and Internet, and set the target VM’s IP address the same IP
address as original IP address of the source VM.
■ If a DNS name was used instead of the IP address, set the target VM’s DNS name the same DNS name as the source
VM.
12. (Optional) If the Log Archiver functionality was configured and in use on the source VM, make sure to create a folder on
the target VM to which the logs are archived.
13. On the target VM, start all Zerto related services:
14. (Optional) On the target VM, perform the following optional validations:
a) Open an Internet browser, enter the URL https://localhost:9669, and log into the ZVM.
b) If you blocked all outgoing TCP traffic on ports 9080 and 9081 as described in 9, make sure all the VPGs are present.
Their state should be Error or Site disconnection, as there should be no connection to the peer ZVM sites.
c) Make sure that the VRA status is Installed.
d) Open the Windows Firewall and re-enable traffic for ports 9080 and 9081.
15. From anywhere in the network, log into the ZVM GUI and verify that the status of the VPGs and VRAs is OK.
■ If a DNS name was used instead of an IP address, it might take a while for the correct routing to occur. The sites will
remain with the status disconnected until the correct routing occurs.
16. If the status of all the VPGs and VRAs is OK, first power off and then delete the source VM as it is no longer in use.
344
CHAPTER 18: MANAGING FAILOVER
This section describes how to perform a failover to the recovery site after an unforeseen disaster. The following topics are
described in this section:
■ The Failover Live Process
■ Initiating Failover Live
■ Reverse Protection for a Failed Over VPG
■ What Happens When the Protected Site is Down
■ Initiating Failover Live During a Test
Note: If you need to perform a failover while a retention process is running, first abort the retention process to enable the
failover to run.
The Failover Live Process

Use the Failover operation following a disaster to recover protected virtual machines to the recovery site.
Note: You can also move virtual machines from the protected site to the recovery site in a planned migration. For details, see
“Migrating a VPG to a Recovery Site”, on page 335.
When you set up a failover you always specify a checkpoint to which you want to recover the virtual machines. When you
select a checkpoint – either the last automatically generated checkpoint, an earlier checkpoint, or a tagged checkpoint – Zerto
makes sure that the virtual machines at the remote site are recovered to this specified point-in-time. By setting a commit policy
that enables checking the recovered machines before committing the failover, you can check the integrity of the recovered
machines. If the machines are OK, you can commit the failover. Otherwise, you can roll back the operation and then repeat the
procedure using a different checkpoint.
The Failover operation has the following basic steps:
■ If the protected site or Zerto Virtual Manager is down, the process continues with the next step.
If the protected site or Zerto Virtual Manager is still running, the failover requirements are determined:
■ If the default is requested, doing nothing to the protected virtual machines, the Failover operation continues with the
next step.
■ If shutting down the protected virtual machines is requested and the protected virtual machines do not have VMware
Tools available, the Failover operation fails.
■ If forcibly shutting down the protected virtual machines is requested, the protected virtual machines are shut down
and the Failover operation continues with the next step.
■ Creating the virtual machines at the remote site in the production network and attaching each virtual machine to its
relevant virtual disks, configured to the checkpoint specified for the recovery.
The operation is considered successful, even if some of the virtual machines in a VPG fail to be created on the recovery
site or are created without their complete settings, for example re-IP cannot be performed.
Note: If the virtual machines fail to be created on the recovery site in Public Cloud, the failover operation will not succeed.
Note: The original protected virtual machines are not touched since the assumption is that the original protected site is
down.
■ Preventing automatically moving virtual machines to other hosts: Setting HA to prevent DRS. This prevents automatic
vMotioning of the affected virtual machines during the Failover operation.
■ Powering on the virtual machines making them available to the user. If applicable, the boot order defined in the VPG
settings is used to power on the machines.
Note: If the virtual machines do not power on, the process continues and the virtual machines must be manually powered
on. The virtual machines cannot be powered on automatically in a number of situations, such as when there are not enough
resources in the resource pool or the required MAC address is part of a reserved range or there is a MAC address conflict
or IP conflict, for example, if a clone was previously created with the MAC or IP address.
Managing Failover 345
Managing Failover
■ The default is to automatically commit the Failover operation without testing. However, you can also run basic tests on the
machines to ensure their validity to the specified checkpoint. Depending on the commit/rollback policy that you specified
for the operation, after testing either the operation is committed, finalizing the failover, or rolled back, aborting the
operation.
■ If the protected site is still available, for example, after a partial disaster, and Reverse Protection is possible and specified
for the Failover operation, the protected virtual machines are powered off and removed from the inventory. The virtual
disks used by the virtual machines in the protected site are used for reverse protection. A Delta Sync is performed to
make sure that the two copies, the new target site disks and the original site disks, are consistent. A Delta Sync is
required since the recovered machines can be updated while data is being promoted.
If reverse protection is selected, and the virtual machines or vCD vApp are already protected in other VPGs, continuing
with the operation will cause the virtual machines or vCD vApp to be deleted from other VPGs that are protecting them
and to the journals of these VPGs to be reset. In the event of vCD vApp or if no other virtual machines are left to protect,
the entire VPG will be removed.
If reverse protection is selected, and the virtual machines or vCD vApp are already protected in other VPGs, continuing
with the operation will cause the other VPGs protecting the same virtual machines or vCD vApp to pause the protection.
In the event of vCD vApp or if no other virtual machines are left to protect, the entire VPG will be removed. To resume the
VPGs protection, you must edit the VPGs on the other sites and remove the virtual machine that was failed over from the
protected site.
Note: If reverse protection is not possible, the original protected site virtual machines or vCD vApp are not powered off
and removed.
Protecting virtual machines or a vCD vApp in several VPGs is enabled only if both the protected site and the recovery site,
■ The data from the journal is promoted to the machines. The machines can be used during the promotion and Zerto ensures
that the user sees the latest image, even if this image, in part, includes data from the journal.
Note: Virtual machines cannot be moved to another host during promotion. If the host is rebooted during promotion, make
sure that the VRA on the host is running and communicating with the Zerto Virtual Manager before starting up the
Failback after the Original Site is Operational

To fail back to the original protected site, the VPG that is now protecting the virtual machines on the recovery site has to be
configured and then a Delta Sync is performed with the disks in the original protected site. Once the VPG is in a protecting
state the virtual machines can be moved back to the original protected site, as described in “Migrating a VPG to a Recovery
Initiating Failover Live

You can initiate a failover, whereby all virtual machines in a virtual protection group (VPG) or specific virtual machines in a
virtual protection group (VPG) are replicated to a set checkpoint in the recovery site. As part of the process you can also set up
reverse protection, whereby you create a VPG on the recovery machine for the virtual machines being replicated, pointing back
to the protected site.
You can initiate a failover to the last checkpoint recorded in the journal, even if the protected site is no longer up. You can
initiate a failover during a test, as described in “Initiating Failover Live During a Test”, on page 354.
If you have time to initiate the failover from the protected site you can. However, if the protected site is down, you initiate the
failover from the recovery site. You cannot select specific VMs in a VPG for failover if the protected site is down.
Note:
■ If a virtual machine is protected in several VPGs, and Reverse Protection is selected, the virtual machine is removed from
all of the VPGs containing the virtual machine. The journals of these VPGs are reset.
If a vCD vApp is protected in several VPGs, and reverse protection is selected, all VPGs containing the vCD vApp are
deleted.
Initiating Failover Live 346

Managing Failover
If Reverse Protection is selected, and the virtual machines or vCD vApp are already protected in other VPGs, continuing
with the operation will cause the other VPGs protecting the same virtual machines or vCD vApp to pause the protection.
In the event of vCD vApp or if no other virtual machines are left to protect, the entire VPG will be removed. To resume the
VPGs protection, you must edit the VPGs on the other sites and remove the virtual machine that was failed over from the
protected site.
Protecting virtual machines or a vCD vApp in several VPGs is enabled only if both the protected site and the recovery site,
■ Any VPGs that are in the process of being synchronized, cannot be recovered, unless the synchronization is a bitmap
synchronization.
■ You cannot protect virtual machines with VMware Fault Tolerance.
To initiate a failover:
1. In the Zerto User Interface set the operation to LIVE and click FAILOVER.
The Failover wizard appears.
2. Select the VPGs to failover. By default, all VPGs are listed.

a) To select specific VMs in a VPG, click the icon next to each VPG to get a list of VMs. The Select VMs to Failover dialog
is displayed. By default, all VMs are selected.
b) Select the VMs to failover.

Note: Selecting specific VMs in a VPG to failover is not supported when replicating from a vCD site.

Managing Failover
The Direction arrow shows the direction of the process: From the protected site To the peer, recovery, site.
3. Click NEXT. If specific VMs are selected for failover, a warning will appear informing the user to review the Pre-recovery
and Post-recovery Scripts.
The EXECUTION PARAMETERS window is displayed.
You can change the following values to use for the recovery:
■ Commit Policy
■ Checkpoint to use
■ Force Shutdown
■ Reverse Protection settings
In this window you can also see if a Boot Order and Scripts are defined for the VPG.

■ By a user.
5. To use a checkpoint which is not the latest checkpoint, or the latest tagged checkpoint, choose Select from all available
6. Click OK. If the selected VMs were not protected when the selected checkpoint was taken, a warning will appear informing
the user that these VMs cannot be recovered. If all selected VMs cannot be recovered, an error will appear.
7. To change the commit policy, click the field or select the VPG and click EDIT SELECTED.

Managing Failover
a) To commit the recovery operation automatically, with no testing, select Auto-Commit and 0 minutes.
b) Select None if you do not want an automatic commit or rollback. You must manually commit or roll back.
If some VMs in a VPG fail to recover properly and Auto-Commit was selected for the operation, the commit policy will
change to None. You must manually commit or rollback.
c) To test before committing or rolling back, specify an amount of time to test the recovered machines, in minutes.
This is the amount of time that the commit or rollback operation is delayed, before the automatic commit or rollback
action is performed.
During this time period, check that the new virtual machines are OK and then commit the operation or roll it back.
The maximum amount of time you can delay the commit or rollback operation is 1440 minutes, which is 24 hours.
Testing that involves I/O is done on scratch volumes.
■ The more I/Os generated, the more scratch volumes are used, until the maximum size is reached, at which point no
more testing can be done.
8. To specify the shutdown policy, click the VM Shutdown field and select the shutdown policy:
■ No (default): The protected virtual machines are not touched before starting the failover. This assumes that you do
not know the state of the protected machines, or you know that they are not serviceable.
■ Yes: If the protected virtual machines have VMware Tools available, the virtual machines are gracefully shut down,
otherwise the Failover operation fails. This is similar to performing a Move operation to a specified checkpoint.
■ Force Shutdown: The protected virtual machines are forcibly shut down before starting the failover. This is similar to
performing a Move operation to a specified checkpoint. If the protected virtual machines have VMware Tools
available, the procedure waits five minutes for the virtual machines to be gracefully shut down before forcibly
powering them off.
9. To specify reverse protection, whereby the virtual machines in the VPG are failed over to the recovery site and then
protected in the recovery site, back to the original site, either:
■ Click REVERSE PROTECT ALL. This activates reverse protection on all the VPGs and/or VMs that you plan to failover.
The system default values for this procedure will be assigned to all the VPGs.
- Or -
■ Click the Reverse Protection field and select SET.
a) To configure the VPG for reverse protection, click the REVERSE link.
The Edit Reverse VPG wizard is displayed.

Managing Failover
You can edit the reverse protection configuration. The parameters are the same as described when you create a VPG,
described in “Protecting Virtual Machines from a vCenter Server”, on page 45, with the following differences:
■ You cannot add or remove virtual machines to the reverse protection VPG.
■ By default, reverse protection is to the original protected disks. You can specify a different storage to be used for
the reverse protection.
■ If VMware Tools is available, for each virtual machine in the VPG, the IP address of the originally protected virtual
machine is used. Thus, during failback the original IP address of the virtual machine on the site where the machine
was originally protected is reused. However, if the machine does not contain the utility, DHCP is used.
■ The host version must be 4.1 or higher for re-IP to be enabled.
IMPORTANT:
■ The virtual machines or vCD vApp will be removed from the other VPGs that are protecting them if the following
conditions apply:
■ The virtual machines or vCD vApp are already protected in other VPGs
■ Reverse protection is specified
■ If Reverse Protection is selected, and the virtual machines or vCD vApp are already protected in other VPGs,
continuing with the operation will cause the other VPGs protecting the same virtual machines or vCD vApp to pause
the protection. In the event of vCD vApp or if no other virtual machines are left to protect, the entire VPG will be
removed. To resume the VPGs protection, you must edit the VPGs on the other sites and remove the virtual machine
that was failed over from the protected site.
When committing the failover, you can reconfigure reverse protection, regardless of the reverse protection settings
specified here.
When reverse protection is specified for a VPG residing on a vCD site that is replicating to either a vSphere or Hyper-V
number.
10. Click NEXT.
■ A warning appears informing the user that the virtual machines or vCD vApp will be removed from the other VPGs
that are protecting them.
11. Click OK. If a virtual machine is deleted from other VPGs, the journals of these VPGs are reset.
The FAILOVER step is displayed. The topology shows the number of VPGs and virtual machines being failed over to each
recovery site. In the following example, 2 VPGs will be failed over to Site6-Ent2-R2, and they contain 5 virtual machines;
and 1 VPG will be failed over to Site5-Ent2-P2-R2 and it contains 2 virtual machines.
12. Click START FAILOVER.

A warning message appears, presenting a summary of your Commit Policy.
13. Review the Commit Policy summary, and either click Change Settings, or click START FAILOVER to start the failover.

Managing Failover
If a commit policy was set with a timeout greater than zero, you can check the failed over virtual machines on the recovery
site before committing the failover operation.
The failover starts by creating the virtual machines in the recovery site to the point-in-time specified: either the last data
transferred from the protected site or to one of the checkpoints written in the journal.
Note: If a virtual machine exists on the recovery site with the same name as a virtual machine being failed over, the
machine is created and named in the peer site with a number added as a suffix to the name, starting with the number 1.
If the original protected site is still up and reverse protection is configured to use the protected virtual machines virtual
disks, these virtual machines are powered off.
The status icon changes to orange and an alert is issued, to warn you that the procedure is waiting for either a commit or
rollback.
All testing done during this period, before committing or rolling back the failover operation, is written to thin-provisioned
scratch virtual disks. These virtual disks are automatically defined when the machines are created on the recovery site for
testing. The longer the test period the more scratch volumes are used, until the maximum size is reached, at which point no
more testing can be done. The maximum size of all the scratch volumes is determined by the journal size hard limit and
cannot be changed. The scratch volumes reside on the same datastore defined for the journal. Using these scratch
volumes makes committing or rolling back the failover operation more efficient.
Note: You cannot take a snapshot of a virtual machine before the failover operation is committed and the data from the
journal promoted to the moved virtual machine disks, since the virtual machine volumes are still managed by the VRA and
not directly by the virtual machine. Using a snapshot of a recovered machine before the failover operation has completed
will result in a corrupted virtual machine being created.
14. Check the virtual machines on the recovery site, then either:
■ Wait for the specified Commit Policy time to elapse, and the specified operation, either Commit or Rollback, is
performed automatically.
■ Or, in the specific VPG tab, click the Commit or Rollback icon ( ).
a) If you clicked the Commit icon, the Commit window is displayed to confirm the commit and, if necessary set, or reset,
the reverse protection configuration.
■ If the protected site is still up and you can set up reverse protection, you can reconfigure reverse protection by
selecting the Reverse Protection checkbox and then click the Reverse link.
■ Configuring reverse protection at this point overwrites any of settings defined when initially configuring the move.
■ If specific VMs in a VPG are selected, a new VPG will be created in addition to the original VPG. The additional
VPG includes only the VMs selected for recovery. The new VPG name is displayed as {Original-VPG-Name-
Partial}. The original VPG will remain intact with its history.
■ If some VMs in a VPG fail to recover properly, a warning will appear informing the user which VMs failed to
recover entirely and which recovered without their complete settings. The user will be prompted to proceed or roll

Managing Failover
back the VMs which failed to recover. If you choose to proceed, a new VPG will be created in addition to the
original VPG. The additional VPG includes only the VMs that were recovered successfully. The new VPG name is
displayed as {Original-VPG-Name-Partial}.
Note: {Original-VPG-Name-Partial} is only created in cases where some VMs in a VPG fail to recover entirely.
b) If you clicked the Rollback icon, this rolls back the operation, removing the virtual machines that were created on the
recovery site and reboots the machines on the protected site.
The Rollback window is displayed to confirm the rollback.
a) You can also commit or roll back the operation via the TASKS popup window in the status bar, or by selecting
MONITORING > TASKS.
If the original protected site is still up and reverse protection is configured to use the virtual disks of the protected virtual
machines, these virtual machines are removed from this site, unless the original protected site does not have enough
storage available to fail back the failed over virtual machines. Finally, data is promoted from the journal to the recovered
virtual machines.
IMPORTANT:
■ If Reverse Protection is selected and the virtual machines or vCD vApp are already protected in other VPGs, the
virtual machines or vCD vApp are deleted from the protected site and the journals of these VPGs are reset.
This will result in the removal of these virtual machines from other VPGs that are protecting them, or the removal of
the entire VPG, in the event of vCD vApp or if no other virtual machines are left to protect.
■ If Reverse Protection is selected, and the virtual machines or vCD vApp are already protected in other VPGs,
continuing with the operation will cause the other VPGs protecting the same virtual machines or vCD vApp to pause
the protection.
In the event of vCD vApp or if no other virtual machines are left to protect, the entire VPG will be removed. To resume
the VPGs protection, you must edit the VPGs on the other sites and remove the virtual machine that was failed over
from the protected site.
Protecting virtual machines in several VPGs is enabled only if both the protected site and the recovery site, as well as the
During promotion of data, you cannot move a host on the recovered virtual machines. If the host is rebooted during
promotion, make sure that the VRA on the host is running and communicating with the Zerto Virtual Manager before
starting up the recovered virtual machines.
By default the virtual machines are started with the same IPs as the protected machines in the protected site. If you do not
specify Reverse Protection, the original machines still exist in the protected site and this can create clashes. In this case,
Zerto recommends ensuring that a different IP is assigned to the virtual machines when they start, when configuring each
virtual machine NIC properties in the VPG, during the definition of the VPG. For details, refer to
“Protecting Virtual Machines from a vCenter Server”, on page 45. If you have defined the new virtual machines so that they
will be assigned different IPs, the re-IP cannot be performed until the new machine is started. Zerto changes the machine
IPs and then reboots these machines with their new IPs.
Note: If the virtual machines do not power on, the process continues and the virtual machines must be manually powered
on. The virtual machines cannot be powered on automatically in a number of situations, such as when there is not enough
resources in the resource pool or the required MAC address is part of a reserved range or there is a MAC address conflict
or IP conflict, for example, if a clone was previously created with the MAC or IP address.
When a vCD vApp is failed over to a vCenter Server recovery site, a vCenter Server vCD vApp is created in the recovery
site. If Reverse Protection was specified, the VPG state is Needs Configuration and the VPG must be recreated by
protecting the virtual machines in the vCD vApp as separate machines and not as part of the vCD vApp.

Managing Failover
Reverse Protection for a Failed Over VPG

When you specify Reverse Protection, the following occurs:
■ The virtual machines are recovered on the recovery site and then protected using the values specified during the failover.
■ The original virtual machines are removed from the original protected site.
■ On the target site the data is promoted from the journal to the recovered virtual machines
■ The recovery site, which is now the protected site, is synchronized with the original protected site so that the VPG is fully
protected.
The synchronization used is either a Delta Sync or if there is only one volume to synchronize, a Volume Delta Sync is
performed. A sync is required since the recovered machines can be updated while data is being promoted.
Notes:
■ For the Failover operation to complete successfully, when Reverse Protection is specified, the original protected site must
have enough storage available to fail back the failed over virtual machines.
■ When Reverse Protection is specified for a VPG residing on a vCD site that is replicating to either a vSphere or Hyper-V
number.
■ If you do not specify Reverse Protection, the VPG definition is kept with the status Needs Configuration and the reverse
settings in the VPG definition are not set.
■ Clicking EDIT VPG displays the Edit VPG wizard with the settings filled in, using the original settings for the virtual
machines in the VPG from the original protected site, except for the volumes. To start replicating the virtual machines in
the VPG, specify the disks to use for replication and optionally, make any other changes to the original settings and click
DONE.
Reverse Protection with One-to-Many

Zerto enables you to protect virtual machines in a maximum of three VPGs. These VPGs cannot be recovered to the same site.
If Reverse Protection is selected, and the virtual machines are already protected in other VPGs, the following occurs:
■ The virtual machines are deleted from the protected site.
■ The replication of other VPGs containing these machines is paused.
■ The recovery of all the virtual machines, including the virtual machine removed from the protected site, is possible.
To resume replication do the following:
1. Open the Edit VPG wizard.
2. Select the virtual machine that was previously deleted from the protected site.
3. Remove the virtual machine from the VPG.
If the protected VPG contains a vCD vApp, and the vCD vApp is protected in other VPGs, Reverse Protection is selected, the
following occurs:
■ The vCD vApp is deleted from the protected site.
■ The vCD vApp is deleted from the other VPGs, and therefore can no longer be recovered
Reverse Protection for a Failed Over VPG 353

Managing Failover
VPGs enter a state of pause and pause replication if the following conditions apply:
■ The ZVM on the protected and recovery sites are of version 5.5 and higher.
■ The VRA installed on the recovery site is of version 5.5 and higher.
Protecting virtual machines or a vCD vApp in several VPGs is enabled if:
■ The protected site and the recovery site are of version 5.0 and higher
■ The VRAs installed on these sites are of version 5.0 and higher.
What Happens When the Protected Site is Down

If the protected site is down, you can initiate the failover from the recovery site, as described above in “To initiate a failover:”,
on page 347.
The specific VPG tab for a VPG shows whether recovery is possible.
If the Zerto Virtual Manager service is down the actual machines that are being protected can still be up, but they are only
recoverable to the last checkpoint written before the Zerto Virtual Manager went down. If the vCenter Server is down, some of
the protected virtual machines might not be protected.
When there is no connection with the protected site, the status for recovered VPGs is red with an Error status and green while
recovery is being performed. If the protected site restarts so that Reverse Protection is possible, the status changes to orange.
Initiating Failover Live During a Test

Replication continues during a test. If you need to initiate a failover during a test, you initiate the failover. The test stops to
enable the failover and then a normal failover is performed, as described in “Initiating Failover Live”, on page 346. Any changes
made to test the failover are not replicated, as only changes to the protected machines in the VPG are replicated.
Note: You cannot initiate a failover while a test is being initialized or closed.
What Happens When the Protected Site is Down 354

CHAPTER 19: CLONING A VPG TO
THE RECOVERY SITE
You can create a clone of each virtual machine in a VPG. The clone is a copy of the protected virtual machine, located on the
recovery site, while the virtual machine on the protected site remains protected and live.
■ “The Clone Process”, below
■ “Cloning Protected Virtual Machines to the Remote Site”, on page 355
Note: You cannot clone virtual machines in a VPG test while a retention process is running. When the recovery site is vCD, the
clone is created in vCenter Server and the virtual machines have to be manually imported into vCD.
The Clone Process

Use the Clone operation to create a copy of the VPG virtual machines on the recovery site. The virtual machines on the
protected site remain protected and live.
The Clone operation has the following basic steps:
■ Creating the cloned disks at the recovery site with the data from the journal to the specified checkpoint.
■ Creating the virtual machines at the recovery site in the move/failover network and attach each virtual machine to its
relevant cloned disks, configured to the checkpoint specified for the clone.
Note: The virtual machines are created without DVD drives, even if the protected virtual machines have DVD drives.
The cloned machines are named with the names of the protected machines, with the timestamp of the checkpoint used to
create the clone. The cloned virtual machines are not powered on and are not protected by Zerto.
Cloning Protected Virtual Machines to the Remote Site

You might want to create a clone if you need to have a copy of the virtual machines saved to a specific point-in-time, for
example, when a VPG enters a Replication Paused state, or when testing a VPG in a live DR test.
To clone a VPG:
1. In the Zerto User Interface, in the VPGs tab click the name of the VPG to be cloned.
A new tab is added to the Zerto User Interface, with the name of the VPG that you clicked. The tab displays data about the
VPG.
the tab.
2. Select the new tab and click MORE > Offsite Clone.
The {VPG-Name}: Offsite Clone dialog is displayed.
a) To clone specific VMs, click ADVANCED.

The {VPG-Name}: Select VMs to Clone dialog is displayed. By default, all VMs are selected.
Cloning a VPG to the Recovery Site 355
Cloning a VPG to the Recovery Site
b) Select the VMs to clone.

