Symantec Backup Exec Appliance Administrator's Guide 3600 R4

Transcription

1 Symantec Backup Exec Appliance Administrator's Guide 3600 R4

2 Documentation version: 3600 R4 Legal Notice Copyright 2015 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party ( Third Party Programs ). Some of the Third Party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe File accompanying this Symantec product for more information on the Third Party Programs. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

3 Symantec Corporation 350 Ellis Street Mountain View, CA

4 Technical Support Contacting Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our website at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information

5 Available memory, disk space, and NIC information Operating system Version and patch level Network topology Licensing and registration Customer service Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs, DVDs, or manuals

6 Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America

7 Contents Technical Support... 4 Chapter 1 Introducing the Backup Exec appliance Components and features of the Symantec Backup Exec appliance System requirements for the Backup Exec appliance Backup Exec appliance software bundles Connecting to the Backup Exec appliance Chapter 2 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance front panel Backup Exec 3600 R4 Appliance rear panel components Backup Exec 3600 R4 appliance ports Backup Exec 3600 R4 Appliance disk and storage subsystem Backup Exec 3600 R4 Appliance LED status lights Chapter 3 Configuring the Backup Exec appliance Backup Exec appliance configuration requirements Configuring the Backup Exec appliance Locating the default appliance host name and using it to access and configure the Backup Exec appliance Installing the Backup Exec appliance mount rails and mounting the appliance in a rack Connecting to the Backup Exec appliance for the first time and verifying the factory test results Performing the initial configuration of the Backup Exec appliance Updating the Backup Exec appliance software and hardware firmware Starting Backup Exec from the Backup Exec appliance Shutting down the Backup Exec appliance... 47

8 Contents 8 Chapter 4 Modifying the Backup Exec appliance configuration settings Changing the password for the Backup Exec appliance Joining the appliance to a domain from the web UI Domain name suffix guidelines Removing the appliance from a domain Configuring a DNS server for the Backup Exec appliance by using a static IP address Configuring a proxy server for the Backup Exec appliance Selecting a language to use with the Backup Exec Administration Console Setting the appliance location Setting the date and time formats for the appliance Teaming Backup Exec appliance Ethernet ports Determining the Backup Exec appliance software version information About adding the Backup Exec appliance to an existing Backup Exec environment Chapter 5 Monitoring Backup Exec appliance operations Monitoring the status of the Backup Exec appliance hardware components Monitoring Backup Exec jobs from the Backup Exec appliance web UI Viewing Backup Exec alerts from the appliance web UI Clearing Backup Exec alerts from the appliance web UI Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) Chapter 6 Using external storage devices with the Backup Exec appliance Types of external storage devices to use with the Backup Exec appliance Connecting a tape device to the Backup Exec appliance... 65

9 Contents 9 Chapter 7 Chapter 8 Chapter 9 Managing the Backup Exec appliance remotely using PowerShell Using the Windows PowerShell command line interface with the Backup Exec appliance Enabling a remote PowerShell connection between the appliance and a remote computer PowerShell commands Removing and replacing Backup Exec appliance replaceable components Customer-replaceable components in the Backup Exec appliance How Symantec detects Backup Exec appliance issues Replacing a single Backup Exec appliance disk drive Removing a Backup Exec appliance disk drive carriage Replacing a Backup Exec appliance disk drive module Removing a Backup Exec appliance power supply module Replacing a Backup Exec appliance power supply module Replacing Backup Exec appliance hardware Resetting the Backup Exec appliance factory image and settings Resetting the Backup Exec appliance factory image and the factory settings by using the PowerShell command-line interface Resetting the Backup Exec appliance factory image and factory settings by using the USB key Chapter 10 Disaster recovery Pre-disaster recovery components Backing up the Backup Exec appliance deduplication disk storage device using a scheduled Backup Exec job Preparing for disaster recovery with the PowerShell command-line interface Recovering the Backup Exec appliance with a replacement appliance after a disaster occurs Recovering the Backup Exec appliance when multiple disk drives fail How to complete disaster recovery for appliances that are configured for use in a Central Admin Server Option environment

10 Contents 10 Chapter 11 Troubleshooting Troubleshooting the Backup Exec appliance Troubleshooting Backup Exec Appliance fan and power supply issues Troubleshooting Backup Exec Appliance disk and RAID group failures Troubleshooting general Backup Exec appliance issues How to enable the Backup Exec appliance Remote Management feature in the BIOS setup Appendix A Technical specifications for the Backup Exec 3600 R4 Appliance Technical specifications for the Backup Exec 3600 R4 Appliance Appendix B Certification and compliance information for Backup Exec appliances Backup Exec appliance safety and EMC standards compliance Backup Exec appliance safety and EMC standards compliance - country specific Industry standards compliance for Backup Exec appliances Backup Exec appliance certifications FCC information for Backup Exec appliances Index

11 Chapter 1 Introducing the Backup Exec appliance This chapter includes the following topics: Components and features of the Symantec Backup Exec appliance System requirements for the Backup Exec appliance Backup Exec appliance software bundles Connecting to the Backup Exec appliance Components and features of the Symantec Backup Exec appliance Three components comprise the Backup Exec appliance: Backup Exec appliance hardware Backup Exec appliance web UI Backup Exec 15 software The Backup Exec appliance supports the following features: Faster backup windows and recovery times using hard disk-based storage. All-in-one backup and recovery solution that integrates software and hardware from a single vendor. Duplication of backup data to another Backup Exec appliance or to a managed Backup Exec server in a Backup Exec CASO environment.

12 Introducing the Backup Exec appliance System requirements for the Backup Exec appliance 12 Protects against zero-day threats using Symantec Critical System Protection by establishing compliance with security policies, while also hardening your system by locking down the configuration and settings. Manages data growth and effectively reduces data backup storage by up to 90 percent. The Backup Exec appliance also enables the optimization of network traffic through integrated, high-speed block-level data deduplication across physical and virtual environments. Easy to deploy and configure, while also simplifying appliance management through a single web-based console. See Backup Exec appliance software bundles on page 13. See System requirements for the Backup Exec appliance on page 12. System requirements for the Backup Exec appliance The following are required to manage the Backup Exec appliance. Table 1-1 Item Internet Protocol Internet browser Backup Exec appliance system requirements Requirements Internet Protocol version 4 (IPv4). The following Internet browsers are supported: Internet Explorer version 7 or later. Note: If you use Internet Explorer version 9 or later, you must add the appliance URL to the Internet Explorer Trusted Sites zone. Adding the URL lets you see all of the appliance's web UI functionality. In addition, you must also use Internet Explorer in Compatibility View mode. Mozilla Firefox 3.x or later. Note: To use Firefox, you must accept exception and confirm security exception before you access the appliance's web UI. Note: For the Backup Exec appliance web UI to function properly, you must ensure that your web browser does not block popups.

13 Introducing the Backup Exec appliance Backup Exec appliance software bundles 13 Backup Exec appliance software bundles Depending on your purchase, Backup Exec appliances are shipped with one of two possible pre-licensed and installed software bundles. These bundles are called Essential Protection Edition and Total Protection Edition. Both of these bundles include Symantec Backup Exec along with additional agents and options, including data deduplication and virtual machine protection. Although the appliance is pre-licensed, Symantec includes a Symantec License File (SLF) for your particular software edition in the that you received notifying you of your appliance purchase. You can also find the appliance SLF on the Symantec Licensing Portal after you register the appliance. You can determine the software edition and the software license information that is installed on the appliance by clicking About on the Backup Exec appliance's web UI menu. You can also determine the edition by viewing license information from within Backup Exec. See Viewing license information in the Backup Exec 15 Administrator's Guide. The following table details each software bundle, as well as the additional agents and options that you can purchase separately to customize and expand the capabilities of the appliance.

