PowerProtect Data Manager

Version 19.3

Deployment Guide
Rev 01
December 2019
 Copyright © 2017-2019 Dell Inc. or its subsidiaries. All rights reserved.

Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.

THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS-IS.” DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND
WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. USE, COPYING, AND DISTRIBUTION OF ANY DELL SOFTWARE DESCRIBED
IN THIS PUBLICATION REQUIRES AN APPLICABLE SOFTWARE LICENSE.

Dell Technologies, Dell, EMC, Dell EMC and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property
of their respective owners. Published in the USA.

Dell EMC
Hopkinton, Massachusetts 01748-9103
1-508-435-1000 In North America 1-866-464-7381
www.DellEMC.com

2 PowerProtect Data Manager Deployment Guide

CONTENTS

Preface 5

Chapter 1 Deploying and Configuring the Virtual Appliance 9

PowerProtect Data Manager Interoperability Introduction................................ 10
Microsoft application agent, Oracle RMAN agent, and Data Domain
interoperability.................................................................................................. 10
File System agent interoperability and supported operating systems ................ 11
PowerProtect Data Manager resource requirements in a VMware environment...
12
PowerProtect Data Manager OVA deployment methods................................... 12
Deploy the OVA file to a vCenter server............................................... 13
Deploy the OVA file to an ESXi host..................................................... 14
Configure the PowerProtect Data Manager virtual appliance............................ 15
Log bundle creation to troubleshoot configuration failures................................ 17

Chapter 2 Getting Started 19

Introducing PowerProtect Data Manager software...........................................20
References........................................................................................................ 21
Terminology.......................................................................................................21
Accessing the PowerProtect Data Manager UI................................................. 22
Replacing the default PowerProtect Data Manager certificate ........... 23
Getting Started.................................................................................... 24
UI tools and options .............................................................................24

Chapter 3 Upgrading the PowerProtect Data Manager Software 27

Upgrade the software from PowerProtect Data Manager version 19.1..............28
Upgrade PowerProtect Data Manager from version 19.2 and later................... 29
Managing certificates after upgrading from versions earlier than PowerProtect
Data Manager version 19.1................................................................................ 30

PowerProtect Data Manager Deployment Guide 3

Contents

4 PowerProtect Data Manager Deployment Guide

Preface

As part of an effort to improve product lines, periodic revisions of software and hardware are
released. Therefore, all versions of the software or hardware currently in use might not support
some functions that are described in this document. The product release notes provide the most
up-to-date information on product features.
If a product does not function correctly or does not function as described in this document,
contact a technical support professional.
Note: This document was accurate at publication time. To ensure that you are using the latest
version of this document, go to the Support website https://www.dell.com/support.
Purpose
This document describes how to deploy the PowerProtect Data Manager software.
Audience
This document is intended for the system administrator who will deploy the PowerProtect Data
Manager software.
Revision history
The following table presents the revision history of this document.
Table 1 Revision history

Revision Date Description

01 December 17, 2019 GA release of this document for

PowerProtect Data Manager 19.3.

Related documentation
The following publications provide additional information:
l PowerProtect Data Manager Administration and User Guide
Describes how to configure the software.
l PowerProtect Data Manager Release Notes
Contains information on new features, known limitations, environment, and system
requirements for the software.
l PowerProtect Data Manager Security Configuration Guide
Contains security information.
l PowerProtect Data Manager API documentation: https://developer.dellemc.com
Lists the PowerProtect Data Manager APIs and includes tutorials to guide you in their use.
Special notice conventions that are used in this document
The following conventions are used for special notices:
NOTICE Identifies content that warns of potential business or data loss.

Note: Contains information that is incidental, but not essential, to the topic.

Typographical conventions
The following type style conventions are used in this document:

PowerProtect Data Manager Deployment Guide 5

Preface

Table 2 Style conventions

Bold Used for interface elements that a user specifically selects or clicks,
for example, names of buttons, fields, tab names, and menu paths.
Also used for the name of a dialog box, page, pane, screen area with
title, table label, and window.

Italic Used for full titles of publications that are referenced in text.
Monospace Used for:
l System code
l System output, such as an error message or script
l Pathnames, file names, file name extensions, prompts, and
syntax
l Commands and options

Monospace italic Used for variables.

Monospace bold Used for user input.

[] Square brackets enclose optional values.

| Vertical line indicates alternate selections. The vertical line means or

for the alternate selections.

{} Braces enclose content that the user must specify, such as x, y, or z.

... Ellipses indicate non-essential information that is omitted from the

example.

You can use the following resources to find more information about this product, obtain support,
and provide feedback.
Where to find product documentation
l https://www.dell.com/support
l https://community.emc.com
Where to get support
The Support website https://www.dell.com/support provides access to product licensing,
documentation, advisories, downloads, and how-to and troubleshooting information. The
information can enable you to resolve a product issue before you contact Support.
To access a product-specific page:
1. Go to https://www.dell.com/support.
2. In the search box, type a product name, and then from the list that appears, select the
product.
Knowledgebase
The Knowledgebase contains applicable solutions that you can search for either by solution
number (for example, KB000xxxxxx) or by keyword.
To search the Knowledgebase:
1. Go to https://www.dell.com/support.
2. On the Support tab, click Knowledge Base.