Note: Zerto Version 6.0 supports cloning specific VMs if installed on the protected site only.
3. If you intend to use the last checkpoint, which is displayed in the dialog, go to step 8.
To select the checkpoint, click SELECT A CHECKPOINT.
The {VPG-Name}: Checkpoints dialog is displayed.
When selecting the point to recover to:

■ The refresh button is initially grayed out and is enabled for clicking after 5 seconds. It is also grayed out for 5 seconds
after being clicked, before being re-enabled.
■ A Click the refresh button to view the latest checkpoints reminder is displayed 10 seconds after the refresh button is
clicked to remind the user that there is a new Latest Checkpoint.
■ If the user has scrolled to, and selected, a checkpoint anywhere in the checkpoints list, clicking the refresh button will
automatically return the user to the selected checkpoint in the list.
4. Select the checkpoint to use:

■ By a user.
Cloning Protected Virtual Machines to the Remote Site 356

Cloning a VPG to the Recovery Site
6. To use a checkpoint which is not the latest checkpoint, or the latest tagged checkpoint, choose Select from all available
7. Click OK.
8. Select the recovery datastore to use for the cloned virtual machines.
Note: All the cloned virtual machines use a single datastore, that is accessible by all the recovery site VRAs used by the
VPG. In a vCD environment the datastore is selected from the list of available datastores that is accessible by all the
recovery site VRAs and that has the most free space.
9. Click CLONE.
The cloning starts and the status is displayed in the VPG details tab.
The cloned machines are assigned the names of the protected machines with the addition of the timestamp of the checkpoint
used for the clone. The cloned virtual machines are not powered on.
When cloning to VMware vSphere environments:
■ The cloned virtual machines are created in the ZertoRecoveryFolder folder, and not the recovery folder defined in the
VPG.
■ The cloned virtual machines use a single datastore.
■ The VMDKs are renamed (1).vmdk, (2).vmdk, etc.
■ When the recovery site is VMware vCloud Director, the clone is created in vCenter Server and the virtual machines have to
be manually imported into vCD.
■ If the protected virtual machine has RDMs attached, these disks are always cloned as thin-provisioned VMDKs to the
datastore specified in the Recovery Datastore field in the Edit VM dialog in the REPLICATION step in the Edit VPG
wizard.
When cloning to Microsoft Hyper-V environments:
■ The cloned virtual machines use a single storage.
■ The VHDs are renamed (1).vhdx, (2).vhdx, etc.
Cloning Protected Virtual Machines to the Remote Site 357

CHAPTER 20: RECOVERING FILES
AND FOLDERS
You can recover specific files and folders from the recovery site for virtual machines that are being protected by Zerto. You can
recover the files and folders from a specific point-in-time. Thus, you can recover files and folders for a virtual machine for as far
back as the journal history is configured.
This section describes how to recover files and folders. The following topics are described in this section:
■ “The File and Folder Recovery Process”, below
■ “Recovering Files and Folders”, on page 359
The File and Folder Recovery Process

Use the RESTORE FILE operation to recover specific files and folders from the recovery site.
When you set up file and folder recovery, you always specify a checkpoint to which you want to recover the files and folders.
When you select a checkpoint – either the last automatically generated checkpoint, an earlier automatically generated
checkpoint, or a tagged checkpoint – Zerto makes sure that the files and folders replicated at the remote site are recovered to
this specified point-in-time.
The file and folder operation has the following basic steps:
1. Select the virtual machine that is protected, on which the files or folders to recover are located.
2. Select the checkpoint, at which the files and folders will be recovered.
3. Select the disk, which contains the files and folders to recover.
Note: You can only recover files and folders from one disk at a time.
4. Mount the selected disk.
5. Select the files and folders on the disk to recover.
6. Download the selected files and folders.
■ The files are downloaded to the machine where you run the Zerto User Interface.
■ Make sure that this machine has enough space for the recovered files.
7. Unmount the selected disk.
You can only recover files and folders from one disk at a time. After the required disk is mounted, if you want to recover files or
folders from another disk. Zerto does not support mounting the same volume twice, for example if you want a file from two
different checkpoints.
Considerations:
■ You cannot recover files or folders from a virtual machine when a test failover, live failover, move, clone, or retention
process is being performed on a VPG that contains the virtual machine.
■ You cannot recover files or folders from the Zerto plugin.
For additional file and folder recovery considerations or known issues, see the Release Notes > Known Issues > File Level
Restore.
Recovering Files and Folders 358
Recovering Files and Folders

The procedure to recover files and folders involves the following steps:
1. “Mounting the Disk that Contains the Required Files and Folders”, on page 359
Note: While the disk is mounted:
■ If you start a live failover or move, Zerto Virtual Manager forcibly unmounts the disk so the live failover or move can be
performed.
■ Scheduled retention processes do not start.
■ Manual retention processes fail.
■ You can perform a test failover or clone.
2. “Downloading the Files and Folders from the Disk”, on page 362
Note: When downloading, you may see grayed out files or folders. These grayed out files or folders are not supported, and
therefore cannot be selected. For a list of unsupported files, see Zerto Virtual Replication - Interoperability Matrix for All
Versions.
Mounting the Disk that Contains the Required Files and Folders
Before you can recover files or folders, you must first select the checkpoint in time from which you will recover the files or
folders. Then you must select and access the disk in which the files or folders are contained.
To mount a disk that includes files and folders to restore:

1. From either the protected or recovery site, select ACTIONS > RESTORE FILE.
The File and Folder Restore wizard is displayed.
The list of all protected virtual machines is displayed. You can only recover files or folders from one virtual machine at a
time.
2. Select the virtual machine on which the file or folder is located and click NEXT.

The CHECKPOINT step is displayed. By default, all checkpoints are displayed.
3. Select the checkpoint from which to recover the file or folder.

■ Auto: Checkpoints generated by the Zerto Virtual Manager are displayed.
■ User: Checkpoints that were added by a user, or were added by the Zerto Virtual Manager when a failover test was
performed on the VPG that included the virtual machine, or when the virtual machine was added to an existing VPG
after the virtual machine was synchronized.
4. Click NEXT.
The DISK step is displayed. All disks associated with the selected virtual machine are displayed.
5. Select a disk to mount and click NEXT.

The MOUNT summary step is displayed. The settings you selected are displayed.
6. Click START MOUNT to mount the disk.

■ When the mount is completed, icons appear next to the task.
■ By clicking the folder icon ( ) you can browse the folders and files on the disk.
■ By clicking the unmount icon ( ) you can unmount the disk without restoring any files or folders.
7. Continue with “Downloading the Files and Folders from the Disk” on page 362.

Downloading the Files and Folders from the Disk

In this procedure you select the files and folders. The files are downloaded to the machine where you run the Zerto User
Interface. Make sure that this machine has enough space for the recovered files.
To download folders or files:

1. Click the folder icon ( ).
The File and Folder Restore dialog is displayed.
2. Click NEXT.

The FILE/FOLDER step is displayed.
■ Select the files and folders you want to download.

■ Grayed out file systems are not supported therefore cannot be selected. For a list of unsupported file system, see
the Interoperability Matrix.
■ When a selected folder contains unsupported files, only the supported files will successfully download. Meaning,
only the supported files will appear in the downloaded zip file
The selected files or folders are displayed in the right pane of the dialog. The number of items selected is displayed and the
size of the selected files is also displayed.
3. Click NEXT.
The DOWNLOAD step is displayed. It shows the files and folders you selected for downloading.
By default, when you select multiple files or one or more folders, the data is compressed before it is downloaded. If you
select only one file, for download, you can choose whether or not the file is compressed.

4. Click START DOWNLOAD.

The files and folders are downloaded by default to the downloads folder on the computer where you run the Zerto User
Interface.
When a selected folder contains unsupported files, only the supported files will successfully download. Meaning, only the
supported files will appear in the download folder.
Note: Saving the files and folders to a network share is dependent on the browser used to display the Zerto User Interface
and the settings for this browser.
■ When you select one file to download, and do not compress the file, the name of the downloaded file is the name of
the file. For example, if you download a file called Important-file.docx, the name of the file on your computer will
be Important-file.docx.
■ When you choose one file and choose to compress it, or you select multiple files, the files are zipped into a file called
ZertoDownloads.zip.
5. Unmount the disk after the files or folders are downloaded. To unmount the disk, click the unmount icon ( ).

CHAPTER 21: USING ZERTO’S LONG
TERM RETENTION
Zerto enables recovering VPGs from a Repository to the recovery site.

This section contains the following information and procedures:
Long Term Retention - Overview
Workflow: Using Zerto’s Long Term Retention
Creating a New Repository for Retention
Editing an Existing Repository for Retention
Deleting an Existing Repository for Retention
Enabling Long Term Retention for the VPGs
Monitoring Your Long Term Retention Status
Searching for Files/Folders and Restoring their VMs or VPGs
Restoring VMs or VPGs from a Repository
Storing Retention Sets
Note:
If you are upgrading Zerto, and if your site was already configured with Long Term Retention, or retention
configurations, review Long Term Retention known issues and limitations, and see the guide, Upgrading Zerto Virtual
Replication.
Using Zerto’s Long Term Retention 365
Using Zerto’s Long Term Retention
Long Term Retention - Overview

Using Zerto’s data retention to restore data, IT users are able to define a Retention Policy for their organization, where data can
be retained for extended periods of time. The user defines what data is saved where, and for how long the data should be
retained, according to the organizations regulation policy. Each VPG is equipped with its own retention policy.
When the user needs to restore the data, they can then select a specific point in time and perform a VPG level restore.
To support advanced VM-level or file-level restore scenarios, Zerto offers the capability to index files and folders of selected
VMs that are enabled for retention. This allows users to search for the necessary files and folders and to perform a one-click
restore of the VMs or VPGs containing those files and folders.
For further details, refer to Searching for Files/Folders and Restoring their VMs or VPGs.
What does the Repository Contain?
The Repository contains retention sets, where each retention set has it’s own mapping file (DOM file).
How does the Long Term Retention process work?
When Long Term Retention is first configured, and the first reading of the data has occurred, the retention set consists of:
■ All the data copied to the Repository.
When the second reading and any subsequent readings after a full retention of the data occurs, the retention set consists of:
■ All the data from the first reading, but not including any original data which was marked as changed during the second
reading.
■ The changed data from the second reading.
Each incremental retention set is independent of previous incremental and full retention sets, and gives a complete and total
picture of the data at the point in time of the reading.
What happens when the Retention Policy period is overdue?
Retention sets are kept for the retention period specified as part of the Retention Policy configuration. Once the retention
expires, the expired retention sets will be deleted from the Repositories.
Before You Begin

Review Long Term Retention limitations and considerations:
■ Upgrade:
■ Existing NFS Repositories will be renamed to deprecated and can be used for Restores only. New repositories must be
created for continued LTR use with Zerto 7.0.
■ Long Term Retention configuration settings for all VPGs will be removed. All other VPG settings will remain
unaffected.
■ Retention processes will fail until all VRAs have been upgraded to 7.0.
■ Repository Supported Protocols:
■ NFS - up to version 3.
■ SMB - version 2 and 3.
■ SMB can be configured using IP address only (no DNS Name).
■ Incremental:
■ Zerto can track up to 40TB of changes per volume.
■ Scheduling and Retention Policy:
■ All scheduled retention process periods (Daily, Weekly, Monthly, Yearly) are scheduled to run at the same time. If a
Full and Incremental are scheduled for the same day, the system will run a Full retention process. For example, if a
Daily retention process is set to run a Full on Sunday and a Weekly is set to run an Incremental on Sunday, a Full
retention process will be performed.
■ Deleted VPGs are not managed and their retention sets are not removed from the repository, even when the retention
period has passed.
■ Retention sets generated in 6.5 will not be managed by any retention policy and will need to be manually deleted from
the Repository when expired.
Long Term Retention - Overview 366

■ In some scenarios, the retention process will wait in queue and will start running only on the following day, resulting in
two retention sets on the same day.
■ Sync from Repository:
■ Restoring VPGs is allowed for VPGs which currently exist, or which were deleted.
■ Restoring previously created retention sets, which were created before the Repository was created, from a previously
populated 6.5 Repository which has been added to the 7.0 system is not supported.
■ Restoring from a Repository containing retention sets, which were created prior to adding the repository to the
system, is not supported.
■ Reconnecting a Repository is not supported.
■ Attaching an existing Repository and leveraging copies for the next incremental is not supported. Therefore, any
Repository is considered new after defining it and a complete reading of the repository will be performed.
■ Search and Restore:
■ ZVM minimum requirements for performing Search and Restore: at least 4 vCPUs and 10GB RAM.
■ Saving indexed meta-data is currently only supported on SMB Repositories which are not PBBA based.
■ When configuring SMB repositories used for indexing, do not use a local user account.
■ Operating Systems, File Systems and Volume Manager that Zerto can index:
■ Operating Systems: Windows Vista and 2008 server and above and Linux
■ File System and Volume Manger: NTFS and EXT2/EXT3/EXT4
■ LVM is not supported for indexing
■ A VM with over 100 million entries (files or folders) cannot be indexed.
■ Rate of entries (files or folders) indexed in NTFS per second: 2000 files.
■ Rate of entries (files or folders) indexed in EXT per second: 1500 files.
■ Supported partitioning methods: GPT, MBR.
■ Zerto can index up to 3 VMs in parallel and no more than one per recovery host.
■ Search and Restore is available only from a recovery ZVM GUI.
■ While indexing, only a Failover operation is allowed and this will stop the indexing process (indexing cannot be
resumed).
■ Modified date: displayed in the browser local time.
■ Search is not case sensitive.
■ Support only search according to entry name (not full path).
■ If the user does not configure a Repository for indexing and indexing starts after the retention process, no alert will be
displayed to notify the user that indexing has not happened.
■ No multi-tenancy support.
■ Search and Restore requires Enterprise Cloud Edition, Cloud One2Many or NFR/Trial license.
■ If a VM with a Retention policy set has 2 disks with the same name, the 2 disks cannot be restored to the same
datastore.
■ Licensing:
■ Long Term Retention requires Enterprise Cloud Edition, Cloud One2Many or NFR/Trial license.
■ Error Handling:
■ Certain failures when running retention sets may require Support intervention to re-enable them.
■ Performance:
■ DSS and VRA consume CPU. As such, if the CPU on the VRA reaches high consumption rates, another CPU should be
added to the VRA machine. Adding additional CPUs on top of the additional one is redundant and the additional CPUs
will not be utilized.
■ Manual Retention Processes:
■ If the scheduled retention process on that day has already executed, manual retention will either run the last settings
used, or run a default of 90 days incremental.
■ Cloud Service Providers and Zerto Cloud Manager Users:
■ Extended Recovery" Service profiles are not supported.
■ Other:
■ Partial retention processes (e.g. some volumes have succeeded and others have not) and Restores are not supported.
■ When editing a VPG where the protected site is 6.5Ux, and the recovery site is 7.0, the user will not be able to see
updated scheduling settings. Any scheduling configuration done on the 6.5 GUI will be ignored.
■ Long Term Retention is not supported where the protected or recovery site is a Public Cloud. Therefore, the SETUP tab
in the ZCA was removed.
■ Only one Long Term Retention task can run on a VPG concurrently.

■ Retention Reports are not available in 7.0.

■ When configuring FreeNAS as an LTR Repository connected via the SMB protocol, the “Server minimum protocol”
parameter needs to be explicitly set with “3_00”.
■ If one or more volumes are in "initial sync" state during a Retention process, these volumes are excluded and the
Retention process will be considered as Failed.

Workflow: Using Zerto’s Long Term Retention

STEP DESCRIPTION COMMENTS LINK TO PROCEDURE
1. Create and configure Repositories for retention Before you can enable and use Long Creating a New Repository
Term Retention, you must define the for Retention
Repository where the retention sets
will reside.
2. Enable Long Term Retention for the VPG by Do this either when you create and Enabling Long Term
defining the Retention Policy configure a VPG, or when you edit a Retention for the VPGs
VPG.
3. (Ad hoc) Manually run the retention process Manually run the retention process ad Manually Running the
hoc, as needed. Retention Process
4. Monitor your long term retention status Via the RETENTION STATUS tab Storing Retention Sets
5. Search for files and folders and perform a one- Via Actions > Search and Restore Searching for Files/Folders
click restore of the VMs or VPGs containing and Restoring their VMs or
those files and folders. VPGs
6. Restore VMs or VPGs from the Repository Via Actions > Restore Restoring VMs or VPGs
from a Repository
Creating a New Repository for Retention

Disaster recovery using Zerto enables recovering from a disaster to any point between the moment just before the disaster and
a specified amount of time in the past up to 30 days. The recovery is done in real time at the recovery site with a minimal RTO.
If you need to extend the recovery ability to more than 30 days, Zerto provides Long Term Retention that enables saving the
protected data in a state where they can be easily deployed.
The data is saved in a Repository for a defined retention period. Each VPG will have retention sets created according to a fixed
schedule. Repositories are external network connected storage resources, such Purpose Built Backup Appliances (PBBA) or
NAS storage systems.
The retention process is managed by the ZVM, and the Data Streaming Service (DSS) performs all the data path operations.
During the retention process, the DSS communicates with the VRA on the recovery site. The retention sets are fixed points
saved either daily, weekly, monthly or yearly in the Repository. Before you can start a retention process for VPGs, you must first
create one or more Repositories for the retention process.
Define Repositories on the recovery site where retention sets can be stored. The Repositories are connected over the network,
leveraging SMB(CIFS) or NFS protocols, on top of a simple network share or PBBA.
The Repository is defined as part of the retention policy configuration.
To create a Repository for Long Term Retention:

1. From the recovery site, in the Zerto User Interface, click Setup > REPOSITORIES > NEW REPOSITORY.
Workflow: Using Zerto’s Long Term Retention 369

The New Repository window is displayed.
2. In the General area, specify the following:

■ Name: A unique name for the Repository.
■ Storage Type: The type of network share, selected PBBAs or other de-duplicated appliances. See the Interoperability
Matrix for supported versions.
■ Connection Type: The type of Repository:
■ Network Share - NFS The network share is NFS based
■ Network Share - SMB The network share is SMB based. Username and password must be
provided to access the share.
Username: The username can be entered using either of the following
formats:
■ username
■ domain\username
Password: Password to access the Network Share.
3. In the Location area, define the Path. This is the path where the Repository will reside.
The path must be accessible from the DSS, so if the Repository is on a different domain, the domain must be included in the
path.
4. In the Properties area, you can check the Set as default repository checkbox. This will use the Repository as the default
when defining the retention policy in a VPG.
5. Click SAVE. The Repository is created.
6. To define an additional Repository, repeat this procedure.
7. When using Zerto Cloud Manager, you must also add the Repository to either the vCenter resources or vCD resources in
the Zerto Cloud Manager. For details, see the Zerto Cloud Manager Administration Guide.
8. Proceed with Enabling Long Term Retention for the VPGs.
Editing an Existing Repository for Retention

You can change the Repository name, or define the Repository as the default repository.
To edit a Repository:
1. In the Zerto User Interface, click SETUP tab, REPOSITORIES sub-tab.
2. Select the Repository to edit and click MORE > Edit.
The Edit Repository window is displayed.
Editing an Existing Repository for Retention 370

Edit any of the following settings:

■ Name: Specify a unique name for the Repository.
■ Set as default repository: Select to use the Repository as the default when defining the retention policy in a VPG.
3. Click SAVE. The updated definition of the Repository is saved.
Deleting an Existing Repository for Retention
Deleting a Repository disconnects it from the Zerto. When a Repository is deleted, the retentions set can no longer be restored
or found through a Search operation.
To delete a Repository:
2. Select the Repository to delete and click MORE > Delete.
3. A warning message appears informing the user that the retention sets in that Repository will no longer be restorable.
4. Click OK to delete the Repository.
Deleting an Existing Repository for Retention 371

Enabling Long Term Retention for the VPGs

Following is the procedure for enabling Long Term Retention for a VPG.
Note:
Long Term retention is not available when the VPG is recovered to a Public Cloud.
Note:
When needed, you can manually run the retention process ad hoc. See Manually Running the Retention Process
Requirements
■ Verify that a Repository was created where the retention sets will be saved. Repositories are created and configured via the
SETUP tab as described in Creating a New Repository for Retention.
■ When using Long Term Retention, the VRA should be configured with 2 vCPUs.
Long Term Retention can be enabled at the same time when you first create the VPG to protect virtual machines.
You can also enable Long Term Retention by editing an existing VPG.
To enable Long Term Retention for a VPG:

Enabling Long Term Retention for the VPGs 372

Daily
Retention window.
.
Weekly
of the week.
down menu.
Retention window.


Monthly
down menu.
Retention window.
Yearly
July.
down menu.
Retention window.
13.
Manually Running the Retention Process

After initializing the VPG, Zerto periodically checks that the schedule to run a retention process has not passed. At the
scheduled retention process time, the job is run and the retention set is stored in the specified Repository.
At any time, you can decide that you need to run the retention process, without waiting for the scheduled time. Use the
following procedure to do this.
To manually run the retention process:

1. In the Zerto User Interface, click one of the following tabs: VPGs / VMs / RETENTION STATUS.
2. Select one or more VPGs for the retention process, and click MORE > Run retention process.
3. Click OK. The retention process starts.
■ You can monitor the progress in the RETENTION STATUS tab and the TASKS pane.
■ During the retention process you cannot perform operations on the VPG without first aborting the job.
■ If you start a live failover during the retention process, you are then prompted to abort the retention process job.
■ Scheduled retention process runs for the VPG are skipped, until the manual retention process run ends.
Monitoring Your Long Term Retention Status

You can monitor retention status of the VPG via the SETUP tab, or via the RETENTION STATUS tab.
Monitoring Retention Status via the SETUP Tab
Monitoring Retention Status via the RETENTION STATUS Tab
Monitoring Retention Status via the SETUP Tab

In the SETUP tab > REPOSITORIES sub-tab, view details of all the Repositories which were defined, and which can be used for
retention. All the Repositories created for the site are displayed in this tab.
For each Repository, the following information is displayed:

Star: A highlighted star indicates that this is the default Repository.
Repository Name: The name of the Repository. This field contains icons that you can click to edit or delete the
Repository.
Repository Type: The type of Repository.
Connectivity: Whether the Repository is connected or not.
Path: The path to the Repository.
VPGs: The VPG which uses this Repository for Long Term Retention.
Restore Points: The restore points for the retention sets out of the total retention sets saved to the Repository.
Monitoring Your Long Term Retention Status 375

TIP
In this window you can also create a new Repository by clicking NEW REPOSITORY.
Monitoring Retention Status via the RETENTION STATUS Tab

In the RETENTION STATUS tab, view details of all the Repositories, either according to VPGs, or according to VMs, which are
used for Retention. All the Repositories created for the site are displayed in this tab.
See the following:

■ “RETENTION STATUS tab, VPGs Sub-tab”, on page 376
■ “RETENTION STATUS tab, VMs Sub-tab”, on page 377
RETENTION STATUS tab, VPGs Sub-tab

View details of the retention jobs by VPG.You can filter information in columns via the filter icon next to each column title. You
can also sort the list by each column.
By default, the GENERAL view is selected. In addition to filtering and sorting of columns, you can click RUN DETAILS to view
information on the retention processes sessions.
RETENTION STATUS tab, VPGs Sub-tab - GENERAL View
RETENTION STATUS tab, VPGs Sub-tab - RUN DETAILS View
RETENTION STATUS tab, VPGs Sub-tab - GENERAL View

VPG Name: The name of the VPG.

Repository Name: The name of the Repository where the Repository set are to be stored.
Repository Site: The site where the VPG Repository is located. The retention sets are stored on a network shared drive
which is accessible from this site.
Status: The status of the job: Running or Scheduled.
VPG Size: The size of the VPG in the last run, which is stored on disk.
Result of Last Run: The result of the last run: Full success, Partial success, or Failed.
Restore Points: The restore points for the retention sets out of the total retention sets run for the VPG.
See also Adding or Removing Columns from the View.

RETENTION STATUS tab, VPGs Sub-tab - RUN DETAILS View

The following information is displayed in the RUN DETAILS view:

Time of Last Run: The time of the last run. If a retention process has not yet run on this VPG, the field is empty.
Next Scheduled Run: The time of the next scheduled run.
Last Successful Run: The date and time of the last successful retention process.
See also Adding or Removing Columns from the View.
Adding or Removing Columns from the View
Click the configuration icon ( ), then click Show/Hide Columns to display a window with a list of additional columns which
can be added to the view.
Repository Site: The site where the VPG is retained. The retention sets are stored on a network shared resource
Status: The status of the job: Running or Scheduled.
ZORG: A name given to an organization by a cloud service provider. For details refer to Zerto Cloud Manager
No. of Volumes: The number of volumes protected by the VPG.
Repository Name: The name of the Repository where the retention set is stored.
Protected Site: The name of the site.
Last Run Size: The size of the last retention set performed by Zerto Virtual Manager.
VPG Size: The size of the VPG in the last run, which is stored on disk.
No. of VMs: The total number of virtual machines protected by the VPG.
RETENTION STATUS tab, VMs Sub-tab

View details of the retention sets by virtual machine.
RETENTION STATUS tab, VMs Sub-tab - GENERAL View


Protected Site: The name of the site where the VPG is protected.
Repository Site: The site where the virtual machine is backed up. The retention sets are stored on a network shared
drive which is accessible from this site.
Status: The status of the retention set.
Repository Name: The name of the Repository where the retention set is stored.
VM Size: The size of the VMs stored on disk.
RETENTION STATUS tab, VMs Sub-tab - RUN DETAILS View

The following information is displayed in the RUN DETAILS view:
VM Name: The name of the Virtual machine.
Protected Site: The name of the site where the VPG is protected.
Result of Last Run: The result of the last run: Success, Partial success, or Failed.
Time of Last Run: The time of the last run.
Next Scheduled Run: The time of the next scheduled run.
Last Successful Run: The date and time of the last successful retention process.
MORE Options
Click MORE > Stop Retention Process to abort a running job. Any virtual machine volumes already stored in the repository are
not removed and the job status is partial if there are any stored volumes.
Click MORE > Run Retention Process to start a job for a selected VPG, outside of the schedule for that VPG.
Adding or Removing Columns from the View
Click the configuration icon ( ), then click Show/Hide Columns to display a window with a list of additional columns which
can be added to the view.
VPG Name:
Repository Site: The site where the VPG is restored. The retention sets are stored on a network shared resource
Repository Name: The name of the Repository where the retention sets are to be stored.
ZORG: A name given to an organization by a cloud service provider. For details refer to Zerto Cloud
Manager Administration Guide.
Status: The status of the retention set: Running or Scheduled.
Last Run Size: The size of the last retention set performed by Zerto Virtual Manager.
VM Size: The size of the VM in the last run, which is stored on disk.
# of Volumes: The number of volumes associated with the VM.