14 Introducing the Backup Exec appliance Connecting to the Backup Exec appliance 14 Table 1-2 Essential Protection Edition and Total Protection Edition information Essential Protection Edition Included licenses: Symantec Critical System Protection with host-based intrusion detection (HIDS) and intrusion prevention (HIPS). See Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) on page 62. Symantec Backup Exec 15 Deduplication Option Agent for Hyper-V and VMware Agent for Windows Agent for Applications and Databases Agent for Linux Agent for Mac Optional licenses: Enterprise Server Option (includes the Central Admin Server Option) Remote Media Agent for Linux NDMP Option Library Expansion Option (includes support for a single tape drive library) Virtual Tape Library Unlimited Drive Option Unsupported licenses: File System Archiving Option Exchange Mailbox Archiving Option Total Protection Edition Included licenses: Symantec Critical System Protection with host-based intrusion detection (HIDS) and intrusion prevention (HIPS). See Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) on page 62. Symantec Backup Exec 15 Deduplication Option Agent for Hyper-V and VMware Agent for Windows Agent for Applications and Databases Agent for Linux Agent for Mac Enterprise Server Option (includes the Central Admin Server Option) Remote Media Agent for Linux NDMP Option Library Expansion Option (includes support for up to 10 drives) Optional licenses: Virtual Tape Library Unlimited Drive Option Unsupported licenses: File System Archiving Option Exchange Mailbox Archiving Option See Connecting to the Backup Exec appliance on page 14. Connecting to the Backup Exec appliance The following table describes the two software interfaces that you can use to connect to the Backup Exec appliance.

15 Introducing the Backup Exec appliance Connecting to the Backup Exec appliance 15 Table 1-3 Backup Exec appliance software interfaces Software interface Backup Exec appliance web UI Description The web UI is a browser-based interface that you use for the initial configuration of the Backup Exec appliance. You can also use it when future appliance configuration modifications are required. To access the appliance by using its web UI, do the following: Power on the appliance. Find the default host name of the appliance by using the appliance MAC address. You can find the MAC address on the back of the appliance. See Locating the default appliance host name and using it to access and configure the Backup Exec appliance on page 28. Remotely connect to the appliance using a client computer by starting a web browser, and then typing the default host name in the browser address bar. Note: For the web UI to function properly, you must ensure that your web browser does not block popups. Windows PowerShell You can use Windows PowerShell to do the following: Connect to the appliance using a command line interface. Modify appliance configuration settings. Reset the appliance to its factory-set defaults. You should use PowerShell if you have difficulty connecting to the appliance using the web UI. Launch PowerShell from a networked Windows computer or from a laptop directly connected to the appliance. You must have Windows PowerShell 2.0 or higher on your client computer. See Enabling a remote PowerShell connection between the appliance and a remote computer on page 69.

16 Chapter 2 Hardware components of the Backup Exec 3600 R4 Appliance This chapter includes the following topics: Backup Exec 3600 R4 Appliance front panel Backup Exec 3600 R4 Appliance rear panel components Backup Exec 3600 R4 appliance ports Backup Exec 3600 R4 Appliance disk and storage subsystem Backup Exec 3600 R4 Appliance LED status lights Backup Exec 3600 R4 Appliance front panel The Backup Exec appliance front panel consists of power buttons, LED status lights, and USB 2.0 connectors. These components are located above the appliance's four hard drive bays that house externally-accessible disk drive modules. Each of the disk drive modules that are located inside the drive bays are labeled from left to right, 0, 1, 2, and 3. See Backup Exec 3600 R4 Appliance LED status lights on page 21.

17 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance rear panel components 17 Figure 2-1 Backup Exec 3600 R4 Appliance front view System power/sleep button System reset button Power/Sleep activity LED System NIC 5 activity LED System status LED USB 2.0 connectors Port 0/1 Rack handle Hard drive bays See Backup Exec 3600 R4 Appliance rear panel components on page 17. See Backup Exec 3600 R4 Appliance rear panel components on page 17. See Backup Exec 3600 R4 appliance ports on page 19. See Backup Exec 3600 R4 Appliance disk and storage subsystem on page 20. See Backup Exec 3600 R4 Appliance LED status lights on page 21. Backup Exec 3600 R4 Appliance rear panel components The following components comprise the rear panel of the Backup Exec appliance: One (1) PCI add-in slot Contains a SAS HBA card that you use to connect a tape device to the SAS HBA port. To connect a tape device, use the SAS cable that ships with the appliance. To connect a multi-tape drive library, you must use a SAS Fanout cable, which is sold separately. Two (2) USB ports One (1) serial port One (1) VGA port Four (4) Ethernet (eth) ports One (1) Remote Management Module (RMM) port Note: The RMM port is also used by Symantec Technical Support.

18 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance rear panel components 18 System fans and AC power connections are located on the left-hand side of the rear panel. Symantec recommends that you connect both power modules to the main AC power source. If one module or power source fails, the second module maintains power to the system without interruption. Figure 2-2 Backup Exec 3600 R4 Appliance rear panel The following list identifies the components of the rear panel. Table 2-1 Label Backup Exec 3600 R4 Appliance rear panel components Description Power supply locks Power sockets Power supply LEDs Top cover thumb screw Remote Management Module (RMM) port PCI 3 expansion slot with SAS HBA card Power cords Ethernet (eth) ports 0 and 1 VGA port Ethernet (eth) ports 2 and 3 USB ports Serial port Ethernet cables

19 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 appliance ports 19 Table 2-1 Label 14 Backup Exec 3600 R4 Appliance rear panel components (continued) Description PCI expansion modules See Backup Exec 3600 R4 Appliance front panel on page 16. See Backup Exec 3600 R4 appliance ports on page 19. See Backup Exec 3600 R4 Appliance disk and storage subsystem on page 20. See Backup Exec 3600 R4 Appliance LED status lights on page 21. Backup Exec 3600 R4 appliance ports The following graphic and table explain the assignments for the Backup Exec appliance Ethernet ports and the Remote Management Module port. Figure 2-3 Ethernet (eth) ports Table 2-2 Port number and color details Port number and color Eth0 (green) Assignment Public port, which is also known as the Administration port. This is the port that you use to run the inital configuration of the appliance. Ethernet port 0 is used for configuration tasks such as setting a static IP address, adding DNS or WINS servers, enabling DHCP, SNMP, or SMTP. Use the browser-based appliance web UI to configure settings. Alternately, you can use the PowerShell command line interface if you cannot connect with a browser.

20 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance disk and storage subsystem 20 Table 2-2 Port number and color details (continued) Port number and color Eth1 (blue) Assignment Public Ethernet port. Used to connect the appliance to your production network. Configurable. Eth2 (red) Public Ethernet port. Used to connect the appliance to your production network. Configurable. Eth3 (yellow) Public Ethernet port. Used to connect the appliance to your production network. Configurable. Remote Management Module (RMM) (white) Reserved for Symantec Technical Support only. Do not use. See Backup Exec 3600 R4 Appliance front panel on page 16. See Backup Exec 3600 R4 Appliance rear panel components on page 17. See Backup Exec 3600 R4 Appliance disk and storage subsystem on page 20. See Backup Exec 3600 R4 Appliance LED status lights on page 21. Backup Exec 3600 R4 Appliance disk and storage subsystem The Backup Exec appliance contains two internal Solid-State Disks (SSD) that contain the appliance operating system and appliance-related software. The two SSDs are mirrored using RAID1 mirroring technology so as to provide system redundancy in case of a disk failure. You can view details for each SSD on the Appliance Summary page under the Appliance Hardware tab in the web UI. SSD drives are denoted as SAS drives in the summary. If you receive an SNMP alert or an SMTP alert regarding an SSD, it means that you no longer have system drive redundancy because only one SSD is functional. If the mirrored SSD redundancy is lost, and you have enabled Call Home, you should receive a call from Symantec Technical Support. Symantec Technical Support may arrange to have a replacement appliance shipped to you. If you have not enabled Call Home, contact Symantec Technical Support.

21 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance LED status lights 21 The Backup Exec appliance also contains four (4) externally accessible disk bays. Each bay holds one disk module, which includes a disk carrier and a disk drive. Each of the 3.5" hot-swappable disk drives are used for data storage and can hold up to 2 terabytes of data. They are labeled 0 through 3, from left to right. Each bay must contain a disk drive. If a disk drive is removed from a bay, you must install a blank carrier in the bay to maintain adequate airflow for cooling purposes. Although each disk bay contains a hot-swappable disk drive, only one drive can be hot-swapped at a time. Each disk drive module also includes two LED indicators. The LEDs are located on the left side of each carrier. You can view details for each disk drive on the Appliance Summary page under the Appliance Hardware tab in the web UI. The disk drives are denoted as SATA drives in the summary. See Backup Exec 3600 R4 Appliance front panel on page 16. See Backup Exec 3600 R4 Appliance rear panel components on page 17. See Backup Exec 3600 R4 appliance ports on page 19. See Backup Exec 3600 R4 Appliance LED status lights on page 21. Backup Exec 3600 R4 Appliance LED status lights LED indicators are used to indicate the operational status of the three components of the Backup Exec appliance. The components include the front panel, the disk modules, and the power supply module. See the section called Front panel LED indicators on page 21. See the section called Disk module LED indicators on page 23. See the section called Power supply module LED indicators on page 23. Front panel LED indicators The front panel of the appliance contains LED lights that provide operational status. See the section called Disk module LED indicators on page 23.