6 PowerProtect Data Manager Deployment Guide

 Preface

3. In the search box, type either the solution number or keywords. Optionally, you can limit the
search to specific products by typing a product name in the search box, and then selecting the
product from the list that appears.
Live chat
To participate in a live interactive chat with a support agent:
1. Go to https://www.dell.com/support.
2. On the Support tab, click Contact Support.
3. On the Contact Information page, click the relevant support, and then proceed.
Service requests
To obtain in-depth help from Licensing, submit a service request. To submit a service request:
1. Go to https://www.dell.com/support.
2. On the Support tab, click Service Requests.
Note: To create a service request, you must have a valid support agreement. For details about
either an account or obtaining a valid support agreement, contact a sales representative. To
find the details of a service request, in the Service Request Number field, type the
service request number, and then click the right arrow.
To review an open service request:
1. Go to https://www.dell.com/support.
2. On the Support tab, click Service Requests.
3. On the Service Requests page, under Manage Your Service Requests, click View All Dell
Service Requests.
Online communities
For peer contacts, conversations, and content on product support and solutions, go to the
Community Network https://community.emc.com. Interactively engage with customers, partners,
and certified professionals online.
How to provide feedback
Feedback helps to improve the accuracy, organization, and overall quality of publications. You can
send feedback to [email protected].

PowerProtect Data Manager Deployment Guide 7

Preface

8 PowerProtect Data Manager Deployment Guide

CHAPTER 1
Deploying and Configuring the Virtual Appliance

This section contains the following topics:

l PowerProtect Data Manager Interoperability Introduction.................................................... 10

l Microsoft application agent, Oracle RMAN agent, and Data Domain interoperability............. 10
l File System agent interoperability and supported operating systems .....................................11
l PowerProtect Data Manager resource requirements in a VMware environment.................... 12
l PowerProtect Data Manager OVA deployment methods....................................................... 12
l Configure the PowerProtect Data Manager virtual appliance................................................ 15
l Log bundle creation to troubleshoot configuration failures.....................................................17

PowerProtect Data Manager Deployment Guide 9

Deploying and Configuring the Virtual Appliance

PowerProtect Data Manager Interoperability Introduction

PowerProtect Data Manager integrates multiple data protection products within the Dell EMC
Data Protection portfolio to enable data protection as a service. PowerProtect Data Manager
enables new data paths with provisioning, automation, and scheduling that enable a data
protection team to embed protection engines into the infrastructure for high-performance backup
and recovery.
There are several integrated services that comprise the PowerProtect Data Manager solution:
l Protection Storage Services:
n Data Domain—Hardware
n Data Domain Operating System (DDOS)
n Data Domain Management Center (DDMC)
n Data Domain Virtual Edition (DDVE)
l The following data paths:
n Application Direct
n VM Direct
This section includes several tables that list the supported software and hardware configurations
for an PowerProtect Data Manager deployment for each direct data path.

Microsoft application agent, Oracle RMAN agent, and Data

Domain interoperability
The Microsoft application agent and Oracle RMAN agent enable an application administrator to
protect and recover data on a SQL Server host and Oracle server host. PowerProtect Data
Manager integrates with the Microsoft application agent and Oracle RMAN agent to check and
monitor the backup compliance against protection policies. PowerProtect Data Manager also
supports central scheduling for backups.
You can install the Microsoft application agent or Oracle RMAN agent on the host that you plan to
protect by using the installation instructions that are provided in the PowerProtect Data Manager
Administration and User Guide.

Table 3 Microsoft application agent, Oracle RMAN agent, and Data Domain support matrix

Product Supported versions

Data Domain l DD990, DD4500, DD7200, DD9500, DD6300, DD6800,

DD9300, DD9800, DD3300
If you are adding Data Domain to PowerProtect Data Manager
directly through PowerProtect Data Manager Infrastructure >
Storage:
l DD990, DD4500, DD7200, DD9500, DD6300, DD6800,
DD9300, DD9800, DD3300
l DDOS 6.1.2 or higher

If you are adding Data Domain to PowerProtect Data Manager

through Data Domain Management Center (DDMC):

10 PowerProtect Data Manager Deployment Guide

 Deploying and Configuring the Virtual Appliance

Table 3 Microsoft application agent, Oracle RMAN agent, and Data Domain support
matrix (continued)

Product Supported versions

l DDMC 6.1.0.x, 6.1.x with DDOS 6.1.x and higher

The Data Domain Management Center Release Notes provides

more information: https://support.emc.com/docu85237_Data-
Domain-Management-Center-6.1-Release-Notes.pdf?
language=en_US provides more information.

Microsoft application Software compatibility information for the PowerProtect Data

agent Manager software and the Microsoft application agent is provided
in the E-Lab Navigator, available at https://
elabnavigator.emc.com/eln/modernHomeDataProtection.

Oracle RMAN agent Software compatibility information for the PowerProtect Data
Manager software and the Oracle RMAN agent is provided in the
E-Lab Navigator, available at https://elabnavigator.emc.com/eln/
modernHomeDataProtection.

