PowerProtect Data Manager Troubleshooting - Participant Guide
PowerProtect Data Manager Troubleshooting - Participant Guide
MANAGER
TROUBLESHOOTING
PARTICIPANT GUIDE
PARTICIPANT GUIDE
PowerProtect Data Manager Troubleshooting-SSP
To resolve this issue, deploy the PowerProtect Data Manager server and other
data sources in a different network. If you cannot modify the deployed network, run
a script tool within PowerProtect Data Manager to switch the private Docker
network to a different network.
1. SSH into PowerProtect Data Manager: Log in with operating system admin
credentials, and then use the su command to become root.
2. Modify the Docker network by running the following command:
− /usr/local/brs/puppet/scripts/docker_network_switch.sh
subnet gateway
subnet: describes the new network in the format 172.25.0.0/24
gateway: is the gateway for the private network. For example: 172.25.0.1
PowerProtect Agent Service installation might fail with the following error message:
Workaround:
• Clean up the PowerProtect agent service entries, and retry the installation.
• On Windows: <agent_service_installation_location>\logs
• On Linux: <agent_service_installation_location>/logs
To change the log level and retention of temporary files, you can modify specific
parameter settings in the config.yml file with a text editor.
To modify the log level and retention of temporary files, you can perform the
following steps:
Ensure that certificates existing on the preupgrade system also exist on the
postupgrade system
PowerProtect Data Manager enables you to finish adding the protection policy
without the PowerProtect DD system Storage Unit. However, if you later run a
backup of this protection policy, the backup process is suspended indefinitely with
no error message.
Workaround:
To continue backup operations on this device, you must perform a cleanup on the
PowerProtect DD system.
At 95% capacity, PowerProtect Data Manager generates a daily critical alert. At this
threshold, capacity exhaustion is imminent.
Changing the capacity alerting thresholds requires contacting Dell EMC Support.
Ensure that you do not include such namespaces in PowerProtect Data Manager
Kubernetes protection policies.
The PowerProtect controller configures itself and Velero for the protection of
persistent volumes on first class disks (FCDs) if the controller detects a storage
class with the VMware CSI provisioner csi.vsphere.vmware.com.
If the VMware CSI driver and storageclass are installed after the Kubernetes
cluster is added as an asset source to PowerProtect Data Manager, FCD backups
fail with an error indicating failed to create backup job.
To resolve this issue, restart the PowerProtect controller by running the following
commands:
Add alternate storage class mapping for temporary PVCs created from
snapshot during non-FCD backup
In some scenarios, the storage class of the PVC being backed up might not be the
most appropriate storage class for the temporary PVC created from the snapshot
during the backup.
For example, when creating a volume from a snapshot, a dedicated storage class
that does not allocate space for the temporary PVC might be preferred. This can be
useful for backing up NFS PVs and use a storageclass with rootclient enabled.
To add an alternate storage class mapping for temporary PVCs, perform the
following:
For example, this can occur if the application has environment variables or other
configuration elements that adhere to the namespace from which the backup copy
was created, such as variables that point to services using FQDN in the form my-
svc.mynamespace.svc.cluster-domain.example or headless services
using FQDN in the form pod-name.my-headlesssvc.my-
namespace.svc.cluster-domain.example.
If this issue occurs, manually edit the deployments after the restore.
If the restore operation fails with the error message -- Failed to create Proxy Pods.
Creating Pod exceeds the safeguard limit of 10 minutes, verify that the CSI driver is
functioning properly, and can dynamically provision volumes.
If the Kubernetes cluster is set up in high availability mode and the Kubernetes API
server is not configured to send the ROOT certificate as part of the TLS
communication setup, backup and restore operations might fail with the following
error:
javax.net.ssl.SSLHandshakeExcept ion:
sun.security.validator.Validator Exception: PKIX path
building failed: sun.security.provider.certpath.S
unCertPathBuilderException: unable to find valid
certification path to requested target
1. Copy the root certificate of the Kubernetes cluster to the PowerProtect Data
Manager server.
2. As an administrator on the PowerProtect Data Manager server, import the
certificate to the PowerProtect Data Manager trust store by running the
following command:
Network configuration settings are not restored with virtual machine after recovery
of a vApp backup
Network configuration settings are not backed up with the virtual machine as part of
a vApp backup. As a result, when you restore a vApp backup, you must manually
reconfigure the network settings.
Using special characters in the virtual machine names, datastore names, or data
center names can cause problems with the VM Direct Engine, such as failed
backups and restores. Special characters include the following: % & * $ # @ ! \ / : *
? " < > | ;, and so on.
Hot Add mode backups fail when datacenter names contain special characters
Virtual machine backups fail when the data center name contains special
characters and the transport mode that is specified for VM Direct backups is Hot
Add only.
Avoid using special characters in the data center name, for example,
"Datacenter_#2@3", or specify Hot add with fallback to Network Block Device for
the transport mode.
VM Direct Engine supports only the Hot Add and NBD transport modes. The Hot
Add mode is the default transport mode. For a protection policy, you can specify to
use only Hot Add mode, only NBD mode, or Hot Add mode with fallback to NBD if
Hot Add is not available.
Lock placed on virtual machine during backup and recovery operations continues
for 24 hours if VM Direct Engine fails
During VM Direct backup and recovery operations, a lock is placed on the virtual
machine. If a VM Direct appliance failure occurs during one of these sessions, the
lock is extended to a period of 24 hours, during which full backups and transaction
log backups fail with the following error until the lock is manually released.