22 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance LED status lights 22 Figure 2-4 Front panel LEDs Power/Sleep activity LED System NIC 5 activity LED System status LED Table 2-3 Front panel LED indications LED Color Condition Indication Power/Sleep Activity LED Green Green On/solid Flashing Turned on, ACPI S0 state ( S0: Working) Sleep, ACPI S1 state (S1: Standby) None Off Turned off, ACPI S5 state (S5: Off) System NIC 5 Activity LED Green Green On/solid Flashing Link, no access Activity None Off No link System Status LED Green On/solid System ready, no alarms System Status LED Green Flashing System ready but degraded Power or fan redundancy may be lost. There may be temperature or voltage issues, battery failure, or an imminent power failure. System Status LED Amber On/solid Critical alarm (critical power/fan failure, critical temperature or voltage) System Status LED Amber Flashing Non-critical alarm (redundant fan/power failure, non-critical voltage, or temperature failure)

23 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance LED status lights 23 Table 2-3 Front panel LED indications (continued) LED Color Condition Indication System Status LED None Off Turn off system (disconnected from power source) Turn on system has been turned off and in standby mode, no previous degraded performance, non-critical, or critical states Disk module LED indicators Each disk drive module includes two LED indicators. The LEDs are located on the left side of each carrier. Figure 2-5 Disk module LEDs LEDs Table 2-4 Disk module LEDs LED Color Condition Indication Top Blue On/solid Turned on, activity normal Bottom Green On/solid Normal disk operation Amber On/solid Disk fault or loss of power to disk Power supply module LED indicators Each power supply module has one LED that is located on the top right-hand corner.

24 Hardware components of the Backup Exec 3600 R4 Appliance Backup Exec 3600 R4 Appliance LED status lights 24 Figure 2-6 Power supply module LEDs Power supply status LEDs Table 2-5 Condition Off Amber Power supply module LED indicators Indication No AC power to power supply Power supply critical event causing a shutdown: Physical failure Blown fuse Overcurrent protection level exceeded (12V) Overvoltage protection level exceeded (12V) Fan failure Blinking amber Blinking green Solid green Power supply warnings where the power supply continues to operate: high temperature, high power/high current, slow fan. AC present (5V standby on), when the power supply itself is off Output ON and OK

25 Chapter 3 Configuring the Backup Exec appliance This chapter includes the following topics: Backup Exec appliance configuration requirements Configuring the Backup Exec appliance Backup Exec appliance configuration requirements Before you begin the Backup Exec appliance configuration process, ensure you have the following information available. See Configuring the Backup Exec appliance on page 26.

26 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 26 Table 3-1 Requirement Backup Exec appliance configuration guidelines Description Required names and addresses Ensure that you have the following information available: Host name of the Backup Exec appliance. See Locating the default appliance host name and using it to access and configure the Backup Exec appliance on page 28. Network IP address, subnet mask IP address, and gateway IP address. Network names for all appliances. DNS information (DNS servers and suffix names). A unique password for appliance access. If you add the appliance to a domain, you must obtain domain credential information, such as user name and password. Also, ensure that the domain name can be accessed from the appliance. DNS or non-dns If a Domain Name Server is used, make sure that the DNS server can resolve the host name by using a fully qualified domain name and the short domain name. See Configuring the Backup Exec appliance on page 26. Configuring the Backup Exec appliance Use the following process as a guide to set up and configure your Backup Exec appliance. See Backup Exec appliance configuration requirements on page 25.

27 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 27 Table 3-2 Step Step 1 How to configure the appliance Task Locate the default appliance host name on the back of the appliance, and then write it down. The default host name is used to connect to the appliance. See Locating the default appliance host name and using it to access and configure the Backup Exec appliance on page 28. Step 2 Install the appliance side rails and mount the appliance in a rack. See Installing the Backup Exec appliance mount rails and mounting the appliance in a rack on page 29. Step 3 Connect to the appliance and view the factory test results. See Connecting to the Backup Exec appliance for the first time and verifying the factory test results on page 32. Step 4 Perform the initial configuration of the appliance. See Performing the initial configuration of the Backup Exec appliance on page 38. Step 5 Install software updates. See Updating the Backup Exec appliance software and hardware firmware on page 43. Step 6 Run Backup Exec. See Starting Backup Exec from the Backup Exec appliance on page 45. See About adding the Backup Exec appliance to an existing Backup Exec environment on page 58.

28 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 28 Locating the default appliance host name and using it to access and configure the Backup Exec appliance The default host name of the appliance is required to connect to the appliance using a laptop and an Ethernet cable so you can begin the configuration process. The default host name is derived from the MAC address of the appliance's Ethernet port 0. It uses all of the characters that comprise the MAC address, excluding the MAC address separator characters (-) or (:). For example, Appliance MAC address = AB Default appliance host name = AB Table 3-3 Appliance model Default host name label format Default host name label format Backup Exec 3600 R4 Appliance Appliance MAC address label: AB Default appliance host name: AB You can find the default host name on a label that is located on the rear chassis of the Backup Exec 3600 R4 Appliance directly under the Ethernet ports. The model of the appliance determines the printed format of the host name label. Symantec recommends that you locate the default appliance host name label on the Backup Exec 3600 R4 Appliance back panel and then write down the default host name before you rack mount the appliance. Viewing the host name label is difficult after you mount the Backup Exec 3600 R4 Appliance in a rack. The configuration process includes typing the 12-digit alpha-numeric default host name in the address bar of either the Internet Explorer or Firefox browser. Later during initial configuration, you can change the default host name to a name you prefer. For example, type: and then press Enter.

29 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 29 Note: When reviewing the Windows Event Viewer logs for the appliance, you may notice the entries that show the appliance computer name or host name as "BEAppliance". You can ignore these events, as these initial appliance-related entries are generated when the appliance is deployed at the factory, or after you initiate a factory reset. Before the initial configuration of the appliance occurs, the appliance host name is changed from "BEAppliance" to an alpha-numeric name based on the appliance s eth0 MAC address. The name change is done to avoid host name conflicts when you connect the appliance to your network. You can now install the application mount rails and mount the appliance in a rack. See Installing the Backup Exec appliance mount rails and mounting the appliance in a rack on page 29. Installing the Backup Exec appliance mount rails and mounting the appliance in a rack Standard mounting rails are included in the shipping box to accommodate standard enterprise square hole 19 racks. Note: Mounting methods vary by rack manufacturer. Racks may contain mounting rails with square holes, round holes, or round threaded holes. Regardless of the type of holes your rack has, ensure that the rails are installed between the rack unit spacing lines.you may need to acquire other mounting hardware to install the guide rails in your rack.

30 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 30 To install the Backup Exec appliance mount rails and to mount the appliance in a rack 1 Mount the rails to the rack. Note: Ensure that the rails are installed between unit spacing lines of the rack. 2 Place the top fastener into the rail hole. 3 Snap the edge of the fastener down. 4 Insert the bottom fastener and make sure that it is secure. 5 Secure the rails to the rack by inserting the provided screws into the threaded holes between the top fastener and bottom fastener at the ends of each rail.

31 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 31 6 Fully extend the rails forward. 7 Lower the chassis onto the extended rails. 8 Be sure that the three locking pins on the sides of the chassis fit into the three slots in the extended rails. Note: The following drawings show an empty chassis. Your appliance is fully loaded, with the chassis cover installed, when it arrives from the factory. The following drawings show a generic chassis. You can use these instructions regardless of the height of your appliance. 9 Secure the fasteners over the front hole, on each side of the appliance.