Searching for Files/Folders and Restoring their VMs or VPGs

Search and Restore allows the user to quickly search for files and folders in specific VMs and restore either the virtual machine
or VPG once the desired restore point is identified.
To use Search and Restore, the VM’s File System must first be indexed.
Use the following procedures to first index the VM’s file system, and then to run Search and Restore:
1. Configuring File System Indexing
2. Running Search and Restore Operations
Configuring File System Indexing

Zerto can index the VM's file system so the VM's file and folder names can be easily and quickly searched for. To do so, the
user must perform the following procedures:
1. First, set an Indexing Repository. See Setting an Indexing Repository.
2. Then, enable File System Indexing for specific virtual machines in the VPG Configuration. See Enabling Virtual Machines
for File System Indexing.
Setting an Indexing Repository

Zerto's indexed data is saved in a Repository. The Indexing Repository is set through the Site Settings. Before you proceed, read
the Considerations:.
Considerations:
■ All VMs File System Indexing meta-data is saved on a single Repository.
■ File System Indexing meta-data can be saved on an SMB Repository only. Make sure an SMB Repository is already
configured in “Creating a New Repository for Retention”, on page 369.
■ The same SMB Repository can be used as an Indexing Repository and as a Long Term Retention Repository. Or, a
dedicated SMB Repository can be used for File System Indexing meta-data only.
To set an indexing Repository:

1. In the Zerto User Interface, click SETTING ( ) in the top right of the header and select Site Settings.
The Site Settings window is displayed, with the default tab, Site Information, open
2. Click LTR Settings tab
3. Choose an SMB Repository from the Indexing Repository drop-down menu. You can change the indexing Repository to a
different SMB Repository at any point. The change will affect only future file system indexing operations. Any previously
created indexes will still be enabled for Search by Zerto as long as the Repository is configured under Setup > Repositories.
The SMB Repository selected as the indexing Repository cannot be deleted from the Setup > Repositories list. In order to
delete, make sure to first set a different SMB Repository for indexing or select None.
Searching for Files/Folders and Restoring their VMs or VPGs 379

Selecting None from the indexing Repository menu will cause all subsequent file system indexing operations to fail. In that
case, disable file system indexing from any VM currently selected for indexing.
Enabling Virtual Machines for File System Indexing

Enabling virtual machines for indexing can be done when you first create the VPG to protect virtual machines. You can also
enable virtual machines for indexing by editing an existing VPG.
Note: Indexing, like any other VPG task or operation, blocks any other operation on the VPG, except for Failover.
Considerations:
■ File System Indexing processes are launched after all the VPG VMs have completed their retention process operations. See
Step 8 in Enabling Long Term Retention for the VPGs.
■ File System Indexing is considered successful only if the retention operations are successful. If a retention operation of a
VPG fails, the indexing of the VMs within that VPG will also fail.
■ Failure to index a VM's file system does not impact the retention set itself.
■ Up to 100 millions entries (Files or Folders) can be indexed per ZVM (under optimal, well scheduled indexing operations).
■ You can index 3 virtual machines in parallel and up to 1 per recovery host.
To enable virtual machines for file system indexing:

1. Click the File System Indexing drop-down menu. The list of protected virtual machines appear. By default, all VMs are not
selected.
Note: Enabling indexing can be done only if Long Term Retention is enabled.
2. Select the virtual machines to index.

3. Click DONE.
4. Proceed with “Running Search and Restore Operations”, on page 381.
Indexing Execution
The index will run after the retention process for all the VMs in the VPG had completed successfully. The indexing task is
automatically created and can be stopped manually by going to Tasks > Abort.

Running Search and Restore Operations

■ Perform a Search for files and folders within the virtual machines which were configured for File System Indexing.
■ Select the files and folders in a retention set and restore on the recovery site.
The virtual machines on the protected site remain protected and live.
(vCloud Director only) When the recovery site, where the retention sets are stored, is managed by a cloud service provider using
vCloud Director, only the cloud service provider can initiate the restore. When you restore a VPG to a recovery vCD site, the
VMs are created in a vCenter Server and have to be manually imported into vCD.
Considerations:
■ When running multiple Search operations, make sure to monitor the ZVM resources during these operations.
To run a search for files and folders:

1. In the Zerto User Interface select ACTIONS > SEARCH AND RESTORE.
The Search and Restore window is displayed.
Only VMs that were successfully indexed appear in the VM in a VPG search field.
2. You can specify the following values, which are then applied to the Search:
■ VM in VPG: Type the name of the virtual machine.
■ Retention Set Specify the date range of the search. The default range is the last 7 days.
Date:
■ File/folder Type the file or folder name to search for. You can use the wildcard * at the end, middle or the
name: beginning of a word.
3. Click the Search Icon.
The Search results appear. The Search is limited to 500 results at a time.

The Search results specify the name of the file or folder and the path.
4. Select the file or folder. A list of revisions of that file or folder is displayed according to the retention set date previously
selected.
The revisions display a list of restore points of the retention sets. The revisions view specifies the following:
■ Date Modified: The date in which the file or folder was modified.
■ Retention Set The date of the restore point.
Date:
■ Size: The size of the file. The size of a folder is not displayed.
■ Actions: Select either Restore VM or Restore VPG.
5. Choose a restore point and click the Restore VM or Restore VPG icon.
The Restore window is displayed on the VM SETTINGS step.

The list of virtual machines that can be restored is displayed.

6. You can specify the following which are then applied to all the virtual machines to be restored:
■ Restore on Host: The IP address of the host where you want the VPG restored.
After selecting a host, the Restore on Datastore field is displayed.
■ Restore on Datastore: The datastore to use for the restored VPG files.
- Or -
■ Alternatively, you can use the recovery host and storage specified for each virtual machine in the VPG definition by
clicking APPLY VPG CONFIGURATION. To use this option, the VPG must still be available.
7. To change the information in a field, click the field and update the information.
8. To change the host or datastore information for several virtual machines at the same time, select the virtual machines and
click EDIT SELECTED.
The Configure VM Settings window is displayed.
If one or more of the volumes which was retained, was deleted after the retention set was created, or if one of the volumes
failed, the entire retention process for that VM will fail.
You can specify the following values, which are then applied to all the selected virtual machines:
■ Restore on Host: The IP address of the host where you want the virtual machines restored.
■ Restore on Datastore: The datastore to use for the restored virtual machine files.
■ Power On: Select this if you want the restored virtual machines to be powered on.
- Or -
Alternatively, you can use the recovery host and storage specified for each virtual machine in the VPG definition by clicking
APPLY VPG CONFIGURATION.
9. To specify the volume information for each virtual machine, from the Actions column, click Volumes.

The Volumes dialog is displayed:
10. To edit information in a field, click the field and update the information.
11. To edit information for several datastores at the same time, select the datastores and click EDIT SELECTED.
The Edit Selected Volumes dialog is displayed.
12. Specify the datastore settings.

■ Datastore / Raw Disk: The storage or RDM disk where the virtual machine files will be restored.
■ Path: This field cannot be edited in this window. The path to the datastore/storage/RDM disk. If more than one
datastore is selected, the path is not displayed.
■ Thin: Whether the virtual machine disks will be thin-provisioned or not.
13. Click Save to return to the Volumes dialog, then click DONE.
14. To specify the NIC information for each virtual machine, from the Actions column, click NICs.

The NICs window is displayed:
16. To edit information for several virtual NICs at the same time, select the NICs and click EDIT SELECTED.
The Edit NIC dialog is displayed.
17. Specify the NIC settings.

■ NIC Name: The name of the selected NIC.
■ Network: The network to use for the restored virtual machine.
■ Create new MAC address: The Media Access Control address (MAC address) to use. The default is to use the same
MAC address for the restored virtual machine that was used in the protected site.
Select the checkbox to create a new MAC address on the restore site.

■ Change vNIC IP Whether or not to keep the default virtual NIC (vNIC) IP configuration.
Configuration:
You can only change the vNIC IP after the restore has completed with VMware Tools
installed.
■ If you select a static IP connection, you must set the IP address, subnet mask, and
default gateway. Optionally, change the preferred and alternate DNS server IPs and
the DNS suffix.
■ If you select DHCP, the IP configuration and DNS server configurations are assigned
automatically, to match the protected virtual machine. You can change the DNS
suffix.
■ IP Address: The IP for the restored virtual machine. This can be the same IP as the original protected
virtual machine.
■ Preferred DNS Server: The IP address of the primary DNS server to handle Internet protocol mapping.
■ Alternate DNS Server: The IP address of the alternate DNS server.
■ DNS Suffix: The DNS name excluding the host.
18. Click OK.
19. Click DONE.
20. Click NEXT.
The SUMMARY step is displayed. Review the details of the restore.
21. If this is the retention set which you want to restore, click RESTORE.
The virtual machines are created from the Repository at the recovery site.

Restoring VMs or VPGs from a Repository

Use Restore to recover the VPG's virtual machines on the recovery site from a retention set. The virtual machines on the
protected site remain protected and live.
You restore a VPG to the recovery site, by specifying the VPG with retention.
(vCloud Director only) When the recovery site, where the retention sets are stored, is managed by a cloud service provider using
vCloud Director, only the cloud service provider can initiate the restore. When you restore a VPG to a recovery vCD site, the
retained VMs are created in a vCenter Server and the virtual machines have to be manually imported into vCD.
The Restore operation has the following basic steps:
1. The ZVM (via the VRA) finds the specified retention set in the Repository.
2. The ZVM creates the virtual machines under the designated host and storage on the recovery site.
The host and storage can be the same as the recovery host and storage specified in the VPG, or it can be any other host
and associated storage in the site.
3. ZVM uses the VRA to restore the disks from the Repository to the specified datastores.
Note: If any issues occur while restoring the retained volumes, as long as there are still volumes to restore, the restore
process can continue to restore the remaining volumes.
4. If requested, the restored virtual machines are powered on, and IP Settings are configured.
Restoring VMs or VPGs

Use the following procedure to restore a VM or a VPG from the repository.
To restore a VPG:
1. In the Zerto User Interface select ACTIONS > RESTORE.
The Restore wizard is displayed.
2. From the drop-down list, select the VPG to restore.

3. Click NEXT.
Restoring VMs or VPGs from a Repository 387

The RESTORE SETTINGs step appears, displaying all the available retention sets.
4. From the list of available retention sets, select the retention set to restore, where:
■ Point in Time: The date and time the retention set was performed.
■ Restore Site: The recovery site for the VPG.
■ VMs: The number of virtual machines with retention, out of the total number of virtual machines.
■ Volumes: The number of volumes with retention, out of the total number of volumes for the virtual machines.
■ Repository: The name of the repository where the retention set is stored.
■ ZORG: (ZCM sites only) The Zerto organization for which the retention set was created. This field only has a
value if the Zerto Cloud Manager is connected to the site. For details, see Zerto Cloud Manager
5. When you select a retention set to restore, the list of virtual machines in the retention set appear, displaying the following
information:
# Volumes Retained: The number of volumes retained, out of the total number of volumes for the virtual machine.
6. If the restore site has the option to restore to vCD, select where to attach the restored VMs, either to VC or vCD.
7. Click NEXT.
The VM SETTINGS step is displayed.

- Or -
- Or -





Configuration:
installed.
the DNS suffix.
suffix.
virtual machine.
20. Click OK.
21. Click DONE.
22. Click NEXT.
Storing Retention Sets

Retention sets are kept on the configured Repository for the retention period specified as part of the Retention Policy
configuration.
The same retention set might be marked as a relevant copy for several retention periods. For example, it can be a retention set
used for both a monthly copy as well as a yearly one.
Once a retention-set expires (i.e. all configured retention periods are not referencing it), it is removed from the system. Once a
day, Zerto scans the Repository and deletes retention sets which expired.
Storing Retention Sets 392

CHAPTER 22: ZERTO REPORTS
Zerto includes reporting for the following:

■ “Outbound Protection Over Time Report”, below
■ “Protection Over Time by Site Report”, on page 394
■ “Recovery Reports”, on page 395
■ “Resources Report”, on page 397
■ “Monthly Usage Report” on page 400
■ “VPG Performance Report”, on page 401
Outbound Protection Over Time Report

Information about how much data is actually being protected against the amount configured for any of the sites can be
displayed in the Outbound Protection Over Time report under the REPORTS tab.
The data displayed can be up to 30 minutes old, since the Zerto Virtual Manager collects the relevant data every 30 minutes.
You can filter the information by the following:

From and To: The dates for which you want information.
Recovery Site: Select the site for which you want information or select all sites. If all sites are selected, All is displayed. The
dropdown list displays all sites paired with the local site.
Click APPLY to apply the selected filtering and produce the report.
Click RESET to reset the display to the default values.
Zerto Reports 393
Zerto Reports
Protection Over Time by Site Report

Information about the virtual machines and the amount of data on the recovery site can be displayed in the Protection Over
Time by Site report under the REPORTS tab. When the report is displayed for the first time, information is shown per 30 minute
intervals.
The data displayed can be up to 30 minutes old, since the Zerto Virtual Manager collects the relevant data every 30 minutes.

From and To: Select the dates for which you want information.
Protected Site: Select the sites for which you want information. The list displays all sites paired with the local site.
Resolution: Select the resolution for the report: daily, weekly, monthly, or All.
Note: By default, the Protection Over Time By Site report is only available for the last 90 days.
Differences might occur between the value displayed in the Used Journal column in this report and the value displayed in the
Recovery Journal Used Storage column retrieved from vCenter or Hyper-V in the Resources report.
The Used Journal value displayed here is calculated by the VRA, based on internal journal allocations for each recovery volume.
vCenter and Hyper-V Resources reports are expected to display a larger size than in this report, and may reach up to 500MB
per virtual machine higher than reported in this report.
Protection Over Time by Site Report 394

Zerto Reports
Recovery Reports
Information about recovery operations — failover tests, moves, and failovers — can be displayed in Recovery Reports under the
REPORTS tab.
The information includes the name of the user who initiated the report, which recovery operation, the point in time , protected
and the recovery sites involved, when the recovery operation was started, when it ended, the time it took to bring up the
machines in the recovery site, the RTO, whether the operation succeeded or not, the VPG recovery settings, the virtual
machine recovery settings, and detailed recovery steps, and any notes added during a failover test
Recovery Reports are always kept, and never deleted.
You can filter the tests by the following:

■ Dates: The dates for which you want information. Only operations performed between these dates are displayed.
■ VPG: Select the VPGs for which you want information. The number of VPGs you selected is displayed. If you select All, the
total number of VPGs is shown.
■ Type: Select the recovery operations for which you want information: Failover, Move, Failover Test. If more than one
operation is selected, the number of recovery operations you selected is displayed.
■ Status: Select the statuses for which you want information: Success, Failed. If more than one status is selected, the
number of statuses you selected is displayed.
Click APPLY to apply the selected filtering.
Click EXPORT and choose PDF or ZIP to generate a report.
The report displays information by VPG, and then by virtual machine within the VPG.
The VPG information includes who initiated the operation, the type of operation, the start time and the end time of the
operation, the recovery host, storage, network, any boot order information, etc.
The information for each machine includes the steps taken during the operation, such as creating a machine and scratch
volumes for testing, when each process began and ended, and whether the operation succeeded or not.
Note: When FOT is still in progress, the end time in the Recovery Report appears as NA.
The Recovery operation start time and Recovery operation end time values are shown in UTC according to the Zerto Virtual
Manager clock in the recovery site. The Point in time value takes the checkpoint UTC time, which was created in the protected
site, and converts it to the recovery site time zone.
Recovery Reports 395

Zerto Reports
Branding the Recovery Report

A branded logo can be placed in the report in the top left corner by adding the logo as a .png file to the
<ZertoInstallFldr>\Zerto\Zerto Virtual Replication\gui\ folder with the name provider_logo.png.
The folder ZertoInstallFldr is the root folder where Zerto in the recovery site is installed. For example, C:\Program Files\Zerto.
Recovery Reports 396

Zerto Reports
Resources Report
Information about the resources used by the virtual machines being recovered to a particular site is displayed in the Resources
report under the REPORTS tab. The information is collected at fixed times that are defined in the Reports tab of the Site
Settings dialog in the recovery site. Information for the report is saved for 90 days when the sampling period is hourly and for
one year when the sampling period is daily.
The report collects the resource information for the virtual machines being recovered to the site where the report is run.
If no virtual machines are recovered to the site where the report is run, the report is empty.
From and To: The dates for which you want information.
Click EXPORT to generate the report, which is produced as an Excel file.
The information presented in this report is divided into three tabs:
Details Tab: Shows information for each protected virtual machine.
Performance Tab: Shows bandwidth and throughput information for each virtual machine in a table and in a graph.
Target Host Tab: Shows information per host in the recovery site.
Using a REST API to Generate a Report

Zerto exposes a REST API to produce resource data. The report is generated by passing a URL. For details about the
ResourcesReport API (and all other Zerto REST APIs), see the Zerto Virtual Replication RESTful API Reference Guide.
Details Tab
The Details tab includes the names and IDs of the virtual machines being protected and, for each virtual machine, the
timestamp for the information, where it is protected, the CPU used, the memory used by the host and the guest, the storage
used, and other information.
Interpreting the Details Tab

The Details tab provides a breakdown of every protected virtual machine, identified by its internal identifier and name in the
hypervisor manager. The report also includes the name of the VPG that is protecting the virtual machine and information such
as the protected and recovery sites, the protected and recovery vCD Org, cluster, etc.
The Timestamp column displays the time when the last sample, as defined in the Reports tab of the Site Settings dialog, was
taken.
The VPG Type column is one of:
VC2VC: vCenter to vCenter replication
VC2VCD: vCenter to vCloud Director replication
VCD2VCD: vCloud Director to vCloud Director replication
VCD2VC: vCloud Director to vCenter replication
The ZORG column defines organizations set up in the Zerto Cloud Manager that use a cloud service provider for recovery.
The Bandwidth (Bps) and Throughput (Bps) columns display the average between two consecutive samples. With daily
samples, these figures represent the average daily bandwidth and throughput. For hourly samples, the timestamp represents
an average between the sample at the timestamp and the previous sample. A value of -1 means that the system failed to
calculate the value, which can happen for several reasons, for example:
■ Sites were disconnected when the sample was collected. Although the protected site measures the throughput and
bandwidth, the recovery site logs the results.
■ The bandwidth or throughput values at the time of the sample was lower than the bandwidth or throughput value in the
previous sample. This can happen, for example, if the protected site VRA is rebooted since the sample values are not
stored persistently by the VRA.
Resources Report 397

Zerto Reports
■ If valueInLastSample does not exist, since currentValue is the first sample for the virtual machine, the data is not
calculated.
Bandwidth is calculated as: (currentValue – valueInLastSample)/elapsedTtime
For example:
TIME ACTION/DESCRIPTION
2:29:59.999 A virtual machine is placed in a VPG
2:30 A sample is generated. The total transmitted bytes is zero since the virtual machine was just placed in the
VPG
2:30-2:59.999 The VM is writing data at 1MB/minute
3:00 The virtual machine lowers its write rate to 0.5MB/minute
3:30 A new sample is calculated. Current value of total data transmitted is 45MB:
1MB/minute)*(30 minutes) + (0.5MB/minute)*(30 minutes)
Last value of total data transmitted is 0, from the 2:30 sample.
Bandwidth = (45MB-0)/(60 minutes) = 0.75MB/minute = 13107Bps
Report output fields

The following describes the fields in the Details tab.
PARAMETER DESCRIPTION
Active Guest Memory (MB) The active memory of the virtual machine.
Bandwidth (Bps) The average bandwidth used between two consecutive samples, in bytes per second.
Consumed Host Memory (MB) The amount of host memory consumed by the virtual machine.
CPU Limit (MHz) The maximum MHz available for the CPUs in the virtual machine.
CPU Reserved (MHz) The MHz reserved for use by the CPUs in the virtual machine.
CPU Used (MHz) The MHz used by the CPUs in the virtual machine.
CrmId The CRM identifier specified in Zerto Cloud Manager for an organization that uses a
cloud service provider for recovery.
Memory (MB) The virtual machine defined memory.
Memory Limit (MB) The upper limit for this virtual machine’s memory allocation.
Memory Reserved (MB) The guaranteed memory allocation for this virtual machine.
Number Of vCPUs The number of CPUs for the virtual machine.
Number Of Volumes The number of volumes attached to the virtual machine.
Recovery Journal Provisioned Storage The amount of provisioned journal storage for the virtual machine. The provisioned
(GB) journal size reported can fluctuate considerably when new volumes are added or
removed.
Recovery Journal Used Storage (GB) The amount of journal storage used by the virtual machine.
Differences might occur between the value displayed in the Used Journal column in
the Protection Over Time by Site report and the value displayed here, which is retrieved
from vCenter or Hyper-V.
The Used Journal value displayed in the Protection Over Time by Site report is
calculated by the VRA, based on internal journal allocations for each recovery
volume.
vCenter and Hyper-V Resources reports are expected to display a larger size than in
the Protection Over Time by Site report, and may reach up to 500MB higher per virtual
machine than reported in the Protection Over Time by Site report.