File System agent interoperability and supported operating

systems
The File System agent allows an application administrator to protect and recover data on the file
system host. PowerProtect Data Manager integrates with the File System agent to check and
monitor backup compliance against protection policies. PowerProtect Data Manager also allows
central scheduling for backups.
PowerProtect Data Manager supports the co-existence of agents on the same Windows or Linux
host for the following:
l Microsoft SQL agent and the File System agent on Windows.
l Oracle/RMAN agent and the File System agent on Linux.
You can install the File System agent on the host that you plan to protect by using the installation
instructions provided in the PowerProtect Data Manager Administration and User Guide.
Software compatibility information for the PowerProtect Data Manager software and the File
System agent is provided in the eLab Navigator, available at https://elabnavigator.emc.com/eln/
modernHomeDataProtection.
Supported operating system versions
Review the following PowerProtect Data Manager File System supported operating system
versions for Windows and Linux
Windows
PowerProtect Data Manager supports Windows for File Systems on NTFS and ReFS for the
following versions:
l Windows Server 2008 R2
l Windows Server 2012
l Windows Server 2012 R2

PowerProtect Data Manager Deployment Guide 11

Deploying and Configuring the Virtual Appliance

l Windows Server 2016

l Windows Server 2019
Linux
PowerProtect Data Manager supports ext3, ext4 and XFS file systems for the following Linux
platforms/versions:
l RedHat Enterprise Linux (RHEL) versions 6.x and 7.x up to 7.6.
l SuSe Linux Enterprise Server (SLES) versions 11.x and 12.x. SLES versions 11 SP0 and 12 SP4
are not supported.
Note: PowerProtect Data Manager does not support ext4 file systems on SLES 11 SP1-SP4
platforms.
l CentOS versions 6.x and 7.x up to 7.5.

PowerProtect Data Manager resource requirements in a

VMware environment
Learn the minimum system requirements for PowerProtect Data Manager in a VMware
environment (ESXi server).
l 10 CPU cores
l 18 GB of RAM for PowerProtect Data Manager
l Five disks with the following capacities:
n Disk 1—100 GB
n Disk 2—500 GB
n Disk 3—10 GB
n Disk 4—10 GB
n Disk 5—5 GB
l One 1-GB NIC
Note: If you plan to use Cloud DR, your system must also meet the following requirements:
l CPU requirement = 14
Memory requirement = 22

PowerProtect Data Manager OVA deployment methods

You can deploy the PowerProtect Data Manager OVA by using one of the following methods.
l Manually deploying the OVA to a vCenter server—Use this method to deploy the OVA to a
stand-alone or cluster host, while logged into the vCenter server. Supports configuring the
network settings during the deployment.
l Manually deploying the OVA to an ESXi host—Use this method to deploy the OVA while logged
in to an ESXi host. Use the VM console to configure the network settings after the deployment
completes.

12 PowerProtect Data Manager Deployment Guide

 Deploying and Configuring the Virtual Appliance

Deploy the OVA file to a vCenter server

Use this method to deploy the PowerProtect Data Manager OVA to a stand-alone or cluster host
while you are logged in to the vCenter server. This method supports configuring the network
settings during the deployment.
About this task
Note that depending upon the version of vCenter in your environment, the order of steps may
differ from the order in this procedure.
Procedure
1. Log in to the vSphere Client.
2. From the File menu, select Deploy OVF Template.
3. In the Select a template window:
a. Browse to the OVA package:
l Select URL and type the URL path to the OVA package.
Note: This option is not available when deploying the OVA on an ESXI host.

l Select Local File, and then click Choose File and browse to the OVA package
location.

b. Click Next.
4. In the Select a name and location window:
a. Specify a name for the virtual appliance.
b. Optionally, specify the inventory location. For example, a data center or VM folder.
c. Click Next.
5. In the Select a resource window:
a. Select the destination compute resource.
b. Click Next.
6. In the Review details window:
a. Verify the OVF template details.
b. Click Next.
7. In the Select Storage window:
a. Select the datastore in which to store the configuration and disk files.
b. In the Select virtual disk format field, select Thick provision lazy zeroed.
c. Click Next.
8. In the Select networks window:
a. Select a destination network for each source network.
By default, the top network is selected. Ensure that you select the correct network,
which may not be the top one in the list.

b. Click Next.

9. In the Customize template window:

PowerProtect Data Manager Deployment Guide 13

Deploying and Configuring the Virtual Appliance

a. Specify the Network IP address for the virtual appliance, which should correspond to the
network you select in step 8.
Only IPV4 IP addresses are supported.

b. Specify the default gateway for the virtual appliance.

c. Specify the network netmask for the virtual appliance.
d. Specify the DNS server for the virtual appliance. You can configure up to three DNSs.
e. Specify the fully qualified domain name for the virtual appliance. For example,
hostname.domain
f. Click Next.
Note: For an ESXi host, only the most recent version(s) of ESXI support configuring
network details from this window. If using an earlier ESXi version, you might be required
to configure the network settings from the VM Console.