32 Configuring the Backup Exec appliance Configuring the Backup Exec appliance Press the release tab on the extended rail (#1 on the following picture). 11 Push the chassis into the rack until it snaps into place (#2 on the following picture). You can now connect to the Backup Exec appliance and verify the factory test results. See Connecting to the Backup Exec appliance for the first time and verifying the factory test results on page 32. Connecting to the Backup Exec appliance for the first time and verifying the factory test results You can initially connect to the Backup Exec appliance directly or remotely using either a laptop computer and a standard ethernet cable, or by using a Windows computer on the network. Select one of the following connection methods. Connect directly to the appliance with a laptop using only appliance Ethernet port eth0 (recommended). See Connecting directly to the Backup Exec appliance with a laptop using only appliance Ethernet port eth0 (recommended) on page 33. Connect directly to the appliance using a laptop computer when all appliance Ethernet ports are in use. See Connecting directly to the Backup Exec appliance using a laptop computer when all appliance Ethernet ports other than Eth0 are in use on page 34. Connect remotely to the appliance using a Windows computer on the network.

33 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 33 See Connecting remotely to the Backup Exec appliance using a Windows computer on the network on page 36. Note: If you have difficulty connecting to the appliance web UI, use the PowerShell command-line interface to connect and configure the appliance. See Using the Windows PowerShell command line interface with the Backup Exec appliance on page 68. Connecting directly to the Backup Exec appliance with a laptop using only appliance Ethernet port eth0 (recommended) Use the following steps to connect to the appliance with a laptop using appliance Ethernet port eth0. Note: Ensure that the laptop's IPv4 IP network setting is set to Obtain an IP address automatically. A connection to the appliance cannot be made if you use a static IP address. To connect directly to the appliance with a laptop using appliance Ethernet port eth0 1 At the laptop computer, connect a standard ethernet cable to the NIC port on the laptop and to the eth0 port on the appliance. 2 Connect both power cables to the appliance. 3 Press the ON button on the front panel to turn on the appliance. 4 On the laptop, open a web browser and then type the host name in the browser's address field. For example, See Locating the default appliance host name and using it to access and configure the Backup Exec appliance on page 28. The Backup Exec appliance web UI login page appears; however, you do not need to log in at this time. 5 Optional: Clear the browser's security exception by setting the Symantec security certificate that is included with the appliance configuration software by doing one of the following:

34 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 34 If you are using Firefox: Do the following in the order listed: Follow the browser's on-screen instructions for clearing the security exception. Continue with step 6. If you are using Internet Explorer: Do the following in the order listed: Refer to Microsoft documentation on importing a certificate. en-us/library/cc aspx Continue with step 6. 6 On the right side of the Backup Exec appliance web UI, click Selftest Factory Report. A text file reports the results of software tests that were run on the appliance in the factory. If the report shows that the appliance functions normally (PASS), you can perform the initial configuration of the appliance. If any tests show as failed (FAIL), contact your reseller. You can now perform the initial configuration of the appliance. See Performing the initial configuration of the Backup Exec appliance on page 38. Connecting directly to the Backup Exec appliance using a laptop computer when all appliance Ethernet ports other than Eth0 are in use Use the following steps to connect directly to the appliance with a laptop when all of the appliance Ethernet ports other than Eth0 are in use. Note: Ensure that the laptop's IPv4 IP network setting is set to Obtain an IP address automatically. A connection to the appliance cannot be made if you use a static IP address. Warning: To avoid potential network issues during the initial configuration process, Symantec recommends that you only use Ethernet port eth0 when you configure the appliance. All other Ethernet ports (eth1, eth2, and eth3) should remain unused until the appliance configuration nears completion.

35 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 35 To connect directly to the appliance using a laptop computer when all appliance Ethernet ports other than Eth0 are in use 1 At the laptop computer, connect a standard ethernet cable to the NIC port on the laptop and to the eth0 port on the appliance. 2 At the laptop, open a command prompt and then issue a PING command to the appliance by using the following command: ping <assigned_appliance_name> -4 For example, c:\>ping AB -4 3 Note the IP address and keep it nearby. Note: You can now connect any or all of the remaining appliance eth ports to your network. 4 Type the eth0 IPv4 IP address in the browser's address field. For example, 5 Press Enter. The Backup Exec appliance web UI login page appears; however, you do not need to log in at this time. 6 Optional: Clear the browser's security exception by setting the Symantec security certificate that is included with the appliance configuration software by doing one of the following: If you are using Firefox: Do the following in the order listed: Follow the browser's on-screen instructions for clearing the security exception. Continue with step 7.

36 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 36 If you are using Internet Explorer: Do the following in the order listed: Refer to Microsoft documentation on importing a certificate. en-us/library/cc aspx Continue with step 7. 7 On the right side of the Backup Exec appliance web UI, click selftest_factory_report.txt. A text file reports the results of software tests that were run on the appliance in the factory. If the report shows that the appliance functions normally (PASS), you can perform the initial configuration of the appliance. If any tests show as failed (FAIL), contact your reseller. You can now perform the initial configuration of the appliance. See Performing the initial configuration of the Backup Exec appliance on page 38. Connecting remotely to the Backup Exec appliance using a Windows computer on the network When connecting to the appliance remotely from a network Windows computer, remember to use the Symantec-assigned host name when you are prompted. To connect remotely to the appliance using a Windows computer on the network 1 Do one of the following:

37 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 37 If you do not know the IP address of the appliance Do the following in the order listed: On a network Windows computer that resides on the same subnet as the eth0 port of the appliance, open a command prompt. At the prompt, type the following ARP command: arp -d To refresh the ARP cache, ping the broadcastip address of the network segment on which the appliance is connected. If the appliance eth0 MAC address and its associated IP address still do not appear, you can look up the IP address of the appliance at the DHCP server. Contact your network administrator for assistance in determining the broadcast IP address, as well as answering other DHCP-related questions. At the prompt, type the following ARP command: arp -a Locate the MAC address of the appliance and note its assigned IP address. Note: If the appliance MAC address does not appear, contact your reseller for assistance. Proceed to step 2. If you know the IP address of the appliance Proceed to step 2. 2 In the web browser's address field, type the assigned IP address: For example, 3 Press Enter. The Backup Exec appliance web UI login page appears; however, you do not need to log in at this time. 4 Optional: Clear the browser's security exception by setting the Symantec security certificate that is included with the appliance configuration software by doing one of the following:

38 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 38 If you are using Firefox: Do the following in the order listed: Follow the browser's on-screen instructions for clearing the security exception. Continue with step 5. If you are using Internet Explorer: Do the following in the order listed: Refer to Microsoft documentation on importing a certificate. en-us/library/cc aspx Continue with step 5. 5 On the right side of the Backup Exec appliance web UI, click selftest_factory_report.txt. A text file reports the results of software tests that were run on the appliance in the factory. If the report shows that the appliance functions normally (PASS), you can perform the initial configuration of the appliance. If any tests show as failed (FAIL), contact your reseller. You can now perform the initial configuration of the appliance. See Performing the initial configuration of the Backup Exec appliance on page 38. Performing the initial configuration of the Backup Exec appliance The Backup Exec appliance initial configuration process enables you to set appliance security passwords, configure network access to the appliance, set time zone and language options, and enter AutoSupport registration information. Before you begin the initial configuration The initial configuration of the appliance requires your Symantec License File (SLF) file to fully license the appliance. Without a valid SLF, the Backup Exec appliance runs in Trial Mode for a limited time. You can find your SLF file in the Backup Exec appliance purchase materials that Symantec ed to you. If you directly connect to the appliance using a laptop computer to run the initial configuration, Symantec recommends moving the SLF file from your to the laptop. If you use DHCP to connect to the appliance, place the SLF file in an accessible share on your network. You can then browse to the location where the SLF file is located when you are prompted to upload the SLF file.