Zerto Reports
PARAMETER DESCRIPTION
Recovery Volumes Provisioned The amount of provisioned storage for the virtual machine in the target site. This
Storage (GB) value is the sum of volumes’ provisioned size.
Recovery Volumes Used Storage (GB) The amount of storage used by the virtual machine in the target site.
Service Profile The service profile used by the VPG.
Source Cluster The source cluster name hosting the virtual machine.
Source Host The source host name hosting the virtual machine.
Source Organization VDC The name of the source vDC organization.
Source Resource Pool The source resource pool name hosting the virtual machine.
Source Site The source protected site name, defined in the Zerto User Interface.
Source vCD Organization The name of the source vCD organization.
Source Volumes Provisioned Storage The amount of provisioned storage for the virtual machine in the source site. This
(GB) value is the sum of volumes’ provisioned size.
Source Volumes Used Storage (GB) The amount of storage used by the virtual machine in the source site. This value is the
sum of the volumes’ used size.
Source VRA Name The name of the source VRA used to send data to the recovery site.
Target Cluster The target cluster name hosting the virtual machine.
Target Datastores The target storage used by the virtual machine if it is recovered.
Target Host The target host name hosting the virtual machine when it is recovered.
Target Organization vDC The name of the target vDC organization.
Target Resource Pool The target resource pool name where the virtual machine will be recovered.
Target Site The target site name, defined in the Zerto User Interface.
Target Storage Policy The target vCD storage policy used.
Target vCD Organization The name of the target vCD organization.
Target VRA Name The name of the VRA managing the recovery.
Throughput (Bps) The average throughput of the VM used between two consecutive samples, in bytes
per second.
Timestamp The date and time the resource information was collected. The value can be
converted to an understandable date using code similar to the following:
var date = new Date(jsonDate);
or code similar to the Perl code example, jsonDateToString($), described in Zerto
Virtual Replication RESTful API Reference Guide.
VM Hardware Version The VMware hardware version.
VM Id The internal virtual machine identifier.
VM Name The name of the virtual machine.
VPG Name The name of the VPG.
VPG Type The VPG type:
VCVpg: VMware vCenter Server
VCvApp: Deprecated
VCDvApp: VMware vCloud Director vApp
PublicCloud: Amazon WebServices or Microsoft Azure
HyperV: Microsoft SCVMM
ZORG The name assigned to an organization using a cloud service provider for recovery. The
name is created in the Zerto Cloud Manager. For details, see the Zerto Cloud Manager

Zerto Reports
Performance Tab
The Performance tab shows bandwidth and throughput information for each virtual machine per sampling period in a table and
in a graph. The Performance tab enables the user to view the total bandwidth and throughput per sampling period.
The graph allows the user to view performance trends over time per VM.
For full explanation of the bandwidth and throughput information, refer to the “Details Tab”, on page 397.
You can filter information by date and VM name.
The following describes the fields in the Performance tab:
PARAMETERS DESCRIPTION
Time Stamp For explanation see the Details tab.
Bandwidth (Bps) The average bandwidth of the VM used between two consecutive samples, in bytes
per second.
Throughput (Bps) The average throughput of the VM used between two consecutive samples, in
bytes per second.
Total Bandwidth The total bandwidth of all VMs during the measured period.
Total Throughout The total throughput of all VMs during the measured period.
Target Host Tab

The Target Host tab shows information per host in the recovery site. This enables the user to perform capacity planning on the
recovery host. You can filter information by time and by host.
The following describes the fields in the Target Host tab.
PARAMETERS DESCRIPTION
Active Guest Memory The active memory of the virtual machine.
(MB)
CPU Used (MHz) The MHz used by the CPUs in the virtual machine.
Host The Target Host's IP address or DNS name.
Total Bandwidth The total bandwidth of all VMs replicating to the host during the measured period.
Total Throughput The total throughput of all VMs replication to the host during the measured period.
vCPUs The number of CPUs for the virtual machine.
VMs The number of VMs protected.
Volumes The number of volumes attached to the virtual machine.
Monthly Usage Report

Information about usage can be displayed in the Monthly Usage report under the REPORTS tab. The Monthly Usage Report
can only be viewed with a cloud license.
The information is organized by organization and within each organization by site, then virtual protection group (VPG) and
then by the virtual machines in each VPG.
This report is mostly used by cloud service providers.
■ Year: The year of interest.
■ Month: Select the month to review.
Monthly Usage Report 400

Zerto Reports
For each month, the usage report displays the number of virtual machines protected during the month and the average number
per day in the month. For example, if fifteen virtual machines are protected in a few VPGs starting on the 28th of the month in a
thirty day month, the total days will be 30 (two days multiplied by fifteen machines) and the VM Count will be 1 (Total days
divided by the number of days in the month).
Click EXPORT to a CSV or ZIP file to generate the report.
The ZIP file option saves the report as a zipped CSV file in a zipped file called UsageReport.zip.
VPG Performance Report

Performance graphs for all VPGs or for an individual VPG can be seen in the VPG Performance report under the REPORTS tab.
These graphs show more detailed resolution than the corresponding graphs in the DASHBOARD tab.
You can specify the VPGs whose performance should be displayed. When you request information about multiple VPGs, each
VPG is shown in a different color, with a key at the top of the report that maps each color to the VPG it represents.
Position the cursor on a graph line to see exact information about that point.
VPG Performance Report 401

CHAPTER 23: TROUBLESHOOTING
You can handle problems related to the WAN connecting the protecting or recovery sites, or other problems using a variety of
diagnostic and troubleshooting tools.
■ “Ensuring the Zerto Virtual Manager is Running”, below
■ “Troubleshooting Needs Configuration Problems”, on page 402
■ “Troubleshooting GUI Problems”, on page 403
■ “Troubleshooting VRA Problems”, on page 403
■ “Handling Lack of Storage Space for Recovered Virtual Machines”, on page 403
■ “Zerto Virtual Replication Diagnostics Utility”, on page 404
■ “Collecting Zerto Logs”, on page 404
■ “Re-IP Configured As Static Fails During FOL with Reverse Protection”, on page 411
For details about Zerto Virtual Manager alarms, alerts, and events, refer to Zerto Guide to Alarms, Alerts and Events.
Ensuring the Zerto Virtual Manager is Running

If you have problems accessing the Zerto User Interface, check under Windows Services, on the machine where Zerto is
installed, that the Zerto Virtual Manager Windows service is started.
Troubleshooting Needs Configuration Problems

When the VPG status changes to Needs Configuration, the settings in the VPG need to be checked and, when necessary,
updated.
The following scenarios result in the VPG status changing to Needs Configuration:
Troubleshooting 402
Troubleshooting
■ A protected disk resize operation fails, for example when there is not enough disk space.
■ When a volume is added to a protected virtual machine and the added volume has no matching storage or not enough
room on the recovery storage.
■ When a volume is added to a protected virtual machine and the VPG settings are not updated because of a site
disconnection or a vCenter Server error. In some situations, after the sites reconnect, the state corrects itself
automatically.
■ When performing a Failover or Move operation, if you do not specify reverse protection.
■ An Org vDC network is removed from the recovery site that has a VPG replicating to it.
Troubleshooting GUI Problems

Host is Not Displayed in List of Hosts in the Create VPG Wizard
If the installation of a VRA completes successfully, but the allocation of the IP takes too long, when attempting to specify the
host to recover a VPG, the host where the VRA is installed does not appear in the list, you have to uninstall and then re-install
the VRA.
Troubleshooting VRA Problems

VPG Syncing Takes a Long Time – Network Problems
Check the network. If the firewall configuration is modified, the VRA TCP connections have to be reset. After a VRA disconnect
and reconnect the system can wait for up to fifteen minutes before syncing the sites after the reconnection.
Host is Not Displayed in List of Hosts in the Create VPG Wizard

If the installation of a VRA completes successfully, but the allocation of the IP takes too long, when attempting to specify the
host to recover a VPG, the host where the VRA is installed does not appear in the list, you have to uninstall and then re-install
the VRA.
VRA Crashes During Promotion

If a VRA is promoting data to a recovery virtual machine and the VRA fails, the VRA starts up automatically but you might have
to restart the virtual machine manually and then the promotion will continue.
Cannot Install a VRA After Uninstalling a VRA on the Host

Uninstalling a VRA sometimes leaves a zagentid folder and you cannot install a new VRA, because of an old, unused, zagentid
folder. Delete the zagentid folder manually.
Note: This only happens if a file was manually added to the zagentid folder.
Handling Lack of Storage Space for Recovered Virtual Machines

If a recovery virtual machine does not have enough space on the recovery site, the promotion of data to the recovered virtual
machine hangs. If this occurs you should add more space to the machine and then start the machine. The promotion will then
continue. You can check the available space for each datastore in SETUP > DATASTORES.
Troubleshooting GUI Problems 403

Troubleshooting
Zerto Virtual Replication Diagnostics Utility

Zerto includes a diagnostics utility to help resolve actual and potential problems. Using the diagnostics tool, you can do the
following:
■ Collect logs to help Zerto support resolve problems. The Zerto Virtual Manager must be running on each site for which you
want logs. See “To collect logs for Zerto support to use when troubleshooting:”, below.
■ Collect local Zerto Virtual Manager logs. Use this option if the Zerto Virtual Manager is not running. See “To collect local
Zerto Virtual Manager logs when the Zerto Virtual Manager is not running:”, on page 409.
■ Check the connectivity between Zerto components. See “Check Connectivity Between Zerto Components”, on page 281.
■ Reconfigure the Zerto Virtual Manager, including the IP addresses of the vCenter Server and of the machine running the
Zerto Virtual Manager, and the SSL certificate used when accessing the Zerto User Interface. See “Reconfiguring the Zerto
Virtual Manager Setup”, on page 282.
■ Export VPG settings to an external file and import these settings. This option is used when upgrading Zerto, described in
the Zerto Installation Guide.
■ Reconfigure access to the Microsoft SQL Server that is used by the Zerto Virtual Manager. This database was specified
during the installation of Zerto. See “Reconfiguring the Microsoft SQL Server Database Used by the Zerto Virtual
Manager”, on page 284.
Note: A separate installation kit is available for download from the Zerto Support Portal downloads page that installs the Zerto
Virtual Replication Diagnostics utility as a standalone utility on any Windows machine that has Microsoft .NET Framework
4.7.2 installed. The installation executable is included as part of the standalone utility installation kit and it requires an
additional 1.8GB of free disk space.
Collecting Zerto Logs

Virtual replication logs can be collected to help Zerto support resolve problems related to Zerto Virtual Replication. Virtual
replication logs can be collected in the following ways:
“Using Remote Log Collection”, below
“Using the Zerto Diagnostics application”, on page 405
Using Remote Log Collection

Remote Log Collection allows customers to authorize Zerto support engineers to collect logs from their environment. By using
remote log collection customers can avoid having to use the Diagnostic Tool on their ZVM server in order to collect logs for
analysis, a potentially complex and time-consuming procedure.
To enable Remote Log Collection:
1. In the Zerto User Interface, click SETTING ( ) in the top right of the header and select Remote Support.
The Remote Support dialog is displayed.
2. Click the drop down menu to display the remote log collection options.
3. Select the remote log collection option you wish to allow:
■ Never: Remote log collection is not allowed (default). If remote log collection is currently allowed, the remote
connection will be terminated if you select this option.
Zerto Virtual Replication Diagnostics Utility 404

Troubleshooting
■ For the next 30 days: Remote log collection is allowed. This permission will automatically terminate in 30 days unless
terminated by selecting the Never option.
■ Only for the duration of a specific case: You will be prompted to select the Case number from the drop-down list. The
list contains all the active cases opened under the account that the Zerto Virtual Manager is registered to.
Remote log collection will be allowed for as long as the case is active or until remote log collection is terminated by
selecting the Never option.
4. Click Save.
Using the Zerto Diagnostics application

You can collect logs using the diagnostics tool to help Zerto support resolve problems when the Zerto Virtual Manager is
running or when the Zerto Virtual Manager is not running.
■ When the Zerto Virtual Manager is running, see “To collect logs for Zerto support to use when troubleshooting:”, below.
This option enables you to specify the logs that you want to collect, generated by Zerto, for example VRA logs, as well as
logs generated by VMware, for example, vCenter Server logs or host logs. The Zerto generated logs can be filtered by any
alerts issued and by the VPGs that require analysis to identify problems.
■ When the Zerto Virtual Manager is not running, see “To collect local Zerto Virtual Manager logs when the Zerto Virtual
Manager is not running:”, on page 409.
To collect logs for Zerto support to use when troubleshooting:

1. Open the Zerto Diagnostics application. For example, via Start > Programs > Zerto Virtual Replication > Zerto Diagnostics.
2. Select the Collect the Zerto Virtual Replication logs for use by Zerto support option.
3. Click Next.
Collecting Zerto Logs 405

Troubleshooting
The Initialize dialog is displayed.
4. Specify the following and click Next.

IP / Host Name: The IP of the Zerto Virtual Manager where the log collection runs from. Logs are collected from this site
and from the paired site.
Port: The port used for inbound communication with the Zerto Virtual Manager.
Your Company Name: A name to identify the log collection for the customer. This information is used by Zerto support. An
account name must be entered. After this information is added, it is displayed in subsequent uses of the diagnostics utility.
Email: An email address for use by Zerto support when analyzing the logs. An email address must be entered. After this
information is added, it is displayed in subsequent uses of the diagnostics utility.
Timeframe: The amount of time you want to collect logs for. The more time, the bigger the collection package.
Case Number: The case number assigned by Zerto support, if one already exists. Optional.
Description: An optional free text description of the reason for collecting the logs.
After clicking Next the utility connects to the Zerto Virtual Replication and if any alerts have been issued, they are
displayed in the Select Alerts dialog.
If there are no alerts, this dialog is skipped.
5. Select any alerts that need analyzing from the list and click Next.

Troubleshooting
The Select VPGs dialog is displayed.
6. Select the VPGs that you want analyzed and click Next.
The Customize dialogs are displayed. These dialogs can generally be left with their default values.
The following Customize dialogs are displayed:
■ The Select Sites dialog
■ The Select VRA Hosts dialog
■ The Select vSphere Logs dialog
■ The Select vCloud Director Logs dialog
The Select Sites dialog is displayed, with the list local site and all the sites paired to it listed.
Those sites that are either protecting or used for recovery for any of the selected VPGs from the previous dialog are
automatically selected.
Note: Zerto Virtual Manager logs from both sites are collected when both sites are trusted sites otherwise only logs from
the local site are collected.
7. Verify that the sites that need analyzing are selected and click Next.
The Select VRA Hosts dialog is displayed.
Those hosts with VRAs that are used to protect or recover any of the selected VPGs are automatically selected.

Troubleshooting
You can change the collection criteria using the plus and minus buttons. The expected size of the collection package is
updated dependent on the selected VRAs.
8. Verify that the host with VRAs that need analyzing are selected and click Next.
The Select vCenter Server Logs dialog is displayed.
Specify the vSphere data to collect.

Collect vCenter Server Diagnostics: Collects vCenter Server diagnostics.
Collect Host Logs: Collects logs generated for hosts. If you check the Collect host logs checkbox, you can select the
host logs to be included in the collection by using the plus and minus buttons.
The vSphere data that can be collected enlarges the size of the log collection package significantly and is not collected by
default.
9. Click Next.
The Select vCloud Director Logs dialog is displayed.
10. Click Next.

The Save Log Destinations dialog is displayed.
11. Specify destination for the files that you want collected.
Destination: The name and location where the log collection will be saved.

Troubleshooting
Automatically upload files to Zerto FTP Server: When this option is checked, the log collection is automatically uploaded
to a specified FTP site.
If you choose to upload the log collection to a site that you specify, make sure that the site is up.
12. Specify the FTP site to send the collection and the protocol to use, either FTP or HTTP.
13. Click Next.
The Review dialog is displayed.
Check that you have specified everything you want to collect and if you want to make changes, click Back to change the
selection.
14. Click Start.
The data is collected and stored in the destination file which, by default, is timestamped. If specified, the collection is also
sent to an FTP site.
Note: The log collection is performed on the server. Canceling the collection in the GUI does not stop the collection from
continuing on the server and a new log collection cannot be run until the running collection finishes.
When the log collection has completed the result is displayed. For example:
15. Click Done to return to the Zerto Virtual Replication Diagnostics menu dialog.
16. Send the log to Zerto support, unless the Automatically upload files to Zerto FTP Server option was specified, in which case
it is automatically sent to Zerto.
To collect local Zerto Virtual Manager logs when the Zerto Virtual Manager is not running:
1. Open the Zerto Diagnostics application. For example, via Start > Programs > Zerto > Zerto Virtual Replication
Diagnostics.
The Zerto Virtual ReplicationDiagnostics menu dialog is displayed.
2. Select the Local Zerto Virtual Manager diagnostics option and click Next.

Troubleshooting
You are prompted to use the first option to collect more comprehensive diagnostics. If you continue, the Initialize dialog is
displayed.
3. Specify the details that you want collected.

IP / Host Name: The IP of the Zerto Virtual Manager where the log collection runs from. Logs are collected from this site
and from the paired site.
Port: The port used for inbound communication with the Zerto Virtual Manager.
Your Company Name: A name to identify the log collection for the customer account. This information is used by Zerto
support. An account name must be entered.
Email: An email address for use by Zerto support when analyzing the logs. An email address must be entered.
Timeframe: The amount of time you want to collect logs for. The more time, the bigger the collection package.
Case Number: An optional field for the case number assigned to the issue by Zerto.
Description: An optional free text description of the reason for collecting the logs.
4. Click Next.
The Save Log Destinations dialog is displayed.
5. Specify the details that you want collected.
Destination: The name and location where the log collection will be saved.
Automatically upload files to Zerto FTP Server: When this option is checked, the log collection is automatically uploaded
to a specified FTP site.
If you choose to upload the log collection to a site that you specify, make sure that the site is up before clicking Finish.
The data is collected and stored in the destination file which, by default, is timestamped. If specified, the collection is also
sent to an FTP site.
6. Click Next.
The collection progress is displayed. When the log collection has completed the result is displayed.
7. Click Done to return to the Zerto Diagnostics menu dialog.
8. Send the log to Zerto support, unless the Automatically upload files to Zerto FTP Server option was specified,
in which case it is automatically sent to Zerto.
Understanding the Logs

If problems arise with Zerto Virtual Manager, you can view the Zerto Virtual Manager logs to see what is happening.
The current log is called logfile.csv and resides in the <Zerto_Install_Dir>\Zerto\logs folder, where Zerto_Install_Dir is the
folder specified during the installation.
When the log reaches 10MB its name is changed to log.nnnn.csv, where nnnn is a number incremented by one each time
logfile.csv reaches 10MB. Up to 150 log files are kept.
The log file has the following format:
FFFF, yyyy-mm-dd hh:mm:ss, ####, LVL, Component, API, Message

Troubleshooting
where:
FFFF - A HEX code. For internal use.
yyyy-mm-dd hh:mm:ss - Timestamp for the message.
#### - Number for internal use.
LVL - Severity level of the message. The more messages written to the log the bigger the impact on performance. The number
of messages written to the log decreases from Debug to Error. The level can be one of the following:
Debug: All messages are written to the log. This level should only be specified during testing.
Info: Information messages.
Warn: Warning messages such as a reconnect ion occurred.
Error: Error messages that need handling to find the problem.
Component - The specific part in the Zerto Virtual Manager that issued the message.
API - The specific API that issued the message.
Message - The message written in the log.
The following is a sample from a log:
07f4c878,2010-12-01 19:54:41.4237,Debug,5,
Zerto.Zvm.RemoteZvmConnector.ResyncingRemoteZvmConnector,
TestConnectivity,TestConnectivity returning true,
07f4c878,2010-12-01 19:54:41.7362,Info,11,
Zerto.Zvm.ZvmServices.Protection.PromotionMonitor,
PromotionMonitoringThreadFunc,Promoting protection groups: ,
07f4c878,2010-12-01 19:54:42.7987,Info,9,
Zerto.Infra.ZvmReaderWriterLock,LogLock,Synchronizer: Enter Writer,
07f4c878,2010-12-01 19:54:42.7987,Info,9,
Zerto.Zvm.ZvmServices.ReconnectingConnectorProxy,
GetConnector,"Connecting IP=106.16.223.86, PORT=4005, attempt (1/3)",
07f4c878,2010-12-01 19:54:42.7987,Debug,9,
Zerto.Zvm.VraConnector.VraNetworkConnector,
Connect,try to connect 106.16.223.86:4005 ...,
07f4c878,2010-12-01 19:54:43.0643,Debug,17,
Zerto.Zvm.ZvmServices.CrossSiteService,Ping,Ping,
07f4c878,2010-12-01 19:54:43.0643,Debug,17,
Zerto.Zvm.ZvmServices.PingService,Ping,Ping called,
07f4c878,2010-12-01 19:54:43.8612,Error,9,
Zerto.Zvm.VraConnector.VraNetworkConnector,
ClearAndThrow,connection is closed: No connection could be made because the target
machine actively refused it 106.16.223.86:4005,
07f4c878,2010-12-01 19:54:43.8612,Warn,9,
Zerto.Zvm.ZvmServices.ReconnectingConnectorProxy,GetConnector,failed,
Re-IP Configured As Static Fails During FOL with Reverse Protection

Problem:
After performing a failover, the IP settings for the recovery site (re-IP) appear as DHCP in the network settings, instead of as
static, as they were configured in the protected VM. The customer must manually change the IP settings back to static from
DHCP.
Solution:
Verify that the user that is logged on to VMWare Tools, has sufficient privileges to execute re-IP changes.
Re-IP Configured As Static Fails During FOL with Reverse Protection 411
CHAPTER 24: ZERTO AND
VMWARE FEATURES
This section describes the interaction between Zerto and commonly used VMware features such as vMotion, DRS and HA.
■ “Zerto Permissions in vCenter Server”, below
■ “VMWare Privileges Required by Zerto”, on page 413
■ “Stopping a vCenter Server”, on page 415
■ “Thin-Provisioning”, on page 415
■ “VMware Clusters”, on page 416
■ “Storage Profiles and Storage Clusters”, on page 416
■ “Fault Tolerance”, on page 417
■ “Host Affinity Rules and CPU Pinning”, on page 417
■ “vMotion”, on page 417
■ “Storage vMotion”, on page 417
■ “VMware Host Maintenance Mode”, on page 417
■ “Resiliency to vSphere Environment Changes”, on page 418
Zerto Permissions in vCenter Server

VMware roles and permissions are the core of VMware infrastructure security. Permissions are a combination of a user/group
and a security role that is applied to some level of the VMware Infrastructure. Zerto supplies a number of default privileges that
enable a VMware administrator to perform specific actions.
You can define additional roles and assign these roles the privileges they need. All privileges are implemented at the root level,
and thus apply to every object in the vCenter Server. The following privileges are required by Zerto:
Live Failover / Move: Enables performing a failover or move.
Manage cloud connector: Enables installing and uninstalling Zerto Cloud Connectors. For details, refer to Zerto Cloud Manager
Manage Sites: Enables editing the site configuration, including site details, pairing and unpairing sites, updating the license and
editing advanced site settings.
Manage VPG: Enables creating, editing, and deleting a VPG and adding checkpoints to a VPG.
Manage VRA: Enables installing and uninstalling VRAs.
Test Failover: Enables performing a test failover.
Viewer: For internal use only.
You can define additional roles and assign these roles the privileges they need. All privileges are implemented at the root level,
and thus apply to every object in the vCenter Server.
These privileges are assigned to the Administrator role when Zerto is installed.
Note: When upgrading vCenter Server be sure that the user entity that Zerto is using is preserved in the user/permissions
hierarchy.
Zerto and VMware Features 412
Zerto and VMware Features
VMWare Privileges Required by Zerto

When Zerto accesses the vCenter Server, it requires the vSphere privileges assigned to Administrator roles, which includes
the following privileges.
Note: The Zerto role must also be available. This role is added to the Administrator user during the Zerto installation.
CATEGORY PRIVILEGE DESCRIPTION
ALARM
Create alarm When Zerto is installed in vSphere environments, all Zerto alerts are
propagated as Alarms in vCenter. As such, upon installation, the alarms
matching the alerts are created. Zerto controls enabling and disabling the
alarms.
See the correlation between alerts and alarms in Zerto Virtual Replication -
Guide to Alarms, Alerts and Events.
Remove alarm When Zerto is uninstalled, the alarm definitions added above are removed.
AUTHORIZATION
(from vCenter 5.5 and 6.0) Permissions
Modify permission When Zerto is installed in vSphere environments, it creates seven different
privileges that can be assigned to vCenter users that login to Zerto (or when
viewing Zerto UI from within vSphere Client).
DATASTORE
Allocate space Needed to allocate datastore space when Zerto creates or reconfigures
VMs.
Browse datastore Needed for in-GUI datastore browser and VPG import.
Configure datastore Needed to create/remove directories within the Datastore.
Remove file Used for cleanup of volumes in a number of situations (for example,
cleanup of VRAs, journals, folders, etc.).
Low level file operations Needed to move files managed by Zerto (for example, mirrors, journals,
etc.) between folders. Specifically used in recovery operations (for example,
Failover), but may be used during other procedures.
Update virtual machine
files
DATASTORE CLUSTER
Configure a datastore Used when installing VRAs to enable/disable storage DRS within datastore
cluster clusters
EXTENSION
Register extension Needed to create the vSphere Client plugin, 'ManagedBy' extension, and
other features related to Zerto's integration with vCenter.
Unregister extension Needed to remove the vSphere Client plugin, 'ManagedBy' extension, and
other features when removing ZVR.
FOLDER
Create folder Used during recovery operations to create VM folders.
GLOBAL
Cancel task Used to remove tasks created by ZVR to track operations.
Diagnostics Used when pulling diagnostic logs from vCenter/ESXi.
Disable methods Used to disable methods on protected objects like VRAs and 'Testing
Recovery' VMs.
VMWare Privileges Required by Zerto 413


Enable methods Used to re-enable methods disabled by Zerto.
Log event Used for pushing Zerto events to vSphere for tracking.
Host > Configuration
Advanced settings Not used by Zerto.
Virtual machine autostart Used when creating new VRAs/diskboxes.
configuration
Change settings Used during VRA deployment.
Security profile and firewall Used during VRA deployment.
Query Patch Used during VRA deployment.
HOST > INVENTORY
Modify cluster Used for settings affinity rules for VRAs, and disabling DRS/HA for
recovery VMs before commit.
NETWORK
Assign network Used for assigning VMs to various networks.
RESOURCE
Assign vApp to resource Used for moving recovery vApps into the correct resource pools.
pool
Assign virtual machine to Used for moving recovery VMs into the correct resource pool.
resource pool
Migrate a powered off Used for migrating VRAs back to the correct host if they've been moved off.
virtual machine Also for migrating recovery VMs back to the correct host when they are
migrated by vCD when adding VMs into vCD vApp.
Migrate a powered on Used for migrating VRAs back to the correct host if they've been moved off.
virtual machine Also for migrating recovery VMs back to the correct host when they are
migrated by vCD when adding VMs into vCD vApp.
SESSIONS
Validate session Used for validating the current session between ZVM and vCenter.
TASKS
Create task Used for creating tracking tasks within vCenter.
Update task Used for updating tracking tasks created by Zerto.
vApp
vApp application Used for configuring recovery vApps created by ZVR.
configuration
Assign resource pool Used for moving recovery vApps into the correct resource pool.
Add virtual machine Used for moving recovery VMs into the correct vApp.
Create Used for creating recovery vApps.
Delete Used for deleting recovery vApps (for example, when stopping FOT).
Import Used during VRA OVF deployment.
Power off Used for powering off recovery vApps (for example, when stopping FOT).
Power on Used for powering on recovery vApps.
VIRTUAL MACHINE > CONFIGURATION
Add existing disk Used to attach disks to VRAs/recovery VMs.
Add new disk Used to create new journal/mirror disks on VRAs.
VMWare Privileges Required by Zerto 414