10. In the Ready to Complete window, verify the OVF template details, and click Finish.

Deploy the OVA file to an ESXi host

Use the vSphere Client to deploy the PowerProtect Data Manager OVA while you are logged in to
an ESXi host. It is optional for the ESXi host to be managed by a vCenter server. You must use the
VM console to configure the network settings after the deployment completes.
Procedure
1. Log in to the vSphere Client.
2. From the File menu, select Deploy OVF Template.
3. In the Select a template window:
a. Browse to the OVA package:
l Select URL and type the URL path to the OVA package.
Note: This option is not available when deploying the OVA on an ESXI host.

l Select Local File, and then click Choose File and browse to the OVA package
location.

b. Click Next.
4. In the Select a name and location window:
a. Specify a name for the virtual appliance.
b. Optionally, specify the inventory location. For example, a data center or VM folder.
c. Click Next.
5. In the Select Storage window:
a. Select the datastore in which to store the configuration and disk files.
b. In the Select virtual disk format field, select Thick provision lazy zeroed.
c. Click Next.
6. In the Select networks window:
a. Select a destination network for each source network.
By default, the top network is selected. Ensure that you select the correct network,
which may not be the top one in the list.

14 PowerProtect Data Manager Deployment Guide

 Deploying and Configuring the Virtual Appliance

b. Click Next.

7. In the Customize template window:

a. Specify the Network IP address for the virtual appliance, which should correspond to the
network you select in step 8.
Only IPV4 IP addresses are supported.

b. Specify the default gateway for the virtual appliance.

c. Specify the network netmask for the virtual appliance.
d. Specify the DNS server for the virtual appliance. You can configure up to three DNSs.
e. Specify the fully qualified domain name for the virtual appliance. For example,
hostname.domain
f. Click Next.
Note: For an ESXi host, only the most recent version(s) of ESXI support configuring
network details from this window. If using an earlier ESXi version, you might be required
to configure the network settings from the VM Console.

Configure the PowerProtect Data Manager virtual appliance

After you deploy and turn on the PowerProtect Data Manager appliance, you must configure the
virtual appliance.
Before you begin
l Ensure that you turn on the PowerProtect Data Manager virtual appliance.
l (Optional) Download a local copy of the PowerProtect Data Manager virtual appliance license
file.
About this task
Perform the following steps from a host that has access to the PowerProtect Data Manager
virtual appliance.
Procedure
1. From a host that has network access to the virtual appliance, use Google Chrome to
connect to the appliance:
https://appliance_hostname
Note: You can specify the hostname or the IP address of the appliance.

2. If an SSL certificate warning page appears with the message Your connection is not
private, click Advanced, and then click Proceed to hostname_or_ip_address (unsafe).
3. On the Welcome pane, perform the following actions:
a. To set up PowerProtect Data Manager as a new installation, select New Install.
b. To perform a disaster recovery, select Restore Backup.
c. Click Next.
4. On the License pane, perform the following actions:
Note: If the license was already applied, review the license information and then click
Next.

PowerProtect Data Manager Deployment Guide 15

Deploying and Configuring the Virtual Appliance

a. In the License Type field, select a type of license.

a. To use an evaluation license, select 90 days evaluation license.
A description of the license appears in the License File field.
b. To load a license, select License File > Choose File, and then browse to and select
the license that you want to load.
c. To copy the contents of the license file, select Plain Text and then copy the contents
of the license file into the Plain Text field.
b. Click Next.
5. In the Authentication pane, perform the following actions:
The Use same password for all option is selected by default. PowerProtect Data Manager
uses the same password for admin, services, and lockbox accounts.

a. Optionally, clear the Use same password for all option.

l If you leave the Use same password for all option selected, in the Enter a new
password and Renter password to confirm fields, specify a password.
l If you clear the Use same password for all option, in the Enter a new password and
Renter password to confirm fields, specify individual passwords for the
administrative, services, and lockbox accounts.

Ensure that the password meets the following requirements:

l Minimum of nine characters and a maximum of one hundred characters
l At least one numeric character (0-9)
l At least one uppercase character (A-Z)
l At least one lowercase character (a-z)
l At least one special character from the following list of acceptable characters:

~!@#$%^&*()_+`-={}|[]\:'";,./<>?

b. Click Next.
6. In the System Settings pane, perform the following actions:
a. In the Current Timezone list box, select the time zone where the system is physically
located.
b. To add an NTP server, click Add.
c. In the Server IP Address field, specify the NTP server IP address.
d. Click Add.
e. To change the list of NTP servers, click Edit or Delete.
f. Click Next.
7. In the Email Setup - Optional pane, perform the following actions:
a. In the Mail Server field, specify the SMTP server IP address.
b. In the Email From field, specify the administrator email address.
c. In the Recipient for Test Email field, specify the recipient email address.
d. In the Port field, specify the SSH port to connect to the SMTP server.
e. In the Username field, specify the administrator username.

16 PowerProtect Data Manager Deployment Guide

 Deploying and Configuring the Virtual Appliance

f. In the Password field, specify the administrator password.

g. To send a test email to the specified IP address, click Send Test Email.
h. To acknowledge the test email was successfully sent, click OK.
i. To send diagnostic and usage data to Dell EMC for proactive support and to help improve
our products and services, switchAuto Support to ON.
When enabling auto support, click View Terms to review the telemetry software terms.
Scroll down to click Accept to finish enabling auto support, or Decline to disable auto
support.

j. Click Next.
Note: Email Server Setup is required before performing a local user password reset and
sending customized alert notifications.

8. In the Summary pane, review the configuration choices, and then click Done.
After you finish
Getting Started provides information.