39 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 39 To perform the initial configuration of the Backup Exec appliance 1 Confirm that the Selftest Factory Report shows that components function properly. 2 Log in to the appliance using the appliance web UI as follows: Accept the default user name of administrator. For Password, enter P@ssw0rd (where 0 is the number zero). Note: The password is case-sensitive. 3 Click Next. 4 Review the Appliance configuration overview page. All of the items that are marked with an asterisk (*) are required. Symantec recommends that you notate the information and have it handy because you cannot complete the initial configuration process without it. 5 Click Configure. 6 On the Network page, do one of the following: To use DHCP to configure your network Do the following in the order listed: Click DHCP. In the Network Interface Card list box, select eth1, or the port that you used to connect your network cable. Note: Double asterisks (**) represent the active Ethernet port. Click Add. Click Next. Continue with step 7.

40 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 40 To manually set the IP addresses for your network Do the following in the order listed: Click Static IP. Enter IP address, netmask, and gateway information in the boxes provided. In the Network Interface Card list box, select eth1, or the port that you used to connect your network cable. Note: Double asterisks (**) represent the active Ethernet port. Click Add. To connect additional networks to the appliance, repeat the process to assign additional network information to the remaining Ethernet ports. Click Next. Continue with step 7. 7 On the DNS (Domain Name Services) page, do one of the following: If you selected DHCP on the Network page No input is required. The initial configuration process automatically configures the DNS IP address for you. In the Applied configuration fields, you should see the word Auto and the Ethernet port that DHCP used to bind the IP address. However, if you want to use a proxy server, do the following in the order listed: Select Enable Proxy. Enter the proxy server information. Note: If your proxy server supports Secure Socket Layer tunneling, select Enable SSL Tunneling. Click Next. Continue with step 8.

41 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 41 If you want to manually configure the connection to a DNS server Do the following in the order listed: In DNS Settings, add the DNS IP address, and then select an eth port to which you want to bind the address. Click Add. If you want to use a proxy server, select Enable Proxy, and then enter the pertinent proxy server information. Note: If your proxy server supports Secure Socket Layer tunneling, select Enable SSL Tunneling. Click Next. Continue with step 8. 8 When the DNS summary page reports a successful configuration, click Next. 9 On the Security page, review the information. Then enter an administrator account password and a password to use as the new deduplication logon account password. You use the deduplication logon account password to access the deduplication disk storage device. The administrator password can be seven or more characters in length, and it must include a specific combination of characters, with minimum requirements for acceptable passwords. A password with seven characters must include all of the following requirements, while a password with more than seven characters must include at least three of the following requirements: One uppercase letter One lowercase letter One number (0-9) One of the following special # $ % ^ &! * ( ) { } [ ] Note: Use only the special characters listed. Be aware that using other special characters in non-english languages may be considered as invalid characters. 10 Click Next. 11 Click OK when you are prompted to proceed. 12 After successfully updating the passwords, click Next.

42 Configuring the Backup Exec appliance Configuring the Backup Exec appliance On the Language/Time Zone page, select the language you want to use with the Backup Exec Administration Console. By default, the appliance uses the English language during the initial configuration process. To use the language you set during the initial configuration, restart the appliance after you complete the initial configuration. Note: After you complete the initial configuration, you can change the language that the appliance uses from the login page of the web UI. See Setting the appliance location on page Under Appliance Locale, select the country where the appliance is located. Based on the language that you selected in step 13 for the Backup Exec Administration Console, all of the countries that use that language appear in the Appliance locale list box. If you want to work in a different language other than the language that is used in the country where the appliance is located, check Show all languages. Then select the language that you prefer to use. For example, you can select English (United States) as the locale of the appliance, yet choose Corsu (France) as the appliance locale language. 15 Optional: Under Date and Time Format, select the appliance location, and then select a date format and a time format. The date format and time format that you select are used in the appliance web UI, the Backup Exec Administration Console, and the Windows operating system. You can reset the date format and the time format, or select a different format type on the Time Zone and Synchronization tab within the appliance web UI. If you want to work in a different language, or use a different date format other than what is used in the country where the appliance is located, check Show all languages. Then select the language that you prefer to use. 16 Optional: Under Time Sychronization, select Network Time Protocol (NTP), and then enter the NTP server name or the IP address. Network Time Protocol (NTP) is a networking protocol for clock synchronization between computer systems over packet-switched, variable-latency data networks. 17 Optional: To manually set the date and local time for the appliance, click None, and then enter the appropriate date and time values in the Date and Time fields. 18 Optional: In the Time Zone field, select the time zone of the appliance.

43 Configuring the Backup Exec appliance Configuring the Backup Exec appliance Click Next. 20 Review the summary of the location and language settings, and then click Next. 21 On the AutoSupport Registration page, verify that Enable Call Home is checked, and then add the registration information in the fields provided. Fields that are marked with an asterisk (*) are required. Note: The Symantec AutoSupport organization works with the Call Home feature to minimize Backup Exec appliance downtime by simplifying both your technical support experience and the repair process whenever appliance repairs become necessary. The Call Home feature is enabled by default. If you do not want to add AutoSupport registration information, uncheck Enable Call Home. 22 Click Next. 23 If the AutoSupport Registration summary page reports a successful configuration, or if it reports that you disabled the Call Home option, click Next. Otherwise, click Back to enter the registration information again. 24 On the Host Name and License page, enter a new user-defined host name. 25 Optional: Enter a domain, along with a user name and password with rights to join the domain. 26 Click Next. 27 Click OK to restart the appliance. To see host name or domain changes, you must restart the appliance. After the appliance restarts, the appliance web UI logon screen appears. Before you log in to the appliance, confirm that the initial configuration was successfully completed. See Updating the Backup Exec appliance software and hardware firmware on page 43. Updating the Backup Exec appliance software and hardware firmware Symantec recommends that you download and install Microsoft Windows operating system updates, Symantec Backup Exec software updates, and appliance firmware updates immediately after completing the initial configuration. Symantec also recommends that you periodically check for updates so that the latest software versions that are available can be installed on the appliance. Install all available Windows updates and Backup Exec patches or updates.

44 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 44 To download the Windows updates and Symantec Backup Exec updates, the appliance web UI connects directly to servers at both Microsoft and Symantec. To successfully download the available software updates, the appliance must be connected to the Internet. If you prefer, you can configure local Microsoft Windows Server Update Servers and Symantec Central LiveUpdate servers. When you use internal local update servers you eliminate the need for the appliance to connect to external networks for product updates. By using local update servers, you can eliminate the update traffic between the local networks and the external networks. For more information about Symantec LiveUpdate servers, see the Symantec LiveUpdate Administrator 2.3 User's Guide. For more information about Microsoft Windows Server Update Servers, contact Microsoft. The process of installing updates may take a few hours. When the process has completed, a message appears on the Update Information page that states that the updates have been successfully installed and the appliance needs to be restarted. Perform this task during off-peak hours so that your appliance operations are not interrupted or degraded. Note: You may have to run Symantec LiveUpdate more than once, along with subsequent appliance restarts, to completely update your software. To update the Backup Exec appliance software and hardware firmware 1 Log in to the appliance web UI. 2 Navigate to the Manage > Appliance > Update Information tab. 3 Under Schedule Updates, click Check now next to the Check and download available updates option. You can review the progress of the download process in the Real time progress box. After the updates finish downloading, the Product update message indicates that the updates are ready to be installed. 4 Do one of the following:

45 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 45 To immediately install the updates Do the following in the order listed: Ensure that all Backup Exec jobs have finished. Under Schedule Updates, click Install Now. When the update installation finishes, the Product update message reports that the installation is complete and the appliance must be restarted. Restart the appliance. To schedule the installation of updates Do the following in the order listed: Under Schedule Updates, click the calendar icon to select an installation date. Click the clock icon to select a time to run the installation. Click Schedule. 5 After installing the software updates, restart the appliance. You can now start Backup Exec. See Starting Backup Exec from the Backup Exec appliance on page 45. Starting Backup Exec from the Backup Exec appliance After you successfully finish the initial configuration of the Backup Exec appliance, the appliance is ready to use. Note: Ensure that the appliance host name is resolvable before you launch Backup Exec. To start Backup Exec from the Backup Exec appliance 1 On the client computer that you use to access the appliance, open a supported web browser, and then enter the host name of the appliance. 2 Log in to the web UI. 3 Navigate to Manage > Remote Launch.