Add or remove device Used for adding various devices (NIC, SCSI adapter, etc.) to recovery VMs.
Advanced Used to set ExtraConfig on Zerto appliances (ZCC/VRA/Diskbox).
Change CPU count Used to set number of CPUs on VRA deployment.
Extend virtual disk Used to resize mirror disks when disk resize occurs on protected site.
Modify device settings Used to change settings of existing devices, such as NICs or SCSI adapters,
on VRAs.
Configure managedBy Used for setting the 'ManagedBy' property on VMs, such as the Zerto
appliances and 'Testing Recovery' VMs.
Memory Used to configure memory for VRA VMs.
Raw device Used to assign RDM LUNs to VRAs and recovery VMs.
Remove disk Used to detach disks from VMs during recovery operations/rollbacks.
Change resource Used for configuring the resource allocation of a VM within a Resource Pool
- specifically when creating a recovery vApp.
Settings Used to change VM settings not covered by other permissions.
Swapfile placement Used to set swapfile placement on recovery VMs where the protected VM
has a custom setting.
Upgrade virtual machine Used to upgrade VRA VM hardware version when upgrading VRA version.
compatibility
VIRTUAL MACHINE > INTERACTION
Power off Used for powering off VMs, such as when stopping/rolling back a Failover,
or when shutting down protected VMs during a Failover/Move.
Power on Used for powering on VMs during recovery operations.
VIRTUAL MACHINE > INVENTORY
Create from existing Used to deploy Zerto appliances.
Create new Used to create recovery VMs.
Register Used to move VMs into VM folders during recovery operations.
Remove Used to remove existing VMs (uninstall Zerto appliance, remove recovery
VMs when stopping FOT, rolling back FOL, or on protected site when
committing FOL or Move with reverse protection).
Unregister Used to remove VMs from inventory. Only used as part of Undo events,
after failed task.
Stopping a vCenter Server

If the recovery vCenter Server service is stopped, recovery operations are not possible until the service is restarted.
Thin-Provisioning
VMware vStorage thin-provisioning is a component of vStorage that enables over-allocation of storage capacity for increased
storage utilization, enhanced application uptime and simplified storage capacity management.
When migrating or recovering the virtual machines in a VPG, the virtual machines are migrated or recovered with the same
configuration as the protected machines. Thus, if a virtual machine in a VPG is configured with thin provisioning, then during
migration or recovery the machine is also defined in the recovery site as thin provisioned.
Stopping a vCenter Server 415

VMware Clusters
A cluster is a group of tightly coupled hosts that work closely together so that in many respects they can be viewed as though
they are a single computer. Clusters are used for high availability and load balancing. With a cluster, you define two or more
physical machines that will provide resources for the hosts that are assigned to that cluster. By using clusters, you can achieve
high availability and load balancing of virtual machines. Load balancing is referred to as DRS (Distributed Resource Scheduler)
by VMware.
Thus, you use clusters for the following:
■ If one of the physical hosts goes down, the other physical host starts up the VMs that the original host was running (high
availability).
■ If one physical host is over utilized by a VM, that VM is moved to the other physical host (DRS).
Both of these features use vMotion to move these virtual guests from one system to another.
You cannot apply high availability nor DRS to a Virtual Replication Appliance (VRA).
Also, see “DRS”, below.
VMware High Availability (VMHA)

VMware high availability decreases downtime and improves reliability with business continuity by enabling another ESX/ESXi
host to start up virtual machines that were running on another ESX/ESXi host that went down.
High availability is automatically disabled by Zerto while updating recovered virtual machines in the recovery site from the
VRA journal. After the promotion of the data from the journal to the virtual machine completes, high availability is
automatically re-enabled.
The HA configuration can include admission control to prevent virtual machines being started if they violate availability
constraints. If this is the case, then a failover, test failover or migration of the virtual machines in a VPG to the cluster with this
configuration will fail, if the availability constraints are violated when the virtual machines are recovered. It is recommended to
test the failover, as described in “Testing Recovery”, on page 324, to ensure recovery will succeed, even when HA is configured
with admission control.
DRS
VMware DRS enables balancing computing workloads with available resources in a cluster.
DRS is automatically disabled by Zerto while updating recovered virtual machines in the recovery site from the journal for these
recovered virtual machines. After the promotion of the data from the journal to the recovered virtual machine completes, DRS
is automatically re-enabled.
If DRS is disabled for the site, VMware removes all resource pools in the site. If the recovery was defined to a resource pool,
recovery will be to any one of the hosts in the recovery site with a VRA installed on it.
Note: If the site is defined in Zerto Cloud Manager, only a resource pool can be specified and the resource pool must also have
been defined in Zerto Cloud Manager. For details about Zerto Cloud Manager, refer to Zerto Cloud Manager Administration
Guide.
Storage Profiles and Storage Clusters

Profile-Driven Storage provides visibility into your storage pool, letting you optimize and automate storage provisioning.
Zerto supports the use of storage profiles and storage clusters defined within a profile. If Zerto cannot find a storage profile that
can be used as target storage, the value is set to Zerto_Any. In this case, any of the datastores configured in the Configure
Provider vDCs dialog can be selected as recovery datastores, provided they are exposed to the relevant recovery hosts. Upon
recovery, Zerto chooses a storage profile available to the Org vDC, for the recovered vApp, that contains all of the datastores
on which recovery volumes of the VPG reside. If there is no such storage profile, the recovery operation cannot start. The
storage profile can be set to Zerto_Any for a number of reasons, such as adding a virtual machine to the VPG which does not
have a storage profile that can be used as the target.
VMware Clusters 416

Fault Tolerance
VMware fault tolerance provides uninterrupted availability by eliminating the need to restart a virtual machine by copying a
functional virtual machine to a second ESX/ESXi host while making sure that both virtual machines are synchronized, so that if
the ESX/ESXi that is hosting the primary virtual machine goes down, the secondary virtual machine takes over.
Zerto does not support fault tolerance for machines in a VPG, nor for a Virtual Replication Appliance (VRA).
Host Affinity Rules and CPU Pinning

VMware host affinity rules enable specifying which ESX/ESXi hosts a virtual machine can or cannot run under. CPU pinning
ties a specific workload to a specific processor within an ESX/ESXi host. Thus, when DRS is enabled, the rules for which ESX/
ESXi hosts a virtual machine can be enforced regardless of the load.
Zerto works whether host affinity and CPU pinning is used or not.
Note: Host affinity rules are applied to Virtual Replication Appliances (VRAs) to tie it to the host.
vMotion
If you use vMotion to migrate a virtual machine, which is part of a VPG, from one ESX/ESXi host to another ESX/ESXi host,
make sure of the following before moving the virtual machine:
■ The ESX/ESXi host where you are moving the virtual machine to has a Virtual Replication Appliance (VRA) installed on it,
as described in the Zerto Installation Guide.
■ The virtual machine is not a test virtual machine running on the recovery site during the performance of a failover test, as
described in “Testing Recovery”, on page 324.
You cannot move a Virtual Replication Appliance (VRA) from one ESX/ESXi host to another. Also a virtual machine that is
being updated from the VRA journal, after recovery has been initiated, cannot be moved until the promotion of data to the
virtual machine completes.
Storage vMotion
VMware Storage vMotion enables you to perform live migration of virtual machine disk files across heterogeneous storage
arrays with complete transaction integrity and no interruption in service for critical applications enabling you to perform
proactive storage migrations, simplify array refreshes/retirements, improve virtual machine storage performance, and free up
valuable storage capacity in your data center.
Zerto supports Storage vMotion for protected and recovered virtual machine volumes and for journal volumes in the recovery
site, but not for a machine volume in a VPG being promoted.
Note: When a volume is moved using Storage vMotion, the datastore folder under which the volume is saved is the last
datastore folder accessed by VMware.
VMware Host Maintenance Mode

You place a host in maintenance mode when you need to service it, for example, to install more memory. A host enters or
leaves maintenance mode only as the result of a user request.
Virtual machines that are running on a host entering maintenance mode need to be migrated to another host (either manually
or automatically by DRS) or shut down.
Fault Tolerance 417

Zerto enables moving recovery disks managed by a VRA on a host that needs maintaining to be moved to another host for the
duration of the maintenance, as described in “Managing Protection During VMware Host Maintenance”, on page 278.
Note: Automatic detection and powering off the VRA when running host maintenance mode is supported in vCenter version
6.5. For more information see Zerto Virtual Replication Interoperability Matrix.
Resiliency to vSphere Environment Changes

VMware vSphere identifies and manages all its objects: VMs, ESXi hosts, networks, data stores, resource pools, etc. using the
MoRef ID (Managed Object Reference Identifier). MoRef IDs are allocated to virtual machines and other objects incrementally
by vCenter.
When Zerto maps an environment within vCenter for its configuration and operations, for example when creating a VPG, it
acquires and maps the MoRef IDs of the available virtual machines, and refers to these MoRef IDs in its own environment
management and replication operations.
If an ESXi host is removed from inventory and is then re-added, everything that was on it gets a new MoRef ID. As a result, a
virtual machine, protected by Zerto that was running on that host will be allocated a new MoRef ID. The new MoRef ID would
not be known to the Zerto Virtual Manager, and the virtual machine would no longer be protected. The same result applies to
the VRA, which becomes a ghost VRA, unknown to the Zerto Virtual Manager.
In order to avoid these issues Zerto Virtual Replication maintains the old MoRef ID map containing the original MoRef IDs as
well as unique identifiers of the hosts and VMs. Zerto Virtual Manager constantly monitors the vCenter environment and
maintains a mapping of MoRef IDs - new to original.
The re-mapping of MoRef IDs can take several minutes. When system administration tasks require the importing of VPG
definitions of a host that was removed and then re-added, it is advisable to wait approximately 5 minutes from when the host
was re-added before performing the import of the VPGs.
Resiliency to vSphere Environment Changes 418

CHAPTER 25: THE ZERTO VIRTUAL
MANAGER USER INTERFACE
Configuration and management of disaster recovery for a site are performed in the Zerto User Interface.
The following dialogs and tabs are described in this section:
■ “About Dialog”, on page 420
■ “Add Checkpoint Dialog”, below
■ “Pair Sites - Add Site Dialog”, on page 422
■ “Add Static Route Dialog”, on page 422
■ “Advanced Journal Settings Dialog”, on page 423
■ “Advanced Journal Settings Dialog (vCD)”, on page 424
■ “Advanced VM Recovery Settings Dialog”, on page 426
■ “Advanced VM Replication Settings Dialog”, on page 427
■ “Advanced VM Replication Settings Dialog (vCD)”, on page 427
■ “Advanced VM Settings for Cloud Dialog”, on page 428
■ “ALERTS”, on page 429
■ “Boot Order Dialog”, on page 429
■ “Browse for File Dialog”, on page 431
■ “Change Host Password VRA Dialog”, on page 431
■ “Change VM Recovery VRA Dialog”, on page 432
■ “Checkpoints Dialog”, on page 433
■ “Configure and Install VRA Dialog”, on page 434
■ “Configure Paired Site Routing Dialog”, on page 435
■ “Configure Provider vDCs Dialog”, on page 436
■ “Configure VM Settings Dialog”, on page 437
■ “Edit Volume Dialog (vCD)”, on page 438
■ “Edit NIC Dialog”, on page 444
■ “Edit Repository Dialog”, on page 445
■ “Edit Selected Volumes Dialog”, on page 446
■ “Edit VM Dialog”, on page 446
■ “Edit VM Dialog (vCD)”, on page 447
■ “Edit VM Settings Dialog (AWS)”, on page 450
■ “Edit VM Settings Dialog (Azure)”, on page 451
■ “Edit vNIC Dialog”, on page 452
■ “Edit vNIC Dialog (vCD)”, on page 453
■ “Edit Volumes Dialog”, on page 454
■ “Edit Volumes Dialog (vCD)”, on page 459
■ “Edit VRA Dialog”, on page 465
■ “License Dialog”, on page 466
■ “Manage Static Routes Dialog”, on page 467
■ “New Repository Dialog”, on page 468
■ “Restore - Edit NICs Dialog”, on page 469
■ “Offsite Clone Window”, on page 469
■ “Open Support Case Dialog”, on page 470
■ “Remote Support Dialog”, on page 471
■ “Restore a VPG from Repositories”, on page 472
■ “Restore VPG - Volumes Dialog”, on page 477
■ “Restore VPG - Edit Selected Volumes Dialog”, on page 477
■ “Site Settings Dialog”, on page 478
■ “Stop Failover Test Dialog”, on page 486
■ “TASKS”, on page 486
The Zerto Virtual Manager User Interface 419
The Zerto Virtual Manager User Interface
About Dialog
In the About window, you can do the following:
■ View the version of Zerto Virtual Replication being run.
■ Enable or disable the Zerto CALLHOME feature. The Zerto CALLHOME feature enables support notification and analytics
for the following purposes:
■ To improve Zerto Virtual Replication.
■ To send notifications to the user when a new Zerto Virtual Replication version is available, or when new hypervisor
versions are supported by Zerto.
■ Enable or disable Zerto Virtual Manager to send data to the SaaS platform for monitoring purposes, using the Zerto Mobile
App. This action is done by licensed Zerto Virtual Manager users.
When clicking About, the following options appear:
To perform these actions, do the following:

1. In the Zerto User Interface, in the top right of the header, click , and then click About.
The version and build of Zerto Virtual Replication installed in the site are displayed.
2. The Zerto CALLHOME feature is selected by default; Enable Support notification and product improvement feedback.
Note: This option is grayed out for Microsoft Azure and AWS.
If the user deselects Enable Support notification and analytics, a warning appears notifying the user that deselecting this
option will stop Zerto Virtual Replication from sending notifications when new Zerto Virtual Replication updates are
available, or when new hosts are supported.
3. If you want Zerto Virtual Replication to send information to our Online Services and Zerto Mobile App, and enable remote
upgrade, select Enable Zerto SaaS features. Include Zerto Analytics, Zerto Mobile App and Remote upgrade. This is
selected by default.
This allows licensed Zerto Virtual Manager users to enable or disable data being sent from the Zerto Virtual Manager to
the SaaS platform, thereby enabling site monitoring using the Zerto Mobile App.
■ If the user deselects Enable Online Services and Zerto Mobile, a warning appears notifying the user that deselecting
this option will stop Zerto Virtual Replication from sending information to Online Services and to the Zerto Mobile
Application, rendering these services inoperable for the entire installation.
About Dialog 420

Add Checkpoint Dialog
Checkpoints are recorded automatically every few seconds in the journal. These checkpoints ensure crash-consistency and are
written to the virtual machine journals by the Zerto Virtual Manager. Each checkpoint has a timestamp set by the Zerto Virtual
Manager. In addition to the automatically generated checkpoints, you can manually add checkpoints to identify events that
might influence the recovery, such as a planned switch over to a secondary generator.
The list of VPGs is displayed. You can select more VPGs to add the same checkpoint.
■ Enter a name for the checkpoint: The name to assign to the checkpoint.
■ Direction: The direction of the protection.
■ VPG Name: The name of the VPG.
■ Protected Site Name: The name of the site where virtual machines are protected.
■ Recovery Site Name: The name of the site where protected virtual machines are recovered.
You can filter columns in the list via the filter icon next to each column title. You can also sort the list by each column. Clicking
the cog on the right side of the table enables you to change the columns that are displayed and to create a permanent view of
the columns you want displayed.
Add Checkpoint Dialog 421

Pair Sites - Add Site Dialog
Pair sites
■ Host name/IP: IP address or fully qualified DNS host name of the remote site Zerto Virtual Manager to pair to.
■ Port: The TCP port communication between the sites. Enter the port that was specified during installation. The default port
during the installation is 9081.
Add Static Route Dialog

Add a static route for a specified group, when the Zerto Cloud Connector and cloud site Zerto Virtual Manager are on different
networks.
■ Address: The network address for the static route that you want to route to.
■ Subnet Mask: The subnet mask for the network.
■ Gateway: The gateway address for the network on the local network of the Zerto Cloud Connector cloud network
interface.
Note: If you change the Zerto Virtual Manager and VRAs cloud network, changing the static route settings for a group to the
new network only changes the access for new Zerto Cloud Connectors with the specified group. Existing Zerto Cloud
Connectors must be redeployed to use the changed static route.
Also see: “Manage Static Routes Dialog”, on page 467.
Pair Sites - Add Site Dialog 422

Advanced Journal Settings Dialog

Journal History
storage/datastore.
datastore.
are not displayed.
For Example: If the Journal Size Hard Limit is configured to a maximum ■ The minimum journal size, set by Zerto
size of 160 GB limit, then during Failover Test, both the Journal Virtual Replication, is 8GB for Hyper-V and
History and the Scratch Journal Volume together can take up to 320 vSphere environments, and 10GB for
GB. Each one with a maximum size of 160 GB limit. Microsoft Azure environments.
grow.
Advanced Journal Settings Dialog 423


datastore.
are not displayed.
warning.
In addition to the warning threshold, Zerto Virtual
Replication will issue a message when the free space
available for the journal is almost full.
4. Click OK.
Advanced Journal Settings Dialog (vCD)

Appears only in environments with vCD.
Manage the journal used for recovery in a vCD environment.

Journal History
Advanced Journal Settings Dialog (vCD) 424


storage/datastore.
datastore.
are not displayed.
For Example: If the Journal Size Hard Limit is configured to a maximum ■ The minimum journal size, set by Zerto
size of 160 GB limit, then during Failover Test, both the Journal Virtual Replication, is 8GB for Hyper-V and
History and the Scratch Journal Volume together can take up to 320 vSphere environments, and 10GB for
GB. Each one with a maximum size of 160 GB limit. Microsoft Azure environments.
grow.
datastore.
are not displayed.
warning.
5. Click OK.
Advanced Journal Settings Dialog (vCD) 425

Advanced VM Recovery Settings Dialog
Displays the recovery settings for the virtual machines in the VPG. You can choose to edit information in one field by clicking
the field and updating the information. You can choose to edit information for several virtual machines at the same time by
selecting the virtual machines and clicking EDIT SELECTED.
Advanced VM Recovery Settings Dialog 426

Advanced VM Replication Settings Dialog
Displays the replication settings for the virtual machines in the VPG. You can choose to edit information in one field by clicking
For more details, see “Edit VM Dialog” on page 446.
Advanced VM Replication Settings Dialog (vCD)

Displays the settings of the virtual machines in the VPG.
To edit information for a single VM, click the field Storage Policy, and/or Journal Storage Policy, and update the information.
Advanced VM Replication Settings Dialog 427


8.
For more details, see “Edit VM Dialog (vCD)” on page 447.
Advanced VM Settings for Cloud Dialog
Displays the recovery settings for the virtual machines in the VPG. You can choose to edit information in one field by clicking
Advanced VM Settings for Cloud Dialog 428

ALERTS
Monitor the recent alerts by clicking the ALERTS area in the status bar at the bottom of the Zerto User Interface. The following
information is displayed for the most recent alerts:
■ The alert status.
■ The site where the alert is issued.
■ A description of the alert.
Click All Alerts to access MONITORING > ALERTS.
Boot Order Dialog
To specify the boot order of virtual machines in a VPG. When machines are started up on recovery, for example, after a move
operation, the virtual machines in the VPG are not started up in a particular order. If you want specific virtual machines to start
before other machines, you can specify a boot order. The virtual machines are defined in groups and the boot order applies to
the groups and not to individual virtual machines in the groups. You can specify a delay between groups during startup.
Initially, virtual machines in the VPG are displayed together under the default group. If you want specific machines to start
There is no boot order for virtual machines within a group, only between groups.
■ ADD GROUP: Adds a group. After adding a group you can edit the group name by clicking the Edit icon at the right of the
group name and remove the group via the delete icon at the right of the group. You cannot remove the Default group nor a
group that contains a virtual machine.
■ Boot Delay: Specifies a time delay between starting up the virtual machines in the group and starting up the virtual
machines in the next group. For example, assume three groups, Default, Server, and Client defined in this order. The Start-
up delay defined for the Default group is 10, for the Server group is 100 and for the Client group 0. The virtual machines in
ALERTS 429
the Default group are started together and after 10 seconds the virtual machines in the Server group are started. After 100
seconds the virtual machines in the Client group are started up.
Boot Order Dialog 430

Browse for File Dialog
To select the folder with the preseeded disk to use. Drill-down to select the disk.
Disks that are not viable for preseeding are grayed out.
Change Host Password VRA Dialog
To change the connectivity, VIB or password, used by the VRA to connect to the host. If using a password to connect to the
host, to change the password used by the VRA.
■ If the VRA is using a password to connect to the host and using VIB is required, check Use credentials to connect to host.
■ If the VRA is using VIB to connect to the host and using a password is required, uncheck Use credentials to connect to
host and enter the password. If the VRA is connecting to the host with a password and the password for the host has
changed, enter the new password.
Browse for File Dialog 431

Change VM Recovery VRA Dialog
To change the recovery host required by the VRA to access the host.
■ VM Name: The name of the virtual machine.
■ VPG Name: The name of the VPG.
■ ZORG: The Zerto name given to the organization, the ZORG, by a cloud service provider. For details, refer to Zerto Cloud
Manager Administration Guide.
■ VM Size GB: The virtual machine size in gigabytes.
■ # of Volumes: The number of volumes used by the virtual machine.
■ VM Hardware Version: The hardware version of the virtual machine.
■ Target Host: The host in which to move the recovery virtual machines.
■ Select the replacement host: The name of the host to move the recovery virtual machines.
Auto Select the replacement host: Selects the most suitable host to move the recovery virtual machines to.
Change VM Recovery VRA Dialog 432

Checkpoints Dialog
When selecting the point to recover to, remember the following:

■ The refresh button is initially grayed out and is enabled for clicking after 5 seconds. It is also grayed out for 5 seconds after
being clicked, before being re-enabled.
■ A reminder, Click the refresh button to view the latest checkpoints is displayed 10 seconds after the refresh button is
clicked to remind the user that there is a new Latest Checkpoint.
■ If the user has scrolled to, and selected, a checkpoint anywhere in the checkpoints list, clicking the refresh button will
automatically return the user to the selected checkpoint in the list.
Use the following filters:
■ Latest: Recovery is to the latest checkpoint. This ensures that the data is crash-consistent for the recovery. When selecting
the latest checkpoint, the checkpoint used is the latest at this point. If a checkpoint is added between this point and
starting the failover, the later checkpoint is not used.
■ Latest Tagged Checkpoint: The recovery operation is to the latest checkpoint added in one of the following situations:
■ By a user.
■ When a failover test was previously performed on the VPG which includes the virtual machine.
■ Select from all available checkpoints: If you do not want to use the latest checkpoint, latest tagged checkpoint, choose
Select from all available checkpoints. By default, this option displays all checkpoints in the system. You can choose to
display only automatic, or tagged checkpoints, or any combination of these types.
Checkpoints Dialog 433

Configure and Install VRA Dialog
To install Zerto Virtual Replication Appliances (VRAs) on ESX/ESXi hosts:

2. Select a host which requires a VRA and click NEW VRA.
The Configure and Install VRA dialog is displayed. The dialog displayed depends on the ESX/i version:
ESXi versions from 5.5 ESXi versions before version 5.5

Note: If you selected a cluster or multiple hosts, the VRA is installed on the first host in the displayed list.
Specify the following Host Details:
■ Host: The host on which the VRA is installed. The drop-down displays the hosts that do not have a VRA installed, with
the selected host displayed by default.
(vSphere only) From ESXi 5.5, by default, Zerto Virtual Manager creates a .VIB (vSphere Installation Bundle) which is used
to set up a secure communication channel to the host. The .VIB is installed on the host when the VRA is installed. When
using VIB:
Manager re-initiates the connection automatically and logs it.
(vSphere only) For ESX/i versions earlier than 5.5, when using a password, Zerto Virtual Manager connects to the host
using the root password. Once a day, Zerto Virtual Manager checks that the password is valid. If the password was
changed, an alert is issued, requesting the user enter the new password.
■ Use credentials to connect to host: When unchecked, the Zerto Virtual Manager uses VIB to set up a secure
communication channel to the host. This field is only relevant for ESXi 5.5 and later.
■ Host Root Password: When the VRA should connect to the host with a password, check Use credential to connect to
host and enter the root user password used to access the host. When the box on the right side is checked, the
password is displayed in plain text. This field is only relevant for ESXi 5.x hosts.
■ Datastore: The datastore that contains the OS disks of the VRA VM. You can install more than one VRA on the same
datastore.
■ Network: The network used to access the VRA.
■ VRA RAM: The amount of memory to allocate to the VRA. The amount determines the maximum buffer size for the
VRA for buffering IOs written by the protected virtual machines, before the writes are sent over the network to the
recovery VRA. The recovery VRA also buffers the incoming IOs until they are written to the journal. If a buffer
Configure and Install VRA Dialog 434

becomes full, a Bitmap Sync is performed after space is freed up in the buffer. For details, refer to Zerto Scale and
■ VRA Bandwidth Group: Choose the VRA Bandwidth Group from the dropdown list. To create a new VRA group, type
in the name of the new group and click CREATE. You can then choose the new group from the dropdown list.
You group VRAs together when VRAs use different networks so they can be grouped by network, for example when
the protected and recovery sites are managed by the same vCenter Server and you want to replicate from the branch
site to the main site. Within a group the priority assigned to a VPG dictates the bandwidth used and is applicable
within a group and not between groups. Thus, a VPG with a high priority is allocated bandwidth before VPGs with
lower priorities. VPGs that are on VRAs with different VRA groups, for example, VPG1 on VRA1 in group1 and VPG2 on
VRA2 in group2, do not affect each other, as the priority is relevant only within each group.
3. Specify the following VRA Network Details:
■ Configuration: Either have the IP address allocated via a static IP address or a DHCP server. If you select the Static
option, which is the recommended option, enter the following:
■ Address: The IP address for the VRA.
4. Click INSTALL.
The VRA installation starts and the status is displayed in the TASKS popup dialog in the status bar and under
MONITORING > TASKS.
The VRA displayed name, and DNS name, is Z-VRA-hostname. If a virtual machine with this name exists, for example
when a previous VRA was not deleted, the VRA name has a number appended to it.
5.
Configure Paired Site Routing Dialog
The IP address, subnet mask, and gateway to access the peer site VRAs when access to the peer site VRAs is not via the
default gateway.
■ Enable Paired Site Routing: When checked, enables paired site routing.
■ Address: The IP address of the next hop at the local site, the router, or gateway address that is used to access the peer site
network.
■ Subnet Mask: The subnet mask for the peer site network.
■ Gateway: The gateway for the peer site network.
These access details are used to access the VRAs on the peer site.
The settings in the Configure Paired Site Routing dialog apply to all VRAs installed after the information is saved. Any existing
VRA is not affected and access to these VRAs continues via the default gateway. If the default gateway stops being used, you
must reinstall the VRAs that were installed before setting up paired site routing.
Configure Paired Site Routing Dialog 435