Log bundle creation to troubleshoot configuration failures

If errors appear in the PowerProtect Data Manager console after appliance configuration, and the
configuration did not complete successfully, you can create a log bundle to determine the cause of
the error and troubleshoot the issue.
To create a log bundle:
1. Log in to the VM console through the vCenter server with the username root and the
password changeme.
2. Run the following:

logs
tar -cvf vmd_logs.tar *
cd /logs/vmdirect/
tar -cvf ecdm_messages messages*

Example 1 Example command usage

The following screen shows an example command that is run on the VM console to
create the log bundle.

PowerProtect Data Manager Deployment Guide 17

Deploying and Configuring the Virtual Appliance

Example 1 Example command usage (continued)

Figure 1 Create log bundle in the VM console

18 PowerProtect Data Manager Deployment Guide

CHAPTER 2
Getting Started

This section includes the following topics:

l Introducing PowerProtect Data Manager software............................................................... 20

l References.............................................................................................................................21
l Terminology........................................................................................................................... 21
l Accessing the PowerProtect Data Manager UI......................................................................22

PowerProtect Data Manager Deployment Guide 19

Getting Started

Introducing PowerProtect Data Manager software

PowerProtect Data Manager software is an enterprise solution that provides software-defined
data protection, deduplication, operational agility, self-service, and IT governance.
PowerProtect Data Manager enables the transformation from traditional centralized protection to
an IT-as-a-service model based on a self-service design. This design ensures that you can enforce
compliance and other business rules, even when backup responsibilities are decentralized to
individual database administrators and application administrators.
PowerProtect Data Manager key features include:
l Software-defined data protection with integrated deduplication, replication, and reuse
l Data backup and recovery self-service operations from native applications that are combined
with central IT governance
l Multicloud optimization with integrated cloud tiering
l SaaS-based monitoring and reporting
l Modern services-based architecture for ease of deployment, scaling, and upgrading
PowerProtect Data Manager integrates multiple data protection products within the Dell EMC
Data Protection portfolio to enable data protection as a service, providing the following benefits:
l Enables the data protection team to create data paths with provisioning, automation, and
scheduling to embed protection engines into the infrastructure for high-performance backup
and recovery.
l Enables backup administrators of large-scale environments to schedule Microsoft SQL and
Oracle backups from a central location on the PowerProtect Data Manager server.
l Uses an agent-based approach to discover the protected and unprotected databases on an
application server.
l Enables governed self-service and centralized protection by:
n Monitoring and enforcing Service Level Objectives (SLOs)
n Identifying violations of Recovery Point Objectives (RPO)
n Applying retention locks on backups that are created using the Microsoft application agent
and the Oracle RMAN agent
l Supports deploying an external VM Direct appliance to move data with the VM Direct Engine.
The PowerProtect Data Manager software comes prebundled with an embedded VM Direct
appliance, which is automatically used as a fallback proxy for performing backup and restore
operations when the added external proxies fail or are disabled. Dell EMC recommends that
you always deploy external proxies, because the embedded proxy has limited capacity for
performing parallel backups.
l Supports the vRealize Automation DP extension, which enables provisioning of virtual
machines with PowerProtect Data Manager protection, on-demand backup, and restore to the
original or a new location. The vRealize Automation Data Protection Extension for PowerProtect
Data Manager Installation and Administration Guide provides more information.
l Supports integration of Cloud Disaster Recovery (Cloud DR), including workflows for Cloud DR
deployment, protection, and recovery operations in the AWS or Azure cloud.
l Supports PowerProtect Search, which enables backup administrators to quickly search for and
restore VM file copies. The Search Service can be enabled by adding a search node to the
configurable Search Engine that is autodeployed during the PowerProtect Data Manager
installation.

20 PowerProtect Data Manager Deployment Guide

 Getting Started

l Provides a RESTful interface that allows the user to monitor, configure, and orchestrate Power
Protect Data Manager. Customers can use the APIs to integrate their own automation
framework or quickly write new scripts with the help of easy-to-follow tutorials.

References
Some procedures in this document reference other publications for detailed procedures.
The following publications, available on dellemc support, provide additional information:
l PowerProtect Data Manager Security Configuration Guide
l PowerProtect Database Application Agent Installation and Administration Guide
l PowerProtect Microsoft Application Agent Exchange Server User Guide
l PowerProtect Microsoft Application Agent Installation Guide
l PowerProtect Microsoft Application Agent SQL Server User Guide
l PowerProtect Oracle RMAN Agent Administration Guide
l PowerProtect Storage Direct Agent Installation and Administration Guide
l PowerProtect Storage Direct Primary and Protection Storage Configuration Guide
l PowerProtect Storage Direct Solutions Guide

Terminology
Familiarize yourself with the terminology that is used in the PowerProtect Data Manager UI and
documentation.
The following table provides more information about names and terms you should know to use
PowerProtect Data Manager:

Term Description

Application Agent Application Agents are installed on application or database host

servers to manage protection using PowerProtect Data Manager.
These Agents are commonly known as Data Domain Boost Enterprise
Agents (DDBEA) for databases and applications.

Asset Assets are objects in PowerProtect Data Manager for which you want
to manage protection, including VMs, databases, and file systems.

Asset Source Assets that PowerProtect Data Manager protects reside within Asset
Sources, which include vCenter Servers, application or database
hosts, and file servers.

Cloud Tier Storage Cloud Tier storage can be added to an external DD system to expand
the DD deduplication storage capacity onto less expensive object
storage in public or private object storage clouds, including Dell EMC
secure Elastic Cloud Storage appliances.