When you delete a vCenter Server asset source from PowerProtect Data Manager
without removing any vProxy/Search Nodes that the vCenter is hosting, the Nodes
will become non-operational and move into Failed status upon the next health
check. As a result, PowerProtect Data Manager upgrades fail. This issue also
occurs when you move the ESXi hosting the vProxy/Search Nodes from one
vCenter to another vCenter.
To correct this issue, you can perform one of the following actions:
The following error message appears when a backup fails for a virtual machine or
when a previous backup of the virtual machine was abruptly ended and the VM
annotation string was not cleared:
To resolve this issue, clear the annotation string value for the virtual machine:
1. Connect to the vCenter server and navigate Home > Inventory > Hosts and
Clusters.
2. Select the virtual machine, and then select the Summary tab.
3. Clear the value that appears in the EMC Proxy Session field.
If transaction log backup is not appropriate for a database, the database will
automatically be skipped.
• In order to use Hot Add transport mode, all VM proxies with access to the
encrypted virtual machine's datastore must be encrypted as well. For example,
if encrypted virtual machines reside in an ESXi cluster, all VM proxies deployed
on the cluster must also be encrypted.
• Restoring encrypted virtual machines to a different vCenter Server is not
supported. You must perform the restore to the original virtual machine or a new
virtual machine in the same vCenter.
• Restoring an encrypted virtual machine backup to a new virtual machine in the
original vCenter Server restores the virtual machine disks (VMDKs) in clear text
if the VMDKs are not encrypted.
• In order to backup and restore encrypted virtualization-based security (VBS)
and virtual Trusted Platform Module 2.0 (vTPM) virtual machines, vCenter 7.0
U1 or later is required.
After you replace the default self-signed security certificates, you may see the
following errors in the vSphere client PowerProtect portlet when you select virtual
machines:
To correct this issue, reinstall the PowerProtect plug-in to apply the new
certificates.
During the VM Direct backup and recovery operations, a lock is placed on the
virtual machine. If a VM Direct appliance failure occurs during one of these
sessions, the lock is extended to a period of 24 hours, during which full backups
and transaction log backups fail with the following error until the lock is manually
released:
SQL Server application-consistent virtual machine backups might fail with the
following error when the disk.EnableUUID variable for the virtual machine is set
to False.
To resolve this issue, ensure that the disk.EnableUUID variable for the virtual
machines included in an SQL Server application-consistent backup is set to True.
A SQL Server application-aware virtual machine backup succeeds but displays the
following error when the disk.EnableUUID variable for the virtual machine is set
to TRUE:
To resolve this issue, after you set the disk.EnableUUID variable to TRUE,
reboot the virtual machine.
Perform the following procedure when you delete a vCenter server as an asset
source in PowerProtect Data Manager and you will not be re-adding the vCenter:
If a virtual machine protection copy does not display under the available copies in
PowerProtect Data Manager, verify the following:
An instant access restore consists of two stages. First, a virtual machine is made
available in the UI as an instant access virtual machine without moving the virtual
machine to permanent storage. Second, storage vMotion is initiated to migrate the
virtual machine to permanent storage.
If at any point during the migration a restore failure occurs, the instant access
session is not automatically removed until after the expiration period for an instant
access virtual machine restore, which is 7 days by default. This behavior is
intentional for the following reasons:
• To avoid data loss, since changes might have been made to the virtual machine
during that time.
• To provide you with the opportunity to fix the issue (for example, to free up
space on the restore destination or choose a different datastore) and then take
the appropriate action.
A virtual machine restore might fail with the following error due to network issues
between the PowerProtect DD system and PowerProtect Data Manager or the
vCenter/ESXi.
Ensure that you have proper name resolution between the PowerProtect DD
system and PowerProtect Data Manager, and vCenter/ESX.
The DD NFS share might not be removed after a successful virtual machine
restores to the original. When this occurs, the restore stops responding and the
following DD NFS clients appear enabled in the DD system.
If you encounter this issue, you can wait 24 hours for PowerProtect Data Manager
to clean up the DD NFS shares, or you can stop the restore and clean up the DD
NFS clients manually by performing the following steps.
A virtual machine restore might fail with the following error due to corruption of the
VM Direct that is running in PowerProtect Data Manager:
Ensure that the vproxyd service is running in PowerProtect Data Manager by typing
the command: ps xa | grep vproxy
Log in as the root user, and restart the vproxyd service on PowerProtect Data
Manager by typing the command: systemctl restart vproxyd
Virtual machine restore fails with error "User EARA does not have
proper privileges"
A virtual machine restore fails with the error "User EARA does not have proper
privileges" when the user does not have adequate privileges to perform the restore
operation.
Ensure that the PowerProtect Data Manager user performing the restore belongs to
System Tenant and has the Export and Recovery Admin role.
A virtual machine restore fails with the following error if the previous restore
operation for the same virtual machine is still in progress or did not complete
successfully:
If the previous restore operation for this virtual machine is still in progress, monitor
the progress in PowerProtect Data Manager until the restore completes. If the
virtual machine restore is complete but the task stops responding, you must
manually cancel the restore in PowerProtect Data Manager by restarting the Virtual
Machine Data Management (VMDM) service. VMDM is a PowerProtect internal
service which acts as an interface for Workflow Manager and VM Direct Engine.
Product version in DES-3521 proven exam for PowerProtect Data Manager is 19.8.
(C) - Classroom
Click the Save Progress and Exit button below to record this
eLearning as complete.
Go to the next eLearning or assessment, if applicable.