46 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 46 4 Under Management Tools, click Backup Exec Administration Console. Note: If the appliance is a member of a domain, you must log in using valid credentials for that domain when prompted. 5 Symantec recommends that you install your Symantec Backup Exec appliance maintenance SLF license file after you start Backup Exec. See Installing the Symantec Backup Exec appliance maintenance SLF license file on page 46. For more information about Backup Exec, see the Symantec Backup Exec 15 Administrator's Guide. Installing the Symantec Backup Exec appliance maintenance SLF license file Symantec software products require product activation by entering an activation code or running a license file during the installation process of the software. Your Backup Exec appliance has been preloaded with the proper Symantec Licensing File (SLF) so no further software activation is required. Along with your product license certificate from Symantec, you also receive a unique Backup Exec appliance SLF license file. You should retain the Backup Exec appliance SLF license file as it is used in case the software must be reinstalled. Your licensing certificate also includes a Symantec SLF license file. The SLF license file is required for activation of maintenance and to establish your technical support entitlement period that is included with your Backup Exec appliance product. To install your Backup Exec appliance maintenance SLF license file 1 In the Backup Exec Administration Console, click the Backup Exec button, select Installation and Licensing, and then select Install Options and Licenses on this Backup Exec Server. 2 Click Import Symantec License File. 3 Browse to the location of your license file, and then select the file. 4 Click Next. 5 Click Next on the Configure Options page. 6 Click Next on the Choose Languages page. 7 Click Install on the Installation page. 8 After the installation completes, click Finish.

47 Configuring the Backup Exec appliance Configuring the Backup Exec appliance 47 Shutting down the Backup Exec appliance You must perform a full system shutdown before removing or turning off power. To shut down the appliance correctly, ensure that all Backup Exec jobs have completed or are on hold, and then use the following steps to shut down the appliance. See your Symantec Backup Exec 15 Administrator's Guide for information about Backup Exec. To shut down the appliance 1 In the appliance web UI, click Manage > Appliance > Restart / Shutdown. 2 Click Shutdown Appliance. See Configuring the Backup Exec appliance on page 26.

48 Chapter 4 Modifying the Backup Exec appliance configuration settings This chapter includes the following topics: Changing the password for the Backup Exec appliance Joining the appliance to a domain from the web UI Removing the appliance from a domain Configuring a DNS server for the Backup Exec appliance by using a static IP address Configuring a proxy server for the Backup Exec appliance Selecting a language to use with the Backup Exec Administration Console Setting the appliance location Setting the date and time formats for the appliance Teaming Backup Exec appliance Ethernet ports Determining the Backup Exec appliance software version information About adding the Backup Exec appliance to an existing Backup Exec environment

49 Modifying the Backup Exec appliance configuration settings Changing the password for the Backup Exec appliance 49 Changing the password for the Backup Exec appliance To ensure the security of your system, Symantec recommends that you change the appliance's default security password to a new and unique password. An acceptable Administrator password must consist of at least eight characters, up to a maximum of 20 characters. The password must also include a specific combination of characters, using at least three of the following: One uppercase letter One lowercase letter One number (0-9) One of the following special characters:! # $ % ^ & *( ) { } [ Note: The following special characters cannot be used: ;, : < >.? ` ~ - _ + = " Be aware that the use of other special characters in non-english languages may be considered as invalid characters. Passwords may begin with an uppercase letter or a lowercase letter. However, these characters are not considered when the password is evaluated against the minimum requirements criteria. Changing the administrator password also restarts the Backup Exec services if they are running under the administrator account and the appliance is not a member of a domain. To change the Backup Exec appliance password 1 Log in to the appliance by using the web UI. 2 Click Settings > Appliance Password. 3 Type the existing password in the Current Administrator Password field. 4 Type the new password in the New Administrator Password field. 5 Retype the new password in the Confirm New Administrator Password field. 6 Click Save.

50 Modifying the Backup Exec appliance configuration settings Joining the appliance to a domain from the web UI 50 Joining the appliance to a domain from the web UI You can join the appliance to a domain or remove it from a domain after the initial configuration completes by using the options on the Host Name and Domain tab within the web UI. If you join the appliance to other domains, note that certain domain policies may cause issues with the appliance. Ensure that you do not apply domain policies that are required for the proper operation of the appliance, such as those that block ports or stop appliance services. For example, you might apply a domain policy that blocks port TCP Blocking this port affects your ability to connect to the appliance using the PowerShell module. You might also apply a domain policy that stops the WinRM service. Again, this affects the PowerShell module and is not recommended. Finally, applying a domain policy that changes some registry settings can affect operating system hardening, and thus the overall security of the appliance. Use the following steps to join the appliance to a domain. Note: If you re-image the appliance, and you use the same host name, you must remove the former host name for the computer entry in Active Directory before you add the re-imaged appliance to the domain. To join the appliance to a domain from the web UI 1 Make sure that the host name of the appliance does not already exist in the domain. If the host name exists, the appliance cannot join the specified domain. 2 In the appliance web UI, click Settings > Host Name and Domain. 3 Click Join Domain. 4 In the Appliance Administrator Password field, type the administrator password for the appliance. Use the password that you used to log on to the appliance web UI. After you successfully join a domain, the Backup Exec services run under the context of the domain. The default Backup Exec logon account contains the domain user s credentials, which consist of a user name and password. 5 In the Domain field, enter the domain name (including the domain suffix). See Domain name suffix guidelines on page 51.

51 Modifying the Backup Exec appliance configuration settings Removing the appliance from a domain 51 6 In the Domain User Name field, enter a domain user name. The domain user should be the Domain Administrator s account, or an equivalent account that is part of the Domain Administrator s group. 7 In the Domain Password field, type a domain password. 8 Click OK when you are prompted to restart the appliance. Domain name suffix guidelines It may take a few minutes for the appliance to restart completely. It is recommended to log in to the appliance web UI only after the message saying that "Appliance services are starting.." disappears. You must add a suffix to a domain name when you add the appliance to a domain. If you do not specify a domain name suffix, the host name of the appliance is used. The appliance must be accessible by using a fully qualified name in the network. The domain suffix can be the same as the fully qualified domain name to which the appliance is joined. The domain suffix is used and appended to the Backup Exec Remote Desktop (RDP) programs that are accessible from the appliance web UI. The following examples demonstrate two scenarios: Assume that the host name is "Test-Host". This appliance is joined to the domain called "TEST-DOMAIN". If the appliance is accessible in the network using the fully qualified name "Test-Host.test-domain.com", then the domain suffix should be specified as "test-domain.com". In this case the domain name and the domain suffix are different. Assume that the host name is "Test-Host". This appliance is joined to the domain called "testdom.com". If the appliance is reachable in the network using the fully qualified name "Test-Host.testdom.com", then the domain suffix should be specified as "testdom.com". In this case the domain name and the domain suffix are the same. See Joining the appliance to a domain from the web UI on page 50. Removing the appliance from a domain Use the following steps to remove the appliance from a domain. To remove the appliance from a domain 1 In the appliance web UI, click Settings > Host Name and Domain. 2 Click Leave Domain.

52 Modifying the Backup Exec appliance configuration settings Configuring a DNS server for the Backup Exec appliance by using a static IP address 52 3 Click Save. 4 Click OK when you are prompted to restart the appliance. It may take 10 minutes to 12 minutes for the appliance to restart completely. It is recommended to log in to the appliance web UI only after the message saying that "Appliance services are starting.." disappears. Configuring a DNS server for the Backup Exec appliance by using a static IP address During the initial configuration, you may have configured the appliance to use DHCP to automatically generate the IP address that is required to connect the appliance to your organization's network. DHCP assigns the automatically-generated IP address to the appliance eth port where you attach the network cable, which is typically eth port 0 (eth0). Although Symantec recommends that you configure network access for the appliance by using DHCP, your environment may require you to configure a DNS server by using a static IP address. Note: Configuring a specific DNS server requires a static IP address before you begin the following procedure. Contact your network administrator for assistance in obtaining a static IP address. To configure a DNS server for the appliance by using a static IP address 1 Ensure a network cable is connected to one of the available eth ports on the back of the appliance. 2 In the web UI, navigate to Settings > DNS. 3 Next to the Applied configuration fields, click Remove to remove the automatically-configured DHCP network configuration for the eth port that appears in the gray box. 4 Click OK to delete the applied configuration. 5 In the DNS IP Address field, enter a static IP address of the DNS name server. 6 Click the drop-down control in the box to the right to select the eth port where the ethernet cable is attached. 7 Optional: Add a DNS suffix to the DNS server name in the field labeled DNS Suffix(s). 8 Click Add. See Configuring a proxy server for the Backup Exec appliance on page 53.