Copy A PowerProtect Data Manager copy is a point-in-time backup copy of

an Asset.

Copy Map The PowerProtect Data Manager Copy Map is a visual representation
of backup copy locations on your Protection Storage and is available
for all protected Assets that have copies.

PowerProtect Data Manager Deployment Guide 21

Getting Started

Term Description

Discovery Discovery is an internal process that scans Asset Sources to find new
assets to protect and scans infrastructure components to monitor
their health and status.

Instant Access PowerProtect Data Manager VM backup copies can be accessed,

mounted, and booted directly from the Protection Storage targets as
running VMs. Copies can also be moved to a production VMware
datastore using vMotion.

Power Protect Data An agent that is included in PowerProtect Data Manager and installed
Manager Agent on each application agent host server so that you can monitor and
manage the application agent through PowerProtect Data Manager.

PowerProtect Search The PowerProtect Search Engine enables you to add a node for
Engine indexing copies. Indexing enables you to quickly search for VM file
copies and restore the individual files.

Protection Engines Protection Engines are infrastructure components that are centrally
deployed from PowerProtect Data Manager and used as data movers
to transfer data from Asset Sources to Internal or External Protection
Storage targets.

Protection Policy Protection Policies configure and manage the entire life cycle of
backup data, which includes backup type, assets, backup start/stop
time, backup device, and backup retention.

Service Level An optional policy that you can layer on top of a Protection Policy. An
Agreement (SLA) SLA performs additional checks on protection activities to ensure that
protection goals meet the standards that your organization requires.
SLAs are made up of one or more Service Level Objectives.

Service Level Definable rules that set the criteria for Recovery Point Objectives
Objectives (SLO) (RPO), encryption, and locations of backups according to your
company requirements.

VM Direct A Protection Engine that is centrally deployed from PowerProtect

Data Manager as a stateless virtual appliance. VM Direct handles I/O
processing and deduplication for protected virtual machines.

Accessing the PowerProtect Data Manager UI

PowerProtect Data Manager provides a stand-alone UI that you can use to manage and monitor
system behavior.
Procedure
1. From a host that has network access to the virtual appliance, use Google Chrome to
connect to the appliance:
https://appliance_hostname
Note: You can specify the hostname or the IP address of the appliance.

2. Log in with your user name and password.

If you receive an unsigned certificate warning, see Replacing the default PowerProtect Data
Manager certificate on page 23 for instructions.

The Getting Started page appears.

22 PowerProtect Data Manager Deployment Guide

 Getting Started

l The left pane provides links to the available menu items. Expand a menu item for more
options.
l The icons in the PowerProtect Data Manager banner provide additional options.

Replacing the default PowerProtect Data Manager certificate

Use this procedure to replace the PowerProtect Data Manager UI and public API facing
certificates with new self-signed or CA signed certificates.
Before you begin
You must have the following keys and certificates in place:
l /etc/ssl/certificates/customer/customerkey.pem
l /etc/ssl/certificates/customer/customer.pem
l /etc/ssl/certificates/customer/customer.keystore
l /etc/ssl/certificates/customca/customca.truststore
Procedure
1. Log in to the PowerProtect Data Manager system as the root user.
Note: PowerProtect Data Manager does not support using the ssh command with the
root account. To use ssh to connect to the system, log in to ssh with the admin account,
and then use the su command to change to the root account.

2. Run the following Unix commands:

cd /usr/local/brs/lib/ecdm-ui/app

ln -s /etc/ssl/certificates/customer/customer.pem cert.pem

ln -s /etc/ssl/certificates/customer/customerkey.pem private-key.pem

sudo systemctl restart nginx

3. Update the /usr/local/brs/lib/zuul/conf/application.yml file with following

parameters:
key-store: Specify the file path where your key-store certificate is kept. For
example: /etc/ssl/certificates/customer/customer.keystore

key-store-password: Specify a key-store password.

key-password: Specify a key password.

key-alias: Specify a key alias.

trust-store: Specify the file path where your trust-store certificate is kept. For
example: /etc/ssl/certificates/customca/customca.truststore

trust-store-password: Specify a trust-store password.

4. Carry out the command: zuul restart
5. Log in to the https://ecdm.customer.com instance.
6. When prompted, accept the certificate.
7. Login to https://ecdm.customer.com:8443.
All external requests are now using your installed certificates.

PowerProtect Data Manager Deployment Guide 23

Getting Started

Getting Started
The Getting Started page provides configuration options that are required when the system is
first deployed.
The Getting Started page appears upon first deployment of PowerProtect Data Manager and
opens to this page by default until you click Skip This.
You can access the Getting Started page at any time by selecting System Settings > Getting
Started.

Table 4 PowerProtect Data Manager Getting Started menu items

Options Description

Support View and configure Secure Remote Services (SRS), Email Setup, Auto
Support, Logs, System Health.

Disaster Recovery Configure and manage backups for disaster recovery.

Backup

VMware vCenter Opens the Infrastructure > Asset Sources page where you can add a
vCenter instance as an asset source so that it can be added to a
protection policy.

Protect Assets Opens the Protection Policies page where you can manage Protection
Life Cycle workflows for all asset types.