Configure Provider vDCs Dialog
Accessed from Site Settings > Cloud Settings tab > Datastore Configuration area.
Used by Zerto Cloud Service Providers to define provider vDCs, and to define which datastores can be used by Zerto, to which
purpose.
Datastores which are not listed in this window may be used by Zerto, unless they are explicitly excluded.
Note:
Before setting up Zerto Virtual Replication to work with vCD, you must have an AMQP server installed.
■ Zerto provides an AMQP installation kit if you do not have one installed for vCD, available as a download from the
Zerto Support Portal, from the downloads page.
■ Run ZertoAMQPInstallWizard.exe from the kit and when prompted enter the IP or host name of the vCD and the
administrator user and password to access this vCD.
■ The Zerto Virtual Manager connects to the vCD and checks whether an AMQP server is installed.
■ If an AMQP server is not installed, Zerto recommends using RabbitMQ, which in turn requires Erlang/OTP.
■ Links to the sites to install both Erlang/OTP and RabbitMQ are provided as part of the Zerto AMQP installation.
Use these links to install Erlang/OTP and then RabbitMQ, then you can continue with the Zerto AMQP
installation.
■ If an AMQP server was already installed, change the connection details displayed to those defined in vCD.
■ If you installed the AMQP server as part of the Zerto AMQP installation, the default settings for these installations
are displayed, with a user and password of guest.
■ At the end of the Zerto AMQP installation, vCD is updated with these settings, in AMQP Broker Settings under
Administration > Blocking Tasks > Settings.
To configure access to provider vDCs, and their datastore’s configuration:

6. In the Provider vDCs area (top), click Add. A list of provider vDCs appear.
The provider vDCs were created by the Cloud Service Providers according to predefined service levels, storage availability,
performance requirements or cost.
■ Add the provider vDCs which will be available for use in Zerto Virtual Replication.
7. In the Provider Datastore area select one of the following:
Configure Provider vDCs Dialog 436

■ Unlisted datastores are not used by Zerto Virtual Replication: Clearly define that datastores which are not listed in
this window cannot be used.
■ Unlisted datastores can be used for all purposes: Allow unlisted datastores of all provider vDCs, even those provider
vDCs that were not added to the list of Provider vDCs can be used for any purpose.
8. In the Provider Datastore area, click Add, to add datastores.
■ Select the Recovery Volume checkbox, if the datastore can be used as a recovery datastore.
■ Select the Journal checkbox if the datastore can be used for the journal.
■ Select the Preseed checkbox if the datastore can be used for preseeded disks. Only datastores marked as preseeded
can be used, preventing different organizations being exposed to datastores of other customers using the preseed
option.
■ In order to exclude a datastore, add it to the list, then deselect all checkboxes.
1.
Configure VM Settings Dialog
Specifies the values to use when restoring the selected virtual machines.
■ Restore on Host: The IP address of the host where you want the virtual machine restored.
■ Restore on Datastore / Storage: The datastore/storage to use for the restored virtual machine files.
■ Power On: Select this if you want the restored virtual machine to be powered on.
Configure VM Settings Dialog 437

Edit Volume Dialog (vCD)

Edit Volume Dialog (vCD) 438


Volume Source


■ Datastore
■ RDM
for the journal.
■ Zerto Virtual Replication supports the SCSI protocol. Only disks that
support this protocol can be specified.

machine.
VMDKs.

Path:
be an IDE disk. Zerto Virtual Replication takes ownership of the
preseeded disk, moving it from its source folder to the folder used by
the VRA.
recovery VMDK disk. Zerto Virtual Replication makes sure that the
VMDK disk size is a correct match for the RDM disk.


the recovery site.
■ Zerto Virtual Replication searches for the preseeded folder in the
available datastores in the Org vDCs specified in the vCD Cloud
Resources for the ZORG in the Zerto Cloud Manager and takes
ownership of the preseeded disk, moving it from its source folder to
the folder used by the VRA.
times out.
support this protocol can be specified. Virtual machine RDMs in a
Edit Volume Dialog (vCD) vCenter Server are replicated as VMDKs in a vCD environment. 442

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes

Edit NIC Dialog
Specify the NIC settings when restoring a retention set to the recovery site.
■ Create new MAC address: The Media Access Control address (MAC address) to use. The default is to use the same MAC
address for the restored virtual machine that was used in the protected site. Check the box to create a new MAC address
on the restore site.
■ Change vNIC IP Configuration: Whether or not to keep the default virtual NIC (vNIC) IP configuration. The vNIC IP is
changed after the restore has completed when VMware Tools are installed.
■ If Static is selected, the IP address, subnet mask, and default gateway must be set.
■ If DHCP is selected, the IP configuration and DNS server configurations are assigned automatically, to match the
protected virtual machine.
■ IP Address: The IP for the restored virtual machine. This can be the same IP as the original protected virtual machine.
Edit NIC Dialog 444

Edit Repository Dialog

You can change the Repository name, or define the Repository as the default repository.
To edit a Repository:
2. Select the Repository to edit and click MORE > Edit.
The Edit Repository window is displayed.
Edit any of the following settings:

■ Name: Specify a unique name for the Repository.
■ Set as default repository: Select to use the Repository as the default when defining the retention policy in a VPG.
3. Click SAVE. The updated definition of the Repository is saved.
Edit Repository Dialog 445

Edit Selected Volumes Dialog
If more than one datastore is selected, the path is not displayed.

■ Datastore / Raw Disk / Storage: The storage or RDM disk where the virtual machine files will be restored.
Edit VM Dialog
Edit the replication settings for a particular virtual machine in a VPG.

■ Recovery Host: The cluster, resource pool, or host that will host the recovered virtual machine. If the site is defined in
Zerto Cloud Manager, only a resource pool can be specified and the resource pool must also have been defined in Zerto
Cloud Manager. For details about Zerto Cloud Manager, see Zerto Cloud Manager Administration Guide.
When a resource pool is specified, Zerto Virtual Replication checks that the resource pool capacity is enough for the
specified virtual machine.
■ VM Recovery Datastore: The datastore where the VMware metadata files for the virtual machine are stored, such as the
vmx file. If a cluster or resource pool is selected for the host, only datastores that are accessible by every ESX/ESXi host in
the cluster or resource pool are displayed. This is also the datastore where RDM backing files for recovery volumes are
located. When specifying the recovery datastore for a virtual machine with a storage cluster, specify a datastore in the
cluster.
■ Journal Size Hard Limit: The maximum size that the journal can grow, either as a percentage or a fixed amount. The
minimum journal size set by Zerto Virtual Replication is 8GB. The journal is always thin-provisioned.
■ Unlimited: The size of the journal is unlimited and it can grow to the size of the recovery datastore. If Unlimited is
chosen, the fields Size and Percentage are not relevant.
■ Percentage: The percentage of the virtual machine volume size the journal can grow to.
■ Journal Size Warning Threshold: The size of the journal that triggers a warning that the journal is nearing its hard limit.
Edit Selected Volumes Dialog 446

■ Unlimited: The size of the journal is unlimited and it can grow to the size of the recovery datastore. If Unlimited is
chosen, the fields Size and Percentage are not relevant.
■ Size (GB): The size in GB that will generate a warning.
■ Percentage: The percentage of the virtual machine volume size that will generate a warning.
Both the value of Size and Percentage must be less than the configured hard limit so that the warning will be generated
when needed. In addition to the warning threshold, Zerto Virtual Replication will issue a message when the free space
■ Journal Datastore: The datastore used for the journal data for each virtual machine in the VPG. To change the default,
specify a host and then select one of the datastores accessible by this host to be used as the journal datastore. When you
select specific journal datastore, the journals for each virtual machine in the VPG are stored in this datastore, regardless of
where the recovery datastores are for each virtual machine. In this case, all the protected virtual machines must be
recovered to hosts that can access the specified journal datastore.
■ For Edit VM in vCD, see “Edit VM Dialog (vCD)”, on page 447.
■ For Edit VM Setting in AWS, see “Edit VM Settings Dialog (AWS)”, on page 450.
■ For Edit VM Settings in Azure, see “Edit VM Settings Dialog (Azure)”, on page 451.
Edit VM Dialog (vCD)

■ Storage Policy: The Storage Policy in which the VM configuration files will reside. See considerations below.
■ Journal Storage Policy: The Storage Policy in which the VM Journal files will reside. See considerations below.
Edit VM Dialog (vCD) 447


machine.
When a resource pool is specified, Zerto Virtual Replication checks
that the resource pool capacity is enough for all the virtual machines
specified in the VPG
displayed.
are not displayed.
■ The minimum journal size, set by Zerto Virtual
Replication, is 8GB for Hyper-V and vSphere
environments, and 10GB for Microsoft Azure
environments.


are not displayed.
Note: To review site-specific configurations, see Configure Provider vDCs Dialog.

Edit VM Settings Dialog (AWS)
Edit the network settings for one or more virtual machines in a VPG that will be recovered to AWS. There are recovery settings
for failovers and moves, and for failover tests.
Import Method
■ AWS Import: The method that has been used in all past implementations.
■ Zerto Import for all volumes: This is the fastest import method and uses a zImport VM for all volumes. A zImport virtual
machine is created, per volume. For each recovered volume, the zImport virtual machine is terminated when all the data
has been imported and its disk has been attached to the recovered virtual machine.
■ Zerto Import for data volumes: Uses the zImport method for data volumes only. This is the default setting and has a faster
RTO than AWS Import.
VPC Network: A virtual network dedicated to your AWS account.
Subnet: A range of IP addresses in your VPC.
Security Group: The AWS security to be associated with the virtual machines in this VPG. You can associate one or more
security groups with the virtual machines.
Instance Family: The instance family from which to select the type. AWS instance families are optimized for different types of
applications. Choose the instance family appropriate for the application in the virtual machine protected in the VPG.
Instance Type: The instance type, within the instance family, to assign to recovered instances. Different types within an
instance family vary primarily in vCPU, ECU, RAM, and local storage size. The price per instance is directly related to the
instance size.
Private IP: The private IP of an instance from the selected subnet. If you do not set the private IP, during recovery, AWS sets the
private IP from the defined subnet range.
Edit VM Settings Dialog (AWS) 450

Edit VM Settings Dialog (Azure)
Edit the network settings for one or more virtual machines in a VPG that will be recovered to Azure. There are recovery settings
for failovers and moves, and for failover tests.
■ VNet: A The virtual network dedicated to your Azure subscription.
■ Subnet: A range of IP addresses in your VPC.
associate one or more network security groups with the virtual machines.
■ Recovery Disk Type: The Azure recovery storage type to which the entire VPG will be recovered to; Premium Managed or
Standard Storage. The Virtual Machine Series and Virtual Machine Size fields are updated with the relevant options based
on the selected Recovery Disk Type.
■ Virtual Machine Size: The virtual machine size, within the virtual machine series, to assign to recovered virtual machines.
Different sizes within a virtual machine series vary, for example in a number of cores, RAM, and local storage size. The
default is set to Standard_DS1_v2. You can choose the virtual machine size appropriate for the application being protected
in the VPG. The price per virtual machine is related to the virtual machine configuration.
■ Private IP: The private IP of an instance from the selected subnet. If you do not set the private IP, during recovery, Azure
sets the private IP from the defined subnet range.
Edit VM Settings Dialog (Azure) 451

Edit vNIC Dialog

To configure the NIC used for the replicated VM disks. You can configure a maximum of four NICs.
Note: You can only change the vNIC IP for virtual machines with VMware Tools running.
See the Zerto Virtual Replication Interoperability Matrix for the list of operating systems for which Zerto supports Re-
IPing.
suffix.
Edit vNIC Dialog 452

Edit vNIC Dialog (vCD)

To configure the network details to use for the recovered virtual machines after a Failover or Move or Test operation:
■ vNIC IP Mode: Which IP mode to use. If you define static IP pool, also specify the IP address.
NOTE:
During a Failover, Move, or Test failover:

■ If the recovered virtual machine is assigned a different IP than the original IP, then after the virtual machine has
started, it is automatically rebooted so that it starts up with the correct IP.
■ If the same network is used for both production and test failovers, Zerto recommends changing the IP address for
the virtual machines started for the test, so that there is no IP clash between the test machines and the production
machines.
■ Copy to failover test: Copies the settings in the Failover/Move column to the Test column.
■ Copy to failover/move: Copies the settings in the Test column to the Failover/Move column.
Edit vNIC Dialog (vCD) 453

Edit Volumes Dialog

To edit recovery datastore information for a protected virtual machine.
Volume Source: The source on the recovery site for the replicated data: Datastore, RDM or Preseeded volume.
Edit Volumes Dialog 454


Volume Source


■ Datastore
■ RDM
for the journal.

machine.
VMDKs.

Path:
the VRA.


the recovery site.
times out.
Edit Volumes Dialog vCenter Server are replicated as VMDKs in a vCD environment. 458

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes
Edit Volumes Dialog (vCD)

Edit Volumes Dialog (vCD) 459


Volume Source


■ Datastore
■ RDM
for the journal.

machine.
VMDKs.

Path:
the VRA.


the recovery site.
times out.
Edit Volumes Dialog (vCD) vCenter Server are replicated as VMDKs in a vCD environment. 463

options:
provisioning.
the Orgvdc.
Temp Data disk
synchronization.
volumes

To review site-specific Storage Policy configurations, see Configure Provider vDCs Dialog.

Edit VRA Dialog
To change the network settings for a VRA, for example when the gateway to the VRA is changed.
■ Host: The IP of the host on which the VRA is installed.
For ESXi 5.5 and later hosts, by default, Zerto Virtual Manager uses a vSphere Installation Bundle, VIB, to connect to the
host. When using VIB:
Manager re-initiates the connection automatically and notes this in the log.
When using a password, root access is required if the Zerto host component is down and needs an automatic restart. Once
a day, Zerto Virtual Manager checks that the password is valid. If the password was changed, an alert is triggered,
requesting the user enter the new password.
■ (vSphere only) Use credentials to connect to host: When unchecked, the Zerto Virtual Manager uses VIB to connect to
the host. This field is only relevant for ESXi 5.5 and later.
■ (vSphere only) Host Root Password: When the VRA should connect to the host with a password, select Use credential to
connect to host, then enter the root user password used to access the host. When the box on the right side is selected, the
password is displayed in plain text.This field is only relevant for ESXi 4.x and 5.x hosts. This field is disabled for ESX 4.x
hosts.
■ VRA Bandwidth Group: The free text to identify the group to which a VRA belongs. If you create a group and then change
the name when editing the VRA so that there is no VRA in the site that belongs to the originally specified group, the group
is automatically deleted from the system.
To create a new group, enter the new group name over the text New group and click CREATE.
■ Configuration: Either have the IP address allocated via a static IP address or a DHCP server. If the VRA was originally
installed with a static IP, you cannot change this to DHCP. If the VRA was originally installed to use a DHCP server, you can
change this to use a static IP.
■ Address: The static IP address for the VRA to communicate with the Zerto Virtual Manager.
Edit VRA Dialog 465

License Dialog
The Zerto license includes information such as the number of virtual machines that can be protected and the license expiry
date. You can see these details by clicking in the top right of the header and selecting License.
The Zerto license includes the following details:

■ License: The license key itself.
■ License Type: What is licensed: whether the license restricts the number of virtual machines that can be protected or the
number of sockets used.
■ Expiry Date: The license expiry date.
■ Quantity: The maximum amount licensed, either virtual machines or sockets, based on the license type. If blank, the
quantity is unlimited.
■ Usage: The sites using the license and the number of protected virtual machines in each site.
A warning is generated when either the license expires or more than the licensed number of virtual machines are being
protected. Protection continues but the license should be updated. After getting a new license key you can update Zerto Virtual
Replication with this key.
License Dialog 466

Manage Static Routes Dialog
When providing DR as a Service, the cloud service provider needs to ensure complete separation between the organization
network and the cloud service provider network. The cloud service provider needs to be able to route traffic between an
organization network and the cloud replication network, in a secure manner without going through complex network and
routing setups.
The cloud service provider can define a Zerto Cloud Connector per organization site, that has two Ethernet interfaces, one to
the organization’s network and one to the cloud service provider's network. If the cloud service provider wants to add
additional security, considering both cloud connector interfaces as part of the organization network, the cloud service provider
can define a static route that will hop to a different cloud network, specifically for use by the Zerto Virtual Manager and VRAs
in the cloud site.
■ ADD: Click this field to add an entity and to define the static route it will use. Once you click ADD, the dialog changes:
■ NEW GROUP: Defines a group that will use a static route to the subnet used by the Zerto Virtual Manager. Enter the name
of the organization that will use this static route.
■ Add Static Route: Opens the Add Static Route Dialog.
Manage Static Routes Dialog 467

New Repository Dialog

To edit a repository, see Edit Repository Dialog.
Define Repositories on the recovery site where retention sets can be stored. The Repositories are connected over the network,
leveraging SMB(CIFS) or NFS protocols, on top of a simple network share or PBBA.
The Repository is defined as part of the retention policy configuration.
To create a Repository for Long Term Retention:

1. From the recovery site, in the Zerto User Interface, click Setup > REPOSITORIES > NEW REPOSITORY.
The New Repository window is displayed.
2. In the General area, specify the following:

■ Name: A unique name for the Repository.
■ Storage Type: The type of network share, selected PBBAs or other de-duplicated appliances. See the Interoperability
Matrix for supported versions.
■ Connection Type: The type of Repository:
■ Network Share - NFS The network share is NFS based
■ Network Share - SMB The network share is SMB based. Username and password must be
provided to access the share.
Username: The username can be entered using either of the following
formats:
■ username
■ domain\username
Password: Password to access the Network Share.
3. In the Location area, define the Path. This is the path where the Repository will reside.
The path must be accessible from the DSS, so if the Repository is on a different domain, the domain must be included in the
path.
4. In the Properties area, you can check the Set as default repository checkbox. This will use the Repository as the default
when defining the retention policy in a VPG.
New Repository Dialog 468

5. Click SAVE. The Repository is created.
Restore - Edit NICs Dialog
When restoring a retention set to the recovery site, this dialog shows the NIC settings for the virtual machines in the VPG. You
can choose to edit information in one field by clicking the field and updating the information. You can choose to edit the NIC
settings for several virtual machines at the same time by selecting the NICs and clicking EDIT SELECTED.
For more details, see “Restore VPG - Volumes Dialog”, on page 477.
Offsite Clone Window

On-premise environments: Cloud environments:
To create a clone of each virtual machine in a VPG on the recovery site in the production network. The clone is a copy of the
protected virtual machines on the recovery site, while the virtual machines on the protected site remain protected and live.
■ SELECT A CHECKPOINT: Opens the Checkpoints Dialog to select the checkpoint to use to make the clone.
The Using checkpoint field is updated with your selection.
■ (On-Premise) Recovery Datastore: Select the datastore to use for the recovery virtual machines.
■ Advanced: Select specific VMs to clone.
For more details, see Checkpoints Dialog.
Restore - Edit NICs Dialog 469

Open Support Case Dialog

Support cases can be opened directly in the Zerto User Interface.
Creating a support case in the Zerto User Interface simplifies the submission process since much of the information that is
required when entering a case using the Zerto Support Portal, such as the version and build numbers, is automatically added to
the case when it is submitted via the Zerto User Interface.
In addition, when the case is submitted, a snapshot of the current environment is also attached to the case. The snapshot
information includes the lists of alerts, events, tasks, VPGs, and virtual machines that are protected.
This information is used to help Zerto resolve the case quickly and, whenever possible, without the need to request more
information from you.
Note: The clocks on the machines where Zerto Virtual Replication is installed must be synchronized with UTC and with each
other (the timezones can be different). Zerto recommends synchronizing the clocks using NTP. If the clocks are not
synchronized with UTC, submitting a support case can fail.
To open a support case:
1. In the Zerto User Interface, click in the top right of the header and select Open a Case.
The Open Support Case window for the site opens.
2. Specify the case details:

■ Subject: The subject of the support case.
■ Type: The type of case being opened. Available options are:
■ Problem
■ Question
■ Description: A description of the problem or question in addition to the information supplied in the subject.
■ Allow remote log collection: How many logs is Zerto allowed to collect. Available options are:
■ Only for this case
■ For the next 30 days
■ Never
■ SSP Email Address: A valid email address registered with Zerto, with permission to open cases.
3. Click SUBMIT.
The case is processed and its progress is displayed. If the email address is not valid, the case is rejected. Once the case
submission starts, it cannot be canceled.
Open Support Case Dialog 470

Remote Support Dialog
Remote Log Collection allows customers to authorize Zerto support engineers to collect logs from their environment. By using
remote log collection customers can avoid having to use the Diagnostic Tool on their ZVM server in order to collect logs for
analysis, a potentially complex and time-consuming procedure.
■ Never: Remote log collection is not allowed (default). If remote log collection is currently allowed, the remote connection
will be terminated if you select this option.
■ For the next 30 days: Remote log collection is allowed. This permission will automatically terminate in 30 days unless
terminated by selecting the Never option.
■ Only for the duration of a specific case: You will be prompted to select the Case number from the drop-down list. The list
contains all the active cases opened under the account that the Zerto Virtual Manager is registered to. Remote log
collection will be allowed for as long as the case is active or until remote log collection is terminated by selecting the Never
option.
Remote Support Dialog 471

Restore a VPG from Repositories

Use the following procedure to restore a VM or a VPG from the repository.
To restore a VPG:
1. In the Zerto User Interface select ACTIONS > RESTORE.
The Restore wizard is displayed.
2. From the drop-down list, select the VPG to restore.

3. Click NEXT.
The RESTORE SETTINGs step appears, displaying all the available retention sets.
4. From the list of available retention sets, select the retention set to restore, where:
■ Point in Time: The date and time the retention set was performed.
■ Restore Site: The recovery site for the VPG.
■ VMs: The number of virtual machines with retention, out of the total number of virtual machines.
■ Volumes: The number of volumes with retention, out of the total number of volumes for the virtual machines.
Restore a VPG from Repositories 472

■ Repository: The name of the repository where the retention set is stored.
■ ZORG: (ZCM sites only) The Zerto organization for which the retention set was created. This field only has a
value if the Zerto Cloud Manager is connected to the site. For details, see Zerto Cloud Manager
5. When you select a retention set to restore, the list of virtual machines in the retention set appear, displaying the following
information:
# Volumes Retained: The number of volumes retained, out of the total number of volumes for the virtual machine.
6. If the restore site has the option to restore to vCD, select where to attach the restored VMs, either to VC or vCD.
7. Click NEXT.
The VM SETTINGS step is displayed.
- Or -

- Or -




Configuration:
installed.
the DNS suffix.
suffix.
virtual machine.
20. Click OK.
21. Click DONE.
22. Click NEXT.
For further details, see Using Zerto’s Long Term Retention.

Restore VPG - Volumes Dialog
When restoring a retention set to the recovery site, this window shows the datastores for a selected virtual machine in the
VPG.
■ You can edit information in one field by clicking the field and updating the information.
■ You can edit several datastore settings at the same time by selecting the datastores and clicking EDIT SELECTED.
Restore VPG - Edit Selected Volumes Dialog

Online Help for 7.0U1 H fixed - see bug 35091
Accessed from the Restore wizard, VM Settings tab, Actions column > Volumes link.
In the Volumes dialog select a datastore then click EDIT SELECTED to edit information for several datastores at the same time.