53 Modifying the Backup Exec appliance configuration settings Configuring a proxy server for the Backup Exec appliance 53 Configuring a proxy server for the Backup Exec appliance You can enable the proxy settings on the Backup Exec appliance if the appliance environment has a proxy server between the environment and external Internet access. The proxy settings include both a proxy server and a port. The proxy server must accept secure Hyper Text Transport Protocol (HTTPS) connections from the Symantec Call Home Server. To configure a proxy server for the Backup Exec appliance 1 In the web UI, navigate to Settings > DNS. 2 Check Enable Proxy. 3 Type the name of the proxy server. 4 Type the port number of the proxy server. 5 Enter the user name and password credentials of the user with rights to access the proxy server. 6 Ensure Enable SSL Tunneling is selected. Selecting a language to use with the Backup Exec Administration Console You can select the language that is used for the Backup Exec Administration Console. To select a language to use with the Backup Exec Administration Console 1 In the appliance web UI, navigate to Settings > Language. 2 Select a language. 3 Click Save. See Setting the date and time formats for the appliance on page 54. Setting the appliance location You can set the country location of the appliance for language purposes by navigating to the Settings > Language tab in the appliance web UI. After you select a location in the Appliance Location field, the formats that are used to present the date and time automatically change to the formatting style used in the country that you select.

54 Modifying the Backup Exec appliance configuration settings Setting the date and time formats for the appliance 54 Note: The names of the countries that appear in the Appliance Location field reflect the language that you selected for the Backup Exec Administration Console under Backup Exec Language Settings. For example, when you select the English language, all of the countries that use the English language appear. To set the appliance location 1 In the appliance web UI, navigate to Settings > Language. 2 In the Appliance Location field, select the country where the appliance is located. If the country that you want to select does not appear, consider changing the language that you use for the Backup Exec Administration Console. 3 Click Save. See Setting the date and time formats for the appliance on page 54. Setting the date and time formats for the appliance You can select a format in which to display the appliance date and time. To set the date and time formats for the appliance 1 In the web UI, navigate to Settings > Language. 2 Under Date and Time Format, in the Appliance Location list box, click the down arrow, and then select the country where the appliance is located. 3 In the Date field, select the date format. 4 In the Time field, select the time format. 5 Click Save. See Selecting a language to use with the Backup Exec Administration Console on page 53. Teaming Backup Exec appliance Ethernet ports You can combine two or more Backup Exec appliance NIC (eth) ports together to form one logical eth port. Connecting multiple NIC ports together into one logical port is called network interface card teaming (NIC teaming). By creating one logical Ethernet port from the appliance's multiple Ethernet ports, the following can be achieved:

55 Modifying the Backup Exec appliance configuration settings Teaming Backup Exec appliance Ethernet ports 55 Fault tolerance Configuring multiple Ethernet ports in a fault tolerant configuration ensures Backup Exec appliance network availability. By configuring one appliance network interface adapter as a primary adapter, and all other appliance Ethernet ports as secondary adapters, network availability automatically continues if the primary Ethernet port fails. Greater network bandwidth You can combine multiple network interface ports to form a single logical network interface port, which increases the overall bandwidth that is supplied to the appliance. By using NIC teaming, you can effectively increase the amount of data flowing to the appliance without additional network infrastructure costs. Ethernet ports are labeled as eth0, eth1, eth2, and eth3. Each Ethernet port transmits one gigabit per second. When you team Ethernet ports together, your network bandwidth to the appliance increases by a factor of one gigabit per second. For example, the maximum theoretical network throughput through a single eth port is 1 gigabit per second. By teaming two Ethernet ports such as eth0 and eth1, the maximum theoretical throughput through the teamed ports becomes two gigabits per second. Teaming three Ethernet ports provides the appliance with a theoretical maximum of three gigabits per second of network throughput. Teaming four Ethernet ports provides the appliance with a theoretical maximum of four gigabits per second of network throughput. Load balancing Combining multiple Ethernet ports improves the distribution of transmission and reception loads by implementing an analysis of network traffic flow from the appliance. To improve network efficiencies, load balancing distributes incoming and outgoing network packets based on destination IP addresses. To configure network interface card teaming Warning: Modifying your network interfaces such as teaming eth ports may affect your DNS settings. After creating or modifying a NIC team, navigate to the DNS tab and verify that your network interface DNS settings are correct. Note: Ensure that your web browser does not block popups from appearing before you begin the NIC teaming process. 1 In the appliance web UI, click Settings > Network. 2 Under Configure network, check Configure NIC Teaming. The Configuring NIC Teaming page appears.

56 Modifying the Backup Exec appliance configuration settings Teaming Backup Exec appliance Ethernet ports 56 3 Select Static IP or DHCP. 4 In the Select a teaming mode list box, select the NIC teaming mode you want to implement. Two teaming modes are available: Adaptive load balancing (ALB) and Dynamic Link Aggregation (IEEE 802.3ad). Adaptive Load Balancing (ALB) Dynamic Link Aggregation (IEEE 802.3ad) ALB provides increased network bandwidth and load balancing of outbound (transmit) traffic. Symantec's implementation of ALB also includes Receive Load Balancing (RLB). By combining the ALB and RLB teaming modes, the appliance permits load balancing in both transmit and receive directions. IEEE 802.3ad is an IEEE standard that also provides a method for combining multiple Ethernet network interface cards into a single logical channel. This teaming mode provides fault tolerance, as well as load balancing in both transmit and receive directions. To use 802.3ad, the network switch must support and be configured for IEEE 802.3ad before the team is created. Contact your network administrator for more details. Both teaming modes provide the same benefits; however, ALB is the easiest to implement because it does not require network switch configuration. Contact your network administrator for more details. 5 Do one of the following:

57 Modifying the Backup Exec appliance configuration settings Teaming Backup Exec appliance Ethernet ports 57 If you selected Static IP in step 3 Do the following in the order listed: Under Enter network IP information, enter a static IP address, along with netmask and gateway addresses. Select two or more Ethernet (eth) ports to team to the static IP address you entered. Note: Ensure that network cables are plugged into the Ethernet ports you select for teaming. Click Add. If you selected DHCP in step 3 Do the following in the order listed: Select two or more Ethernet (eth) ports to team to the static IP address you entered. Note: Ensure that network cables are plugged into the Ethernet ports you select for teaming. Click Add. 6 Navigate to Manage > Remote Launch, and then click Backup Exec Administration Console. 7 From the Backup Exec Administration Console, stop and then restart the Backup Exec services. 8 When the services finish restarting, press F5 to refresh the Backup Exec Administration Console. Note: You can also refresh the network interface list by shutting down and then restarting the Backup Exec Administration Console. After completing the refresh, the newly-teamed logical NIC port appears in the Backup Exec Administration Console's network interface list. The teamed NIC port also appears under Network properties in the Network page of the appliance web UI, where teaming details can be reviewed. To add additional ports to the NIC team, the existing NIC team must be removed and then recreated with the desired number of ports. For more information about stopping and restarting the Backup Exec services, see the Symantec Backup Exec 15 Administrator's Guide.