UI tools and options

Learn about the available tools in the UI.
PowerProtect Data Manager UI tools

Table 5 PowerProtect Data Manager tools

Menu item Description

Provides a high-level view of the overall state the PowerProtect Data Manager system
and includes the following information:
Dashboard l Alerts—System alerts
l Protection—Details about protection policies
l Jobs—Status of all Jobs that are filtered by a selected time period or status type.
Select the status in the Jobs pane to open the Jobs window, where you can
manage jobs, search, and view details.
l Policy—Details include number of successes, failures, and excluded assets for
each asset type
l Protection Storage—Protection storage usage statistics
l Recovery—Recovery statistics
l Health—Details about the health of the system, including services, licenses,
support, protection engines, server backups, and uptime
PowerProtect Data Manager refreshes the data hourly unless you run an ad hoc
discovery.

24 PowerProtect Data Manager Deployment Guide

 Getting Started

Table 5 PowerProtect Data Manager tools (continued)

Menu item Description

Click Infrastructure to perform the following tasks:

l View and manage all assets.
Infrastructure
l Add vCenter and Application and File System Host asset sources.
l View and manage Integrated Storage.
l Add a VM Direct appliance with the VM Direct protection engine for virtual
machine data protection.
l Manage registration of RMAN Agent, Microsoft Application Agent, and File System
Agent.
l View and manage Cloud Disaster Recovery.
l Create and manage a Search Cluster.

Click Protection to perform the following tasks:

l Add protection policy groups to assets.
Protection
l Manage SLA.
l Add, edit, and delete Dynamic Groups for assets.

Click Recovery to perform the following tasks:

l View asset copy location details and initiate a Restore operation.
Recovery
l Manage Instant Access Sessions.
l Use the File Search feature to find and restore virtual machine file copies.

Click Alerts to perform the following tasks:

l View and acknowledge alerts and events.
Alerts
l View and examine Audit logs.
l Export audit logs to CSV files.
l Set audit log boundaries.

Click Administration to perform the following tasks:

l Configure users and roles.
Administration
l Set password credentials and manage key chains.
l Configure alert notifications.
l Add LDAP Identity Sources.

Click Jobs to manage jobs, view by completed or running, filter, and view details.

Jobs

Click Reporting to log in to PowerProtect Central.

Reporting

PowerProtect Data Manager Deployment Guide 25

Getting Started

Banner UI options
The following table describes the icons that are located in the PowerProtect Data Manager
banner.

Table 6 Banner UI options

Option Description

Click to enter search criteria to find assets, jobs, logs, and alerts.

Click to see recent alerts.

Click to configure and manage PowerProtect Data Manager system network, time
zone, and NTP settings, DR backups, security, licenses, upgrades, authentication,
agent downloads, and support, and to access the Getting Started page.

Click to log out, and log in as a different user.

Click to see PowerProtect Data Manager version information.

Click to obtain more information about PowerProtect Data Manager, access Dell EMC
Support, or view the REST API documentation.

26 PowerProtect Data Manager Deployment Guide

CHAPTER 3
Upgrading the PowerProtect Data Manager
Software

This topic presents the following topics:

l Upgrade the software from PowerProtect Data Manager version 19.1.................................. 28

l Upgrade PowerProtect Data Manager from version 19.2 and later........................................29
l Managing certificates after upgrading from versions earlier than PowerProtect Data Manager
version 19.1............................................................................................................................30

PowerProtect Data Manager Deployment Guide 27

Upgrading the PowerProtect Data Manager Software

Upgrade the software from PowerProtect Data Manager

version 19.1
Use this procedure to upgrade from PowerProtect Data Manager version 19.1 to version 19.2 or
19.3.
Before you begin
l Ensure that you have administrator credentials. Only an administrator can initiate the upgrade.
l If you have not configured Secure Remote Services (SRS), download the upgrade package
from Dell EMC Support Downloads and Drivers.
l Check for running tasks and cancel them or allow them to complete.
l Disable any Protection Policies that are scheduled to run in the next few hours.
l Take a snapshot of the system: Select the PowerProtect VM in the vSphere Client, right click,
and then select Snapshot > Take snapshot.
About this task
You can upgrade the system by manually downloading upgrade packages or by connecting to an
SRS gateway. When PowerProtect Data Manager is licensed and you have registered the SRS
gateway host with PowerProtect Data Manager, you can upgrade using SRS. When an upgrade
package is available, the packages are uploaded to the SRS gateway. The appliance checks the
SRS gateway once a day for available upgrade packages or you can manually check for upgrade
packages.
An upgrade package can upgrade one or more of the following:
l The PowerProtect Data Manager, including application agent installers stored on the
PowerProtect Data Manager virtual machine
l External VM DIrect appliance
l For version 19.3 and later, the PKG file also includes Kubernetes support and PowerProtect
Search software.
Procedure
1. Log in to PowerProtect Data Manager with administrator credentials.
2. Select System Settings > Upgrade.
l If you have registered SRS, the UI lists the latest available PowerProtect Data Manager
package.
l If the system is unable to locate an upgrade package or if you are using the manual
package download method:
a. Click Upload Upgrade File, browse to the path that contains the upgrade package,
select the package, and click Open.
b. Wait until the package status is Available, and then click OK.

3. (Optional) Click Perform upgrade.