■ Datastore / Raw Disk: The datastore/storage, or RDM disk where the virtual machine files will be restored.
2. Click Save to return to the Volumes dialog.
Restore VPG - Volumes Dialog 477

Site Settings Dialog

Contains site-wide settings:
■ “Site Information Dialog”, below
■ “Performance and Throttling Dialog”, on page 480
■ “Policies Dialog”, on page 482
■ “Email Settings Dialog”, on page 483
■ “Reports Dialog”, on page 483
■ “Compatibility Dialog”, on page 484
■ “Cloud Settings Dialog”, on page 485
■ “LTR Settings Dialog”, on page 486
Site Information Dialog
To update information about the local site:
■ In vSphere and Hyper-V sites, the following fields are displayed:
■ In AWS sites, the following fields are displayed:
■ In Microsoft Azure sites, the following fields are displayed:
Site Settings Dialog 478

2. Define general information about the site.

■ (Mandatory) Site Name: The name used to identify the site.
■ (Mandatory) Site Location: Information such as the address of the site or a significant name with which to identify the
site location.
■ (AWS environments only) Bucket Name: The name of the bucket that was created when Zerto Virtual Replication was
installed. This cannot be changed.
■ (Mandatory) Contact Name: The name of the person to contact if a need arises. Mandatory.
■ Contact Email: An email address to use if a need arises.
■ Contact Phone: A phone number to use if a need arises.
3. (On premise environments) To change the User Credentials to access the vCenter or Hyper-V SCVMM server from the
Zerto Virtual Manager:
■ User Name: The administrator name used to access the vCenter or SCVMM server. The name can be entered using
either of the following formats:
■ username
■ domain\username
■ Password: The password used to access the vCenter or SCVMM server for the given user name. To ensure security,
after saving the settings, the password field is cleared.
4. (Azure environments only) Azure Settings:
■ Application Name: The name used to access Azure.
■ Client ID: A unique identifier that is associated with the access name.
■ Subscription: The subscription associated with the user.
■ Resource Name: The name of the resource the user created.
■ Storage Account Name: The name of the storage account created or selected for this site during installation.
5. Click SAVE.

Performance and Throttling Dialog
■ Bandwidth Throttling:
Define this to control the amount of traffic going out of your site. When defined, this is the maximum bandwidth that Zerto
Virtual Replication uses from this site to all peer recovery sites.
If you do not specify bandwidth throttling, the default is for Zerto Virtual Replication to automatically assign the bandwidth
used per VPG, based on using the maximum available and then prioritizing the usage according to the priority set for the
VPGs sending data over the WAN.
■ By default, Limited is selected.
■ In the text box, set the MB/sec. The valid range is from 0 to 1300 MB/sec.
■ With 0 MB/sec, Zerto Virtual Replication automatically assigns the bandwidth used per VPG, based on using the
maximum available and then prioritizing the usage according to the priority set for the VPGs sending data over the
WAN.
■ Enter the MB/sec when the value required is 100 MB/sec or more.
■ Time-based Throttling:
Define this to throttle the bandwidth during specific times. For example, during the daily peak transaction period you can
change the bandwidth throttling, to override the general setting.
■ Limited: Select to define the limit, then define:

■ From: The hour and the minute to start the throttling, using a 24-hour clock.
■ To: The hour and the minute to end the throttling, using a 24-hour clock.
■ Click Show advanced settings...
IMPORTANT:
Advanced settings must only be changed in coordination with Zerto support.

■ Enable Bandwidth Regulation: Use this for troubleshooting - to enable regulating the bandwidth.
■ Enable IO throttling: If a host is handling too many IOs, then the IOs begin to get high latencies. To offset this the VRA
sends fewer concurrent IOs. The latency is measured by taking the average latency for all IOs over a set period of time. For
example, when the period is 5000 milliseconds and the bad IO latency is 40, the average latency is calculated every 5
seconds, and if the average latency exceeds 40, the VRA sends fewer concurrent IOs.
■ Bad IO Latency VM: The threshold above which the latency is considered high, and therefore bad.
■ Requested Duration (ms): The period of time used to measure the average latency.

Policies Dialog
■ Failover/Move Commit Policy: The commit policy to use during a failover or move operation. The value set here is the
default for all failover or move operations from this point on but can be changed when defining a failover or move
operation. The following options are available:
■ None: The failover or move operation must be manually committed or rolled back by the user.
■ Commit: After the time specified in the Default Timeout field, the failover or move operation is committed. During the
specified time you can check the recovered VPG virtual machines, and you can manually commit or roll back.
■ Rollback: After the time specified in the Default Timeout field the failover or move operation is rolled back, unless you
manually commit it or roll it back before the time out value is reached. During the specified time you can check the
recovered VPG virtual machines.
■ Default Timeout: The time-out in minutes after which a Commit or Rollback is performed. A value of zero indicates that
the system automatically performs the commit policy, without waiting for any user interaction.
■ Default Script Execution Timeout: The length of time in seconds after which a script times out.
■ Enable Replication to Self: Enable the same site to be used as both the protected and recovery site.
■ Replication Pause Time: The time to pause when synchronizing a VPG if continuing the synchronization will cause all the
checkpoints in the journal to be removed.
■ For incoming replication, copy the BIOS UUID of the protected VM to the recovered VM: Select this to preserve the BIOS
UUID of the protected VM after recovery operations, in the recovery ZVM Site Settings window.
Note:
■ Preserving of the BIOS UUID is not supported in Clone and Self-Replication recovery operations.
■ Preserving of the BIOS UUID is not supported in Public Cloud.
■ Cross replication is not supported.
■ Allow Zerto to always enter hosts to maintenance mode during remediation:
■ When this is selected, if the Virtual Update Manager's Remediation task is detected, Zerto will automatically enter the
host into maintenance mode.
■ The host will exit maintenance mode when the Virtual Update Manager's Remediation task is completed.
■ The VRA is powered on automatically when the host exits maintenance mode.
Note: Automatic detection and powering off the VRA when running host maintenance mode is supported in vCenter
version 6.5. For more information see Zerto Virtual Replication Interoperability Matrix.
■ In some upgrade environments, Virtual Update Manager requires the host to enter maintenance mode. For further details,
see “Support for VMware Virtual Update Manager (VUM)”, on page 279.
Notes:
■ Recovery and journal volumes that reside on the host are not automatically migrated to another host in the cluster.

Email Settings Dialog
Define an email address to receive Zerto alerts and retention reports.

■ SMTP Server Address: The SMTP server address. The Zerto Virtual Manager must be able to reach this address.
■ SMTP Server Port: The SMTP server port, if it was changed from the default, 25.
■ Sender Account: A valid email address for the email sender name.
■ To: A valid email address where you want to send the email.
■ SEND TEST EMAIL button: Tests that the email notification is set up correctly. A test email is sent to the email address
specified in the To field.
■ Enable sending alerts: Check to be notified by email about any Zerto Virtual Replication alerts issued. An email is sent
when the alert is issued, and after it has been successfully handled and the alert is no longer valid.
Reports Dialog
Configures the Resource Report.

■ Sampling Rate: When to take resource samples to identify resource usage, either daily at a specific hour and minute or
hourly at a specific minute within each hour. Note that collecting a sample hourly provides a higher resolution picture of
replication traffic than if samples are only collected once a day.
■ Sampling Time: The time that the sample is taken.

Compatibility Dialog
Lists supported host versions*.

Note: *This screen shot is for illustration purposes only, and may differ from your specific installation.
■ ESX Version: The ESX or ESXi version.
■ Supported Update: The supported updates for the ESX or ESXi version.

Cloud Settings Dialog
■ Select Use vCD to enter the VMware vCloud Director access details:
■ IP Address: The IP address or host name of the machine where vCD runs. When connecting to vCD with multiple cells,
enter the virtual IP for the network load balancing used by the cells.
■ Manage Static Routes: Click Configure to define static route details. Go to Manage Static Routes Dialog.
■ Provider vDC Settings: Click Configure to define provider vDC settings and their datastore configuration. Go to Configure
Provider vDCs Dialog.

LTR Settings Dialog
Indexing Repository: The Repository where all the VMs’ File System Indexing meta-data is stored.
For further details, see “Using Zerto’s Long Term Retention”, on page 365.
Stop Failover Test Dialog
Stops the testing of the selected VPG.

■ Result: Whether the test passed or failed.
■ Notes: A description of the test. For example, defines where external files that describe the tests are saved. Notes are
limited to 255 characters.
■ Clicking the Stop button stops the testing. After stopping a test, the virtual machines in the recovery site are powered off
and then removed, and the checkpoint that was used for the test has the following tag added to identify the test:
Tested at startDateAndTimeOfTest.
TASKS
Monitor the recent tasks by clicking the TASKS area in the status bar at the bottom of the Zerto User Interface. The following
information is displayed for the most recent tasks:
■ The task status.
■ The name of the task.
Stop Failover Test Dialog 486

■ A description of the task.