A dialog box lists any areas that require attention, such as an indication that the upgrade is
disruptive or requires a reboot and warnings about running tasks or active sessions that
should be addressed before the upgrade. Click the links that are provided to go to the
management page for the active events, where you can cancel them or allow them to
complete before continuing.

28 PowerProtect Data Manager Deployment Guide

 Upgrading the PowerProtect Data Manager Software

Note: Although the upgrade can proceed even if jobs or IA sessions are active, it is not
recommended.
The dialog box also lists any required certificates. Continuing indicates acceptance of the
certificate.

4. Enter the Lockbox Passphrase, if required.

The upgrade begins. The browser is redirected to the Upgrade Manager UI on port 14443,
which enables you to monitor upgrade progress while the PowerProtect Data Manager
components are shut down for the upgrade.
Note: To monitor the update status if the connection to the appliance closes, connect to
https://IP_address_appliance:14443.
When the upgrade is successful, the browser is redirected back to the main PowerProtect
Data Manager UI login page.
5. Log in toPowerProtect Data Manager and return to the Upgrade page to verify that the
state of the upgrade is Installed.
Results
The overall package status covers critical upgrades for the PowerProtect Data Manager. Other
subcomponents, such as Agents and vProxies, might still be processing or even fail, but the
upgrade continues. You can view the state of each subcomponent by expanding the package that
was installed.
Note: If the upgrade fails, you must delete the failed package before uploading a new package
(or the same package) to try again.
After you finish
If you created a manual snapshot, use the vSphere Client to delete the snapshot:
1. Right-click the appliance, and then select Manage Snapshots.
2. In the Manage Snapshots window, select the snapshot and click Delete.
Note: If you are planning to use Cloud DR, contact the Dell EMC Support team for assistance
to enable Cloud DR failback flow.

Upgrade PowerProtect Data Manager from version 19.2 and

later
Use this procedure to upgrade PowerProtect Data Manager from version 19.2 or later.
Before you begin
When the following prerequisites are met, upgrade packages are automatically downloaded, the
upgrade process automatically stops all running jobs, puts the system into maintenance mode, and
creates a snapshot of the system. If the upgrade fails or is aborted, the system uses the snapshot
to roll back to the previous state. Once the system is rolled back or upgraded successfully, the
snapshot is automatically deleted.
l Ensure that you have administrator credentials. Only a PowerProtect Data Manager
administrator can initiate the upgrade.
l Ensure that your system is registered with Secure Remote Services (SRS).
l Ensure that automatic upgrade package downloads is enabled.
l To enable automatic snapshots, ensure that the vCenter hosting PowerProtect Data Manager
is added as an asset source.

PowerProtect Data Manager Deployment Guide 29

Upgrading the PowerProtect Data Manager Software

l Check for running tasks and cancel them or allow them to complete.
l Disable any Protection Policies that are scheduled to run in the next few hours.
About this task
A notification appears in the UI when an upgrade package is available.
An upgrade package can upgrade one or more of the following:
l The PowerProtect Data Manager, including application agent installers stored on the
PowerProtect Data Manager virtual machine
l External VM DIrect appliance
l For version 19.3 and later, the PKG file also includes Kubernetes support and PowerProtect
Search software.
Procedure
1. Log in to PowerProtect Data Manager with administrator credentials.
2. Select System Settings > Upgrade.
The UI lists the latest available PowerProtect Data Manager upgrade package. Click the
down arrow next to the package name to view details about the contents.
3. Click Upgrade, enter the Lockbox passphrase, if required, and then click Continue.
4. Click Yes to continue with the upgrade.
The upgrade begins. The browser is redirected to the Upgrade Manager UI on port 14443.
This enables you to monitor upgrade progress while the PowerProtect Data Manager
components are shutdown for the upgrade.
Note: To monitor the update status if the connection to the appliance closes, connect to
https://IP_address_appliance:14443.
The Upgrade Manager status bar enables you to abort the upgrade, if necessary.
When the upgrade completes successfully, the browser is redirected back to the main
PowerProtect Data Manager UI logon page.
Results
l The Upgrade page indicates the status of the upgrade.
l If the upgrade fails:
1. Click the Export logs button to download the log files.
2. Click Rollback to snapshot.
3. In the Upgrade page, click Delete to delete the failed upgrade package.
4. Review the log files to determine the cause of the failure.
5. Remedy the issues, and then retry the upgrade.

Managing certificates after upgrading from versions earlier

than PowerProtect Data Manager version 19.1
Use this procedure to ensure that certificates existing on the pre-upgrade system also exist on the
post-upgrade system.
Before you begin
Ensure that you update any expired certificates on external systems to valid certificates.

30 PowerProtect Data Manager Deployment Guide

 Upgrading the PowerProtect Data Manager Software

Procedure
1. Log in to thePowerProtect Data Manager operating system with administrator credentials.
2. Run the upgrade command:

/usr/local/brs/lib/secretsmgr/bin/secretsmgr-tls-upgrade

The system displays the external system certificates.

3. Verify each certificate as trusted or untrusted: At the prompt for each certificate, type Y to
accept.
Any other character rejects the certificate. Expired certificates are automatically rejected.

PowerProtect Data Manager Deployment Guide 31

Upgrading the PowerProtect Data Manager Software

32 PowerProtect Data Manager Deployment Guide