Also, actions, such as stopping a failover test, can be performed from this dialog.
Click SHOW ALL to access MONITORING > TASKS.
TASKS 487
CHAPTER 26: GLOSSARY
Access Key (AWS) An alphanumeric text string that uniquely identifies the AWS account owner. No two accounts can
have the same AWS Access Key.
Amazon Web Services A collection of remote computing services, also called web services, that make up a cloud computing
(AWS) platform by Amazon.com. The most central and well-known of these services are Amazon EC2 and
Amazon S3. The service is advertised as providing a large computing capacity (potentially many
servers) much faster and cheaper than building a physical server farm.
Asynch Replication See Replication, Asynchronous.
Backup See Long Term Retention.
Bare Metal A computer system or network in which a virtual machine is installed directly on hardware rather than
within the host operating system (OS).
Bitmap Sync1 A change tracking mechanism of the protected machines during a disconnected state when Zerto
Virtual Replication starts to maintain a smart bitmap in memory to track and record changed storage
areas. Since the bitmap is kept in memory, Zerto Virtual Replication does not require any LUN or
volume per VPG at the source side.
The bitmap is small and scales dynamically, containing references to the areas of the source disk that
have changed but not the actual I/O. The bitmap is stored locally on the VRA within the available
resources. For example, when a VRA goes down and is then rebooted.
When required, Zerto Virtual Replication starts to maintain a smart bitmap in memory, to track and
record storage areas that change. When the issue that caused the bitmap sync is resolved, the bitmap
is used to check updates to the source disks and send any updates to the recovery site. A bitmap sync
occurs during the following conditions:
■ Synchronization after WAN failure or when the load over the WAN is too great for the WAN to
handle, in which case the VPGs with the lower priorities will be the first to enter a Bitmap Sync.
■ When there is storage congestion at the recovery site, for example when the VRA at the recovery
site cannot handle all the writes received from the protected site in a timely fashion.
■ When the VRA at the recovery site goes down and is then rebooted.
During the synchronization, new checkpoints are not added to the journal but recovery operations are
still possible. If a disaster occurs requiring a failover during a bitmap synchronization, you can recover
to the last checkpoint written to the journal.
Note: For the synchronization to work, the protected virtual machines must be powered on. The VRA
requires an active IO stack to access the virtual machine data to be synchronized across the sites. If
the virtual machine is not powered on, there is no IO stack to use to access the source data to
replicate to the target recovery disks.
Bucket (AWS) Amazon buckets are like a container for your files. You can name your buckets the way you like but it
should be unique across the Amazon system.
Business Continuity & An organization’s ability to recover from a disaster and/or unexpected event and resume or continue
Disaster Recovery operations. A disaster recovery, DR, plan is a subset of a Business Continuity plan. Organizations
(BC/DR) should have a business continuity, BC, plan in place that outlines the logistics and business operations.
The key metrics to be measured in a disaster recovery environment are the Recovery Point Objective
(RPO) and Recovery Time Objective (RTO).
Business Continuity Holistic management process that identifies potential threats to an organization and the impacts to
Management (BCM) business operations that those threats, if realized, might cause, and which provides a framework for
building organizational resilience with the capability for an effective response that safeguards the
interests of its key stakeholders, reputation, brand and value-creating activities. (ISO 22313, formerly
BS 25999-1).
Glossary 488
Glossary
Business Continuity Contains the instructions, procedures and guidelines that are developed and maintained in readiness
Plan for use during and after any potentially disruptive event in order to enable the organization to continue
to deliver its critical activities at an acceptable, predefined level.
Business Impact The process of analyzing business functions and processes and the effects that a business disruption
Analysis (BIA) might have upon them.
Checkpoint Zerto Virtual Replication ensures crash consistency by writing checkpoints to the journal every few
seconds. These checkpoints ensure write order fidelity and crash-consistency to each checkpoint.
During recovery you pick one of these crash-consistent checkpoints and recover to this point.
Additionally, checkpoints can be manually added by the administrator, with a description of the
checkpoint. For example, when an event is going to take place that might result in the need to perform
a recovery, you can pinpoint when this event occurs as a checkpoint in each journal.
Cloud Service Provider A service provider that offers customers storage or software services available via a private (private
(CSP) cloud) or public network (cloud). Usually, it means the storage and software is available for access via
the Internet. Typically Infrastructure as a Service (IaaS), Software as a Service (SaaS), or Platform as a
Service (PaaS) – are offered to their customers. Zerto enables them to offer Disaster Recovery As A
Service (DRaaS) and In-Cloud DR (ICDR), too.
Crisis Management Provides the overall coordination of the organization’s response to a crisis (which is a critical event
Plan that needs to be handled appropriately to prevent a damaging impact to the organization’s
profitability, reputation or ability to operate).
Delta Sync1 The Delta Sync uses a checksum comparison to minimize the use of network resources. A Delta Sync
is used when the protected virtual machine disks and the recovery disks should already be
synchronized, except for a possible few changes to the protected disks, for example, when the target
recovery disk is defined as a preseeded (not available in the cloud) disk or after a VRA upgrade, or for
reverse protection after a move or failover.
During the synchronization, new checkpoints are not added to the journal but recovery operations are
still possible. If a disaster occurs requiring a failover during a delta synchronization, you can recover to
the last checkpoint written to the journal.
It is not possible to perform a move during a delta sync.
Disaster The occurrence of one or more events which, either separately or cumulatively, activate disaster
recovery.
Disaster Recovery The ability to restart operations after an interruption to the business according to a plan that ensures
an orderly and timely restoration.
Disaster Recovery Plan The disaster recovery, DR, plan is a component of the Business Continuity plan that details the
process and procedures to recover the organization’s resources to continue business operations. The
Technology DR plan focuses on the IT disaster recovery. Also see Business Continuity Plan.
Disaster Recovery As A disaster recovery solution that incorporates a service provider to replace or augment the
A Service (DRaaS) organization’s data protection implementation. In a DRaaS scenario, the customer may manage and
have complete control over the production data. The Cloud Service Provider (CSP) may provide a
partial or completely managed service. In either case, the CSP must ensure the availability of the data
and adapt as the customers infrastructure changes. An advantage of this model is the CSP has
dedicated resources skilled in DR operations.
DRS (vSphere) Enables balancing computing workloads with available resources in a VMware vCenter cluster.
Emergency Covers the immediate response to a situation or set of circumstances that present a clear and present
Management threat to the safety of personnel or other assets of the organization.
Estimated Recovery This is the estimated timings based on full resource provision available during a live invocation. This
Time (ERT) time typically sits between the Net Recovery Time and the Recovery Time Achieved (RTA) time.
489
Glossary
ESX/ESXi (vSphere) Bare-metal hypervisor from VMware, meaning it installs directly on top of the physical server and
partitions it into multiple virtual machines that can run simultaneously, sharing the physical resources
of the underlying server. ESXi is the most recent version.
Extended DR includes the ability to configure both disaster recovery and Long Term Retention for the
protected virtual machines in the VPG, according to a user-defined data retention policy.
High Availability VMware high availability decreases downtime and improves reliability with business continuity by
(VMHA) enabling another ESX/ESXi host to start up virtual machines that were running on another ESX/ESXi
host that went down. High availability is automatically disabled by Zerto Virtual Replication while
updating recovered virtual machines in the recovery site from the VRA journal. After the promotion of
the data from the journal to the virtual machine completes, high availability is automatically re-
enabled. The HA configuration can include admission control to prevent virtual machines being
started if they violate availability constraints. If this is the case, then a failover, test failover or
migration of the virtual machines in a VPG to the cluster with this configuration will fail, if the
availability constraints are violated when the virtual machines are recovered.
Hyper-V A hybrid hypervisor, which is installed in the operating system. However, during installation it
redesigns the operating system architecture and becomes just like a next layer on the physical
hardware.
Hypervisor The host for multiple VMs in a virtualized environment. vSphere, ESX/ESXi, is the VMware brand
hypervisor. The hypervisor is the virtualization architecture layer that allows multiple operating
systems, termed guests, to run concurrently on a host computer.
Hypervisor Manager The tool used to manage the host. For example VMware vCenter Server and Microsoft SCVMM.
I/O (Input/Output) Describes any operation, program, or device that transfers data to or from a computer. Typical I/O
devices are printers, hard disks, keyboards, and mouses. In fact, some devices are basically input-only
devices (keyboards and mouses); others are primarily output-only devices (printers); and others
provide both input and output of data (hard disks, diskettes, writable CD-ROMs). In computer
architecture, the combination of the CPU and main memory (memory that the CPU can read and write
to directly, with individual instructions) is considered the brain of a computer, and from that point of
view any transfer of information from or to that combination, for example to or from a disk drive, is
considered I/O.
In-Cloud DR (ICDR) A disaster recovery solution that incorporates a service provider to replace or augment the
organization’s data protection implementation. When customers leverage an ICDR service, the CSP
hosts the production and DR sites. The virtual machines (VMs) are typically replicated from one CSP
datacenter to another CSP datacenter as a managed service or as managed co-located datacenters.
The customers have the ability to interact with their applications as if they were locally hosted.
Initial Sync1 Synchronization performed after creating the VPG to ensure that the protected disks and recovery
disks are the same. Recovery operations cannot occur until after the initial synchronization has
completed.
Adding a virtual machine to a VPG is equivalent to creating a new VPG and an initial synchronization
is performed. In this case, any checkpoints in the journal become unusable and only new checkpoints
added after the initial synchronization completes can be used in a recovery. The data in the journal
however remains and is promoted to the recovered virtual machine as part of a recovery procedure.
iSCSI An Internet Protocol (IP)-based storage networking standard for linking data storage facilities. By
carrying SCSI commands over IP networks, iSCSI is used to facilitate data transfers over intranets and
to manage storage over long distances.
490
Glossary
Journal Every write to a protected virtual machine is intercepted by Zerto Virtual Replication and a copy of the
write is sent, asynchronously, to the recovery site, while the write continues to be processed on the
protected site. On the recovery site the write is written to a journal managed by the Virtual Replication
Appliance. Each protected virtual machine has its own journal.
Each journal can expand to a size specified in the VPG definition and automatically shrinks when the
expanded size is not needed.
Long Term Retention Providing Zerto customers a comprehensive Data Protection solution - preserve their virtualized
environment production data, for a long period - from months to several years.
The data is copied from the Recovery site, to a local or remotely attached storage repository, without
any impact on production data or performance, via a single management platform.
Data Retention is enforced by built-in scheduling and retention mechanisms. Data can later be
restored easily, and with minimal RTO.
LUN Disk drives are the foundation of data storage, but operating systems cannot use physical disk storage
directly. The platters, heads, tracks and sectors of a physical disk drive must be translated into a
logical space, which an OS sees as a linear address space comprised of fixed-size blocks. This
translation creates a logical entity that allows operating systems to read/write files. Storage networks
must also partition their physical disks into logical entities so that host servers can access storage
area network (SAN) storage. Each logical portion is called a logical unit number (LUN). A LUN is a
logical entity that converts raw physical disk space into logical storage space, which a host server's OS
can access and use. Any computer user recognizes the logical drive letter that has been carved out of
their disk drive. For example, a computer may boot from the C: drive and access file data from a
different D: drive. LUNs do the same basic job.
Level of Business The reduced level of service that has been agreed if there is an interruption to business operations.
Continuity
Managed Service See Cloud Service Provider (CSP).
Provider (MSP)
Maximum Tolerable The maximum tolerable data loss an organization can endure without compromising its business
Data Loss objectives.
Maximum Tolerable The maximum time after which an outage will compromise the ability of the organization to achieve
Outage (MTO) its business objectives.
Maximum Tolerable The duration after which an organization's viability will be irrevocably threatened if product and
Period of Disruption service delivery cannot be resumed.
NAS A network-attached storage (NAS) device is a server that is dedicated to nothing more than file
sharing. NAS does not provide any of the activities that a server in a server-centric system typically
provides, such as e-mail, authentication or file management. NAS allows more hard disk storage
space to be added to a network that already utilizes servers without shutting them down for
maintenance and upgrades. With a NAS device, storage is not an integral part of the server. Instead, in
this storage-centric design, the server still handles all of the processing of data but a NAS device
delivers the data to the user. A NAS device does not need to be located within the server but can exist
anywhere in a LAN and can be made up of multiple networked NAS devices.
Net Recovery Time The net time achieved in recovering one or more VPGs after a disaster.
Operational Level The agreement between the service management and the Service Provision Partners. It defines the
Agreement (OLA) responsibilities for support and delivery of the services provided.
Pair Zerto Virtual Replication can be installed at one or more sites and each of these sites can connect to
any of the other sites enabling enterprises to protect virtual machines across multiple vCenters or
within the same vCenter. Two sites connected to each other are considered paired. Also see
Replication to Self.
491
Glossary
Preseed A virtual disk (a. vmdk flat file and descriptor or a .vhdx file) in the recovery site that has been
prepared with a copy of the protected data. Using this option is recommended particularly for large
disks so that the initial synchronization is much faster. When not using a preseeded disk the initial
synchronization phase has to copy the whole disk over the WAN. Zerto Virtual Replication takes
ownership of the preseeded disk, moving it from its source folder to the folder used by the VRA.
Quiesce Pausing or altering the state of running processes on a computer, particularly those that might modify
information stored on disk during a backup, in order to guarantee a consistent and usable backup.
Critical applications, such as databases have quiescent mechanisms that Zerto Virtual Replication can
use to get application consistent checkpoints.
RBAC Role-based Access control, available in the Zerto Cloud Manager via the Permissions tab.
RDM (vSphere) RDM is a mapping file in a separate VMFS volume that acts as a proxy for a raw physical storage
device. The RDM allows a virtual machine to directly access and use the storage device. The RDM
contains metadata for managing and redirecting disk access to the physical device.
The file gives you some of the advantages of direct access to a physical device while keeping some
advantages of a virtual disk in VMFS. As a result, it merges VMFS manageability with raw device
access.
Zerto Virtual Replication supports both physical and virtual mode RDMs.
Recovery Point The maximum amount of data that may be lost when the activity or service is restored after an
Objective (RPO) interruption. Expressed as a length of time before the interruption.
Recovery Time The actual times achieved during a DR test.
Achieved (RTA)
Recovery Time Related to downtime. The metric refers to the amount of time it takes to recover from a data loss
Objective (RTO) event and how long it takes to return to service. The metric is an indication of the amount of time the
system's data is unavailable or inaccessible, thus preventing normal service.
Replication, Technique for replicating data between databases or file systems where the system being replicated
Asynchronous does not wait for the data to have been recorded on the duplicate system before proceeding.
Asynchronous Replication has the advantage of speed, at the increased risk of data loss during due to
communication or duplicate system failure.
Replication to Self When a single vCenter is used, for example with remote branch offices, when replicating from one
datacenter to another datacenter, both managed by the same vCenter Server, you have to enable
replication to the same vCenter Server and pairing is not required.
Resource The elements (such as staff, site, data, IT systems) that are required to deliver an activity or service.
Resource Recovery Contains the instructions, procedures and guidelines to recover one or more resources and return
Plan conditions to a level of operation that is acceptable to the organization. Recovery Plans include
detailed recovery procedures for IT equipment and infrastructure.
Rolling Back Rolling back to an initial status, for example, after canceling a cloning operation on the VPG.
RPO See Recovery Point Objective (RPO).
RTO See Recovery Time Objective (RTO).
SAN A storage area network (SAN) is any high-performance network whose primary purpose is to enable
storage devices to communicate with computer systems and with each other. A storage device is a
machine that contains nothing but a disk or disks for storing data. A SAN's architecture works in a way
that makes all storage devices available to all servers on a LAN or WAN. As more storage devices are
added to a SAN, they too will be accessible from any server in the larger network. In this case, the
server merely acts as a pathway between the end user and the stored data. Because stored data does
not reside directly on any of a network's servers, server power is utilized for business applications, and
network capacity is released to the end user.
492
Glossary
SCSI Acronym for Small Computer System Interface. SCSI is a parallel interface standard used by many
servers for attaching peripheral devices to computers. SCSI interfaces provide for faster data
transmission rates (up to 80 megabytes per second) than standard serial and parallel ports. In
addition, you can attach many devices to a single SCSI port, so that SCSI is really an I/O bus rather
than simply an interface.
SCVMM A Microsoft management solution for the virtualized datacenter, enabling you to configure and
manage your virtualization host, networking, and storage resources in order to create and deploy
virtual machines and services to private clouds that you have created.
Secret Access Key A password. The Secret Access Key with the Access Key forms a secure information set that confirms
(AWS) the user's identity.
Security Group A virtual firewall that controls the traffic for one or more instances.
Service Continuity The continuity plan that acts as an umbrella document for a service, referencing other plans as
Plan required and providing service-specific emergency management and recovery plans.
Service Level The agreement between the customer and service provider which defines the service that is to be
Agreement (SLA) delivered to the customer.
Service Profile A predefined set of default properties to use when VPGs are defined or edited. Zerto provides a
default service profile and the option for the organization to specify their own requirements. The cloud
service provider can define service profiles to manage specific service level agreements (SLAs) with
its customers.
Service Test Plan Detailed plan defining the activities required to test the recovery of an individual IT service to meet
business requirements documented in the RTO and RPO.
Shadow VRA During normal operation, a VRA might require more disks than a single virtual machine can support. If
this situation arises, the VRA creates new shadow VRA virtual machines, used by the VRA to maintain
additional disks. These virtual machines must not be removed. A VRA can manage a maximum of
1500 volumes, whether these are volumes being protected or recovered.
Snapshots A snapshot is a block device which presents an exact copy of a logical volume, frozen at some point in
time. Typically this would be used when some batch processing, a retention process for instance,
needs to be performed on the logical volume, but you don't want to halt a live system that is changing
the data. Zerto does NOT use a snapshot mechanism, but is constantly replicating data writes.
Storage Account Storage accounts re like a container for your files. You can name your storage account the way you
(Azure) like but it should be unique across the Azure system.
Subnet A logical, visible subdivision of an IP network.[1] The practice of dividing a network into two or more
networks is called subnetting.
Subscription (Azure) The description uses information derived from the following site:
https://blogs.msdn.microsoft.com/arunrakwal/2012/04/09/create-windows-azure-subscription/
An Azure subscription grants access to Azure services and Platform Management Portal. A
subscription has two aspects:
■ The Windows Azure account, through which resource usage is reported and services are billed.
■ The subscription itself, which governs access to and use of the Azure services that are subscribed
to.
System Center Virtual See SCVMM.
Machine Manager
Virtual Machine (VM) A virtual machine (VM) is an environment, usually a program or operating system, which does not
physically exist but is created within another environment. In this context, a VM is called a guest while
the environment it runs within is called a host.
Virtual Network A virtual network dedicated to an Azure subscription.
(VNet) (Azure)
493
Glossary
Virtual Private Cloud An on demand configurable pool of shared computing resources allocated within a public cloud
(VPC) (AWS) environment, providing a certain level of isolation between the different organizations (denoted as
users hereafter) using the resources. The isolation between one VPC user and all other users of the
same cloud (other VPC users as well as other public cloud users) is achieved normally through
allocation of a Private IP Subnet and a virtual communication construct (such as a VLAN or a set of
encrypted communication channels) per user.
Virtual Protection See VPG.
Group
Virtual Replication See VRA.
Appliance
VMDK, Virtual Virtual Machines created with VMware products typically use virtual disks. The virtual disks, stored
Machine Disk as files on the host computer or remote storage device, appear to the guest operating systems as
standard disk drives.
Volume Delta Sync1 Synchronization when only delta changes for a volume needs synchronizing, for example, when a
virtual machine is added to a VPG using a preseeded disk.
During the synchronization, new checkpoints are not added to the journal. Also, recovery operations
are not possible during a Volume Delta Sync.
For the synchronization to work, the protected virtual machines must be powered on. The VRA
Volume Full Sync1 Synchronization when a full synchronization is required on a single volume.
are not possible during a Volume Full Sync.
Volume Initial Sync1 Synchronization when a full synchronization is required on a single volume, for example, when
changing the target datastore or adding a virtual machine to the VPG without using a preseeded (not
available in the cloud) disk.
are not possible during a Volume Initial Sync.
For the synchronization to work, the protected virtual machines must be powered on. The VRA
VPG Virtual machines are protected in virtual protection groups. A virtual protection groups (VPG) is a
group of virtual machines that you want to group together for replication purposes. For example, the
virtual machines that comprise an application like Microsoft Exchange, where one virtual machine is
used for the software, one for the database and a third for the Web Server, require that all three virtual
machines are replicated to maintain data integrity.
VRA A virtual machine installed on each hypervisor hosting virtual machines to be protected or recovered,
that manages the replication of protected virtual machine writes across sites. A VRA must be installed
on every hypervisor that hosts virtual machines that require protecting in the protected site and on
every hypervisor that will host the replicated virtual machines in the recovery site.
vSphere VMware’s server virtualization platform for building a cloud infrastructure.
494
Glossary
Zerto Cloud Connector A virtual machine installed on the cloud side, one for each customer organization replication network.
(ZCC) The Zerto Cloud Connector requires both cloud-facing and customer-facing static IP addresses. The
ZCC routes traffic between the customer network and the cloud replication network, in a secure
manner ensuring complete separation between the customer network and the cloud service provider
network. The ZCC has two Ethernet interfaces, one to the customer’s network and one to the cloud
service provider's network. Within the cloud connector a bidirectional connection is created between
the customer and cloud service provider networks. Thus, all network traffic passes through the ZCC,
where the incoming traffic on the customer network is automatically configured to IP addresses of the
cloud service provider network.
Zerto Cloud Manager A Windows service, which enables managing all the cloud sites offering disaster recovery using a
(ZCM) single interface. The ZCM manages the DR either as a service (DRaaS) or completely within the cloud
environment, protecting on one cloud site and recovering to a second site (ICDR).
Zerto User Interface Recovery using Zerto Virtual Replication is managed via a user interface: in a browser via the Zerto
Virtual Manager Web Client, or in either the vSphere Web Client or vSphere Client console in the
Zerto tab.
Zerto Self-service An out-of-the-box DR portal solution with a fully functioning browser-based service portal to enable
Portal (ZSSP) cloud service providers to quickly introduce disaster recovery as part of their portal offering.
Zerto Virtual Backup A Windows service that manages File Level Recovery operations within Zerto Virtual Replication.
Appliance (VBA) These repositories can be local or on a shared network.
Zerto Virtual Manager A Windows service, which manages everything required for the replication between the protection
(ZVM) and recovery sites, except for the actual replication of data. The ZVM interacts with the vCenter
Server to get the inventory of VMs, disks, networks, hosts, etc. The ZVM also monitors changes in the
VMware environment and responds accordingly. For example, a vMotion operation of a protected VM
from one host to another is intercepted by the ZVM so the Zerto User Interface is updated
accordingly.
ZORG, Zerto Cloud customers are defined to Zerto Cloud Manager as Zerto organizations, ZORGs. A ZORG is
Organization defined with the cloud resources it can use, the permissions that it has to perform operations, such as
testing a failover or defining a VPG.
1. Synchronization after a recovery starts after the promotion of data from the journal to the virtual machine disks ends. Thus, synchronization of virtual ma-
chines can start at different times, dependent on when the promotion for the virtual machine ends. All synchronizations are done in parallel, whether a delta
sync or full sync, etc.
495
INDEX
A cluster .............................................................................................416
affinity rules ...........................................272, 277, 278, 279, 417 commit policy
alerts .............................................................................................. 429 changing ................................................................................. 313
email settings ........................................................................315 for failover and move .........................................................482
in Dashboard .........................................................................218 for live DR test ...................................................................... 331
in single VPG tab .................................................................222 for move ................................................................................ 337
in single VRA tab ..................................................................231 site setting ............................................................................482
AMQP compression
Erlang OTP ............................................................................436 to minimize bandwidth .........................................................25
installation .............................................................................436 connecting sites, see pairing
RabbitMQ ..............................................................................436 connectivity between Zerto components, checking ...........281
application-consistent checkpoints ........................................252
architecture ......................................................................................10 D
AWS Dashboard ...................................................................................... 30
defining offsite backup ............................................... 105, 116 alerts, events, and running tasks ........................... 218, 222
editing VPG settings .................................................450, 451 performance graphs ............................................................ 217
limitations .............................................................................243 stopping a failover test ...................................................... 328
re-IP process .............................................104, 116, 208, 214 data compression ...............................51, 76, 122, 142, 164, 185
Azure datastore maintenance ..............................................................266
limitations ............................................................................ 244 ddb.geometry.biosSectors ........................................................... 41
ddb.geometry.sectors ................................................................... 41
B default disk geometry ................................................................... 41
backup default gateway, configuring .................. 65, 88, 177, 196, 452
creating a repository ..........................................................369 delta sync ....................................................................................... 251
backups, see offsite backup definition ............................................................................... 263
bandwidth .............................................................................311, 480 diagnostics utility, functions ................................................... 404
freeing up ............................................................................. 250 disaster recovery
in resources report ..............................................................397 during a test ......................................................................... 354
site settings ..................................................................311, 480 types ..........................................................................................35
bitmap sync ...........................................262, 272, 277, 279, 488 disk
definition ................................................................................262 IDE ............................................................................................ 40
boot order insufficient space ................................................................403
configuring ............................................. 48, 73, 99, 111, 429 RDM ...58, 59, 82, 83, 129, 130, 150, 151, 171, 172, 190,
branding the Recovery report ..................................................396 191, ..............357, 440, 441, 456, 457, 461, 462
SCSI .......................................................................................... 40
disk size
C
estimating ..... 58, 82, 129, 150, 171, 190, 440, 456, 461
change rate
diskbox, see shadow VRA ......................................................... 267
estimating .....58, 82, 129, 150, 171, 190, 440, 456, 461
checkpoint ........................................................252, 356, 421, 433
adding manually ..................................................................253 E
application-consistent .......................................................252 EBS disks (AWS) ................................................92, 93, 200, 201
choosing ............................................................ 327, 356, 357 EC2 (AWS) ..........................................................92, 93, 200, 201
renaming after testing failover ........................................329 email settings ................................................................................314
Chrome ............................................................................................ 26 configure ................................................................................314
clock synchronization with NTP .................................... 317, 470 for alerts and backup reports ............................................ 315
cloning enable replication to self
description ............................................................................355 site setting .................................................................... 68, 482
to Hyper-V ............................................................................357 environment variable .................................................................254
to VMware vSphere ............................................................357 ZertoForce ............................................................................ 254
ZertoOperation ...................................................................254
ZertoVCenterIP ...................................................................254
496
ZertoVCenterPort ...............................................................254 history in VPG tab ................................................................ 221
ZertoVPGName ...................................................................254 location .................................................................................... 42
events sizing ........................................................................................ 42
in Dashboard .........................................................................218
in single VPG tab ........................................................218, 222 K
in single VRA tab ..................................................................231 Keep Source VMs .............................................................335, 340
export to CSV, VPG details ...................................................... 220
L
F license .............................................................................................316
failback updating ................................................................................. 317
after failover .........................................................................346 logs .................................................................................................. 410
description .............................................................................321 collecting .....................................................................405–410
enable after failover ............................................................349 description ............................................................................ 410
enable after move ...............................................................338 Long Term Repository
failover .............................................................................................351 editing .................................................................370, 371, 445
commit policy ............................................................. 313, 482 Long Term Retention
during a test ..........................................................................354 manually running job ......................................................... 374
failback ...................................................................................349 long term retention ........................................................................36
report ......................................................................................395 manually running job ......................................................... 374
scratch volume ......................................................................351
stopping a test .....................................................................328
testing ..........................................................................324, 327 M
topology .................................................................................350 MAC address ................................................................................134
failover test ...................................................................................327 Microsoft SQL Server Database, reconfiguring ..................284
failover tests report .....................................................................395 migration, see move
file recovery ..................................................................................358 modify volumes ...........................................................................249
Firefox ............................................................................................... 26 RDM .......................................................................................249
folder recovery .............................................................................358 monitor
force delete of VPG .....................................................................252 alerts, events, and running tasks ........................... 218, 222
full synchronization site .......................................................................................... 228
for volumes ...........................................................................265 virtual machines .................................................................. 226
VPG ................................................................................218, 221
VPGs tab ................................................................................218
G VRA ......................................................................................... 231
geometry ..........................................................................................41 move ............................................................................................... 339
geometry, non-default ..59, 83, 130, 151, 172, 191, 441, 457, commit policy .............................................................313, 482
462 description ............................................................................ 335
ghost VRA .....................................................................................278 failing back ............................................................................ 338
glossary ...............................................................................488–495 initiating ................................................................................. 337
reverse replication .............................................................. 338
H using a scratch volume ...................................................... 339
HA, see high availability
high availability ............................................................................ 416 N
HTTPS ............................................................................................285 NAT rules .......................................................................................154
needs configuration ....................................................................264
I troubleshooting ...................................................................402
IDE devices .......................................................................................41 network
IDE disks ..........................................................................................40 for failing over or moving .......................... 62, 86, 175, 194
initial synchronization ..........................................................41, 251 for testing ...................................................... 62, 86, 175, 194
definition ............................................................................... 264 NIC
Internet Explorer, supported versions ...................................... 26 defining network details ....................................................469
J
journal .................................................75, 100, 113, 183, 205, 212
adding a checkpoint ............................................................253
497
NTP clock synchronization ............................................. 317, 470 recovery site, pairing .................................................................. 285
registration ....................................................................................316
O re-IP ............................................65, 88, 134, 156, 177, 196, 452
offsite backup ....................................................................... 36, 392 in AWS ...................................................... 104, 116, 208, 214
editing a repository ....................................................370, 371 vNIC configuration ............................................ 65, 177, 452
flow ........................................................................................... 36 Replication Pause Time .............................................................250
retention period .........................................................242, 392 replication to self ........................................................................... 68
running unscheduled ................................................375, 380 configuring .............................................................................. 68
status in single VPG tab .....................................................221 enabling ....................................................................................32
status in VPGs tab .................................................... 219, 220 reports
offsite backup repository Outbound Protection Over Time .................................... 393
creating ....................................................................... 369, 468 Protection Over Time by Site ...........................................394
offsite clone, see cloning Recovery ................................................................................ 395
Outbound Protection Over Time report ................................393 Resources .............................................................................. 397
Usage .................................................................................... 400
VPG Performance ............................................................... 401
P repository for offsite backup .................................369, 370, 371
pairing ...................................................................................285, 435 resize volumes .............................................................................249
pass-through disks ...................................................... 71, 341, 353 RDM .......................................................................................249
pause protection ......................................................................... 250 Resources report ......................................................................... 397
performance graphs configuring ............................................................................483
for a single VPG ....................................................................221 generating with REST API ................................................. 397
for a single VRA ....................................................................231 output ....................................................................................398
for a site ..................................................................................217 retention ...........................................................................................36
permissions in vCenter Server ................................................. 412 manually running job ......................................................... 374
PowerShell cmdlet retention period
Set-Checkpoint ....................................................................252 offsite backup ...................................................................... 392
preseed ..............41, 59, 83, 130, 151, 172, 191, 441, 457, 462 retention policy ............................................................................... 12
promotion of data ..........................................340, 352, 403, 417 reverse protection, see failback
hangs ..................................................................................... 403 reverse replication
when VRA fails ................................................................... 403 move ....................................................................................... 338
protected site, pairing ................................................................285 rollback
Protection Over Time by Site report ......................................394 setting for failover or move ............................................... 313
provisioned storage .......................................219, 227, 232, 234
S
R same site replication .................................................................... 68
RabbitMQ scratch volume ......................................................... 327, 339, 351
Erlang OTP ............................................................................436 scripts
installation .............................................................................436 creating ..................................................................................254
raw disk (RDM) ...... 58, 71, 82, 129, 150, 171, 190, 341, 353, execution timeout
440, ...................................................................................... 456, 461 advanced settings ........................................................ 313
modifying .............................................................................. 249 running ................................................................................... 253
recovery ZertoForce environment variable ................................... 254
during a test ..........................................................................354 ZertoOperation environment variable .......................... 254
report ......................................................................................395 ZertoVCenterIP environment variable .......................... 254
to Hyper-V ............................................................................... 71 ZertoVCenterPort environment variable ......................254
to same site ............................................................................ 68 ZertoVPGName environment variable .........................254
to VMware vCenter Server .................................................46 SCSI disks ........................................................................................ 40
to VMware vCloud Director .............................................. 118 security certificate
types ......................................................................................... 35 adding ...................................................................................... 28
recovery flows ................................................................................ 35 replacing ................................................................................ 285
recovery host, changing .............................................................432
Recovery report ...........................................................................395
branding .................................................................................396
498
security group ..............................................................................243 for testing failover ............................................................... 327
self replication ................................................................................ 68 in Dashboard .........................................................................218
service profile ..................................................................................41 in Sites tab ............................................................................ 223
Set-Checkpoint cmdlet ..............................................................252 triggers
settings synchronization ................................................................... 259
importing VPG .....................................................................258 VPG synchronization ......................................................... 265
shadow VRA ...................................................................... 267, 493 troubleshooting
signature matching, WAN optimization ................................. 25 disk space .............................................................................403
site details VRA crashes during promotion .......................................403
monitoring ..............................................................................217 Zerto Virtual Manager service ........................................402
site information ........................................................................... 309
site settings U
commit policy ...................................................................... 482 usage
defining ................................................................................. 308 report .................................................................................... 400
email ....................................................................................... 314 Usage report ................................................................................ 400
enabling replication to self .................................................. 68
sites tab ..........................................................................................228
sizing V
volumes .........58, 82, 129, 150, 171, 190, 440, 456, 461 v
WAN ........................................................................................ 34 vApp network mapping ..............................................................154
status vCD guest customizing ......................................................133, 154
VPG .........................................................................................259 VIB .......................................................... 270, 275, 431, 434, 465
storage Virtual Backup Appliance, see VBA
for replicated data 57, 81, 128, 149, 170, 189, 439, 455, virtual machine
................................................................................. 460 modify RDM .........................................................................249
provisioned ..............................................219, 227, 232, 234 modify volumes ...................................................................249
sizing .............. 57, 81, 128, 149, 170, 189, 439, 455, 460 modifying replication settings .........................................446
storage profile ..............................................................................399 monitoring ............................................................................ 226
Storage vMotion .......................................................................... 417 virtual protection group, see VPG
subnet .............................................................................................243 Virtual Replication Appliance, see VRA
summary tab ..................................................................................217 VM in Several VPGs ... 41, 47, 72, 98, 110, 119, 139, 161, 181,
synchronization 203, ........................................................ 210, 243, 246, 247, 335
delta ...... 57, 81, 128, 149, 170, 189, 251, 439, 455, 460 VMDK size limitations
forcing ................................................................................... 250 adjusting .................................................................................. 34
full ............................................................................................265 vMotion ..........................................................................................417
initial ................................................................................ 43, 251 VMware high availability (VMHA) .........................................416
synchronization triggers VMware host maintenance ...................................................... 278
VPG ...............................................................................259, 265 VMware vCenter Server
cloning to it ........................................................................... 357
vNIC
T configuring ....................................................................134, 155
tasks ................................................................................................224 configuring re-IP .................................................................... 88
test failover ...................................................................................324 vNIC configuration
initiating .................................................................................354 re-IP ....................................................................... 65, 177, 452
process ...................................................................................324 volume
scratch volume .....................................................................327 estimating size 58, 82, 129, 150, 171, 190, 440, 456, 461
stopping .................................................................................328 full synchronization ............................................................ 265
test scratch volume ....................................................................327 VPC (AWS) .................................................................................. 243
thin provisioning .......................................................................... 415 VPG
throttling .......................................................................................... 25 add a virtual machine .....................................243, 246, 247
setting ......................................................................................311 add a virtual machine via a vSphere console ................. 69
site settings ..................................................................311, 480 creating to AWS ..................................................................... 91
time-based bandwidth throttling creating to Hyper-V .............................................................. 71
site settings ................................................................. 312, 480 creating to same site ............................................................ 68
topology creating to vCenter Server ...........................................46, 67
for failover .............................................................................350 definition ..........................................................................35, 40
for move .................................................................................339
499
deleting ...................................................................................251 Z
editing ..........................................................................450, 451 Zerto User Interface
handling error ........................................................................251 configuration .......................................................................... 30
importing settings ...............................................................258 customizing ..............................................................................31
modify .................................................................................... 241 Zerto Virtual Manager .................................................................. 10
monitoring .................................................................... 218, 221 Windows service ................................................................402
pausing protection ............................................................. 250 Zerto Virtual Manager Web Client ...........................................26
saving details to file ........................................................... 220 Zerto Virtual Replication
synchronization triggers ..........................................259, 265 architecture ............................................................................. 10
synchronize .......................................................................... 250 benefits .....................................................................................23
synchronizing ...................................................................... 250 definition ....................................................................................9
testing ....................................................................................324 how it works ............................................................................. 11
VPG Performance report ........................................................... 401 logs ......................................................................................... 410
VPG status ....................................................................................259 monitoring .............................................................................216
VPG waiting to be removed .............................................252 ZertoForce script .........................................................................254
VPG waiting to be removed ZertoOperation script ................................................................254
force delete ...........................................................................252 ZertoVCenterIP script ................................................................254
VPGs tab ZertoVCenterPort script ...........................................................254
monitoring ..............................................................................218 ZertoVPGName script ...............................................................254
VRA .................................................................................... 11, 12, 493 ZORG
changing recovery host .....................................................432 preseeding .... 60, 84, 131, 152, 173, 192, 442, 458, 463
crash during promotion .................................................... 403 ZVM, see Zerto Virtual Manager
edit connection method ....................................................275
edit host password .............................................................275
editing settings ....................................................................273
ghost .......................................................................................278
monitoring ..............................................................................231
shadow VRA .........................................................................267
uninstalling ..................................................................277–278
upgrading ....................................................................... 272–??
vSphere Client console .........................................................27, 69
vSphere Web Client ...............................................................27, 69
working with Zerto Virtual Replication ........................... 27
vStorage
thin provisioning .................................................................. 415
W
WAN
compressing traffic ....................51, 76, 122, 142, 164, 185
signature matching ............................................................... 25
WAN bandwidth, freeing up ................................................... 250
WAN optimization ........................................................................ 25
WAN sizing ..................................................................................... 34
Windows service
Zerto Virtual Manager ...................................................... 402
Zerto helps customers accelerate IT transformation by eliminating the risk and complexity of modernization and cloud For assistance using
adoption. By replacing multiple legacy solutions with a single IT Resilience PlatformTM, Zerto is changing the way di- Zerto Virtual Replication
saster recovery, backup and cloud are managed. At enterprise scale, Zerto's software platform delivers continuous software, contact:
availability for an always-on customer experience while simplifying workload mobility to protect, recover and move ap- @Zerto Support.
plications freely across hybrid and multi-clouds. Zerto is trusted by over 6,000 customers globally and is powering
resiliency offerings for Microsoft Azure, IBM Cloud, AWS, SunGard AS and more than 350 cloud services providers.
Learn more at Zerto.com
Copyright © 2019, Zerto Ltd. All rights reserved.

Zerto Virtual Manager VSphere Administration Guide

Uploaded by

Copyright:

Available Formats

Zerto Virtual Manager VSphere Administration Guide

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Zerto Virtual Manager VSphere Administration Guide

Uploaded by

Copyright:

Available Formats

Zerto Virtual

ZVR-ADVV-7.0 Rev01 U2 July2019

ZVR-ADVV-7.0 Rev01 U2 July2019

CHAPTER 1: INTRODUCTION TO THE ZERTO SOLUTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

CHAPTER 2: ACCESSING THE ZERTO USER INTERFACE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

CHAPTER 3: INITIAL SITE CONFIGURATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

CHAPTER 4: OVERVIEW OF RECOVERY FLOWS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

CHAPTER 5: INTRODUCTION TO PROTECTING VIRTUAL MACHINES . . . . . . . . . . . . . . . . . . . . . . . . . . 40

CHAPTER 6: PROTECTING VIRTUAL MACHINES FROM A VCENTER SERVER . . . . . . . . . . . . . . . . . . . . 45

CHAPTER 7: PROTECTING VIRTUAL MACHINES TO AND FROM VCLOUD DIRECTOR . . . . . . . . . . . .117

CHAPTER 8: MONITORING ZERTO VIRTUAL MANAGER . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

CHAPTER 9: MANAGING VPGS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

CHAPTER 10: MANAGING VRAS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

CHAPTER 11: MANAGING A ZERTO VIRTUAL MANAGER. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281

CHAPTER 12: MANAGING A ZERTO VIRTUAL MANAGER CLUSTER . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

CHAPTER 13: ADVANCED SITE CONFIGURATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .308

CHAPTER 14: OVERVIEW OF DISASTER RECOVERY OPERATIONS . . . . . . . . . . . . . . . . . . . . . . . . . . . . .320

CHAPTER 16: MIGRATING A VPG TO A RECOVERY SITE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335

CHAPTER 17: MIGRATING ZERTO TO A NEW VIRTUAL MACHINE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343

CHAPTER 18: MANAGING FAILOVER . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345

CHAPTER 19: CLONING A VPG TO THE RECOVERY SITE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

CHAPTER 20: RECOVERING FILES AND FOLDERS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358

CHAPTER 21: USING ZERTO’S LONG TERM RETENTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365

CHAPTER 23: TROUBLESHOOTING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .402

CHAPTER 24: ZERTO AND VMWARE FEATURES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412

CHAPTER 25: THE ZERTO VIRTUAL MANAGER USER INTERFACE. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419

CHAPTER 26: GLOSSARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .488

What is the Zerto Solution?

The Zerto Solution Architecture

The Zerto Solution Architecture 10

How Zerto Recovery Works

How Zerto Recovery Works 11

Zerto Analytics - Overview

Zerto Analytics - Overview 12

“Zerto Analytics Product Feature Matrix”, on page 16

Before Getting Started with Zerto Analytics

Accessing the Zerto Analytics Portal

Accessing Zerto Mobile

Zerto Analytics APIs

Using the Zerto Analytics Portal

Zerto Analytics - Overview 13

See the following sections:

Monitoring Alerts, Events and Tasks

Zerto Analytics - Overview 14

End-User Analytics for Service Providers

Planning your Data Protection Strategy

To begin planning your data strategy:

3. Click Save; The Planning view is displayed.

Zerto Analytics - Overview 15

Zerto Analytics Product Feature Matrix

Zerto Analytics - Overview 16

Zerto Analytics Secure Architecture

Transmission and Storage of Site Status

User Authentication and Authorization

Reporting Historical Data

Zerto Analytics Collected Data

Zerto Analytics - Overview 17

COMPONENTS PARAMETER DESCRIPTION

Zerto Analytics - Overview 18

Zerto Analytics - Overview 19