58 Modifying the Backup Exec appliance configuration settings Determining the Backup Exec appliance software version information 58 Determining the Backup Exec appliance software version information Under Product Information, you can quickly determine the version of the appliance web UI software, and if software updates are available. You can also determine the installed status of any software update that has been previously downloaded. To determine the Backup Exec appliance software version information 1 Log in to the appliance web UI. 2 Navigate to Manage > Appliance > Update Information. You can also find the appliance software version information by clicking About on the menu bar of the web UI. Note: Available software updates are automatically downloaded on Sunday evenings at 11:00 P.M. About adding the Backup Exec appliance to an existing Backup Exec environment You can add a Backup Exec appliance to an existing Backup Exec environment. However, in Backup Exec environments where multiple versions of Backup Exec are installed, the appliance can back up only the agents that run Backup Exec 15. Symantec recommends that you upgrade each Backup Exec server to run Backup Exec 15 or later, with all patches applied, before you add the appliance to the environment. You can add a Backup Exec appliance as a managed Backup Exec server in a Central Admin Server Option (CASO) environment. However, you must upgrade all other Backup Exec servers to Backup Exec 15 before you add the appliance to the environment. Several tape devices and autoloaders are compatible with the Backup Exec appliance. You can find a list of compatible types of storage devices at the following URL:

59 Chapter 5 Monitoring Backup Exec appliance operations This chapter includes the following topics: Monitoring the status of the Backup Exec appliance hardware components Monitoring Backup Exec jobs from the Backup Exec appliance web UI Viewing Backup Exec alerts from the appliance web UI Clearing Backup Exec alerts from the appliance web UI Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) Monitoring the status of the Backup Exec appliance hardware components You can use the appliance web UI to monitor the status of each appliance hardware component. By navigating to the Monitor > Appliance Hardware tab, you can see information about the following: Disks RAID groups RAID Battery Backup Unit Fans Temperature Power Supply

60 Monitoring Backup Exec appliance operations Monitoring Backup Exec jobs from the Backup Exec appliance web UI 60 For information about each of the columns that appears within the appliance summary tables, see the Backup Exec appliance Help. Monitoring Backup Exec jobs from the Backup Exec appliance web UI You can view information about active Backup Exec jobs and their statuses from the appliance web UI without having to launch Backup Exec. For more information about Backup Exec jobs, see the Symantec Backup Exec 15 Administrator's Guide. To monitor Backup Exec jobs from the Backup exec appliance web UI 1 Log in to the appliance web UI. 2 Click Monitor > Backup Exec Jobs. See Viewing Backup Exec alerts from the appliance web UI on page 60. See Clearing Backup Exec alerts from the appliance web UI on page 61. Viewing Backup Exec alerts from the appliance web UI Backup Exec generates job alerts when issues occur during backup, restore, and storage job operations. You can review the alerts in the appliance web UI without having to run the Backup Exec Administration Console. For more information about Backup Exec alerts, see the Symantec Backup Exec 15 Administrator's Guide. To view Backup Exec alerts from the appliance web UI 1 Log in to the appliance web UI. 2 Click Monitor > Backup Exec Alerts. 3 View the alert. See Clearing Backup Exec alerts from the appliance web UI on page 61. See Monitoring Backup Exec jobs from the Backup Exec appliance web UI on page 60.

61 Monitoring Backup Exec appliance operations Clearing Backup Exec alerts from the appliance web UI 61 Clearing Backup Exec alerts from the appliance web UI Backup Exec generates job alerts when issues occur during backup, restore, and storage job operations. You can clear the alerts in the appliance web UI without having to run the Backup Exec Administration Console. For more information about Backup Exec alerts, see the Symantec Backup Exec 15 Administrator's Guide. To clear Backup Exec alerts from the appliance web UI 1 Log in to the appliance web UI. 2 Click Monitor > Backup Exec Alerts. 3 After viewing the alerts, you can clear them by doing one of the following: To clear one or more Backup Exec alerts Do the following in the order listed: Under the column titled Respond OK, check each alert that you want to remove. Click OK. To clear all Backup Exec alerts at once Do the following in the order listed: Click the check box under the Respond OK column title. Click OK. After you clear alerts from the Backup Exec Alerts page in the web UI, Backup Exec updates its alert history. By updating its alert history, Backup Exec enables you to review the alert from the Backup Exec Administration Console in the future. See Viewing Backup Exec alerts from the appliance web UI on page 60. See Monitoring Backup Exec jobs from the Backup Exec appliance web UI on page 60.

62 Monitoring Backup Exec appliance operations Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) 62 Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) The Symantec Data Center Security Agent - Server Advanced version (SDCS Agent) is an un-managed, policy-based, host security agent that is used to monitor and protect the Backup Exec appliance from Zero-day attacks and malware exploits. The SDCS Agent implements a set of read-only policies for the Backup Exec appliance. These policies include an intrusion prevention policy and intrusion detection policy, which are described in the following table. Table 5-1 Features of the SDCS Agent on the Backup Exec appliance Intrusion Prevention Real-time proactive enforcement Intrusion/malware prevention System hardening Application control Privileged user access control Data protection for backed up data Intrusion Detection Real-time monitoring and auditing Host intrusion detection File Integrity monitoring Configuration monitoring Track and monitor user access The SDCS Agent is installed as part of the Backup Exec factory image, and is enabled by default. It provides you with the Symantec Data Center Security Event Viewer that you can use to view appliance activities and events that occur during appliance operations. You can access the agent Event Viewer with a Remote Desktop Protocol connection (RDP).

63 Monitoring Backup Exec appliance operations Securing the Backup Exec Appliance using the Symantec Data Center Security Agent (Server Advanced version) 63 To monitor Backup Exec appliance security using the SDCS Agent 1 Establish a RDP connection to the Backup Exec appliance. 2 On the Windows Desktop, click Start > All Programs. 3 Click Symantec Data Center Security. The following SDCS Agent options are available: Collect Agent Info Event Viewer Collects logs and other information for the SDCS Agent and the Backup Exec appliance. Displays the recent events that the SDCS Agent reports. Events are the informative, notable, and critical activities that concern your computer and the SDCS Agent. The Event Viewer appears in a separate, re-sizable window that lets you see what Symantec Data Center Security does on your appliance. Policy Monitor Contains the policy override tool and also launches the SDCS Agent Event Viewer.

64 Chapter 6 Using external storage devices with the Backup Exec appliance This chapter includes the following topics: Types of external storage devices to use with the Backup Exec appliance Connecting a tape device to the Backup Exec appliance Types of external storage devices to use with the Backup Exec appliance To provide maximum protection of your data, Symantec recommends that you use a redundant and external backup storage device. If the Backup Exec appliance fails, a redundant copy of your latest data resides on the external device. The following devices are recommended for external storage: SAS tape drives and libraries See Connecting a tape device to the Backup Exec appliance on page 65. USB RDX USB external disk drives NAS Disk Arrays NDMP devices You can find current details in the Backup Exec 15 Hardware Compatibility List at:

65 Using external storage devices with the Backup Exec appliance Connecting a tape device to the Backup Exec appliance 65 Connecting a tape device to the Backup Exec appliance You can attach an optional SAS HBA tape device to the appliance, which you can then use as secondary storage. Tapes that contain copies of your primary backup sets can be moved off-site as part of your data protection strategy. To use an optional tape device, you must attach the tape device to the appliance using the SAS cable that is provided with your appliance. To connect a multi-tape drive library, you must use a SAS Fanout cable, which is sold separately. You do not need to install any cards, drivers, or firmware that are related to the appliance or SAS HBA card. New or replacement appliances include all of these components. Tape device drives are automatically installed. Afterwards, you can use the appliance web UI to configure the tape device. Note: The term tape device refers to a standalone tape device, a robotic tape library, or similar devices. Note: By default, Backup Exec uses User Mode Drivers (UMD) for tape storage devices. Refer to the following Symantec technical note for additional information on tape device drivers and Backup Exec. To connect a tape device to the Backup Exec appliance 1 Ensure that the appliance is powered on and you have completed the initial configuration. 2 Obtain the SAS cable that shipped with the appliance.

66 Using external storage devices with the Backup Exec appliance Connecting a tape device to the Backup Exec appliance 66 3 Insert one end of the SAS cable into the SAS port, which is located on the rear panel. SAS port on SAS HBA PCIe card (rear panel of the appliance) 4 Insert the other end of the SAS cable into the SAS port on the rear of your tape device. An example of a typical tape device is shown; however, your device may look different. SAS port on tape device AC Power socket 5 Connect an AC power cable between the AC power socket on the tape device and an AC power source.

67 Using external storage devices with the Backup Exec appliance Connecting a tape device to the Backup Exec appliance 67 6 Turn on the tape device and allow the device to complete the startup process. Note: The amount of time that is required for the startup process varies. Standalone devices may require one or two minutes. Devices with large libraries may require several minutes. Check the tape device vendor specifications for more information. 7 In the appliance web UI, navigate to Manage > Remote Launch. 8 Under Management Tools, click Backup Exec Administration Console. Note that if the appliance is a member of a domain, you must log in using valid credentials for that domain when prompted. 9 In the Backup Exec Administration Console, restart the Backup Exec services. After the services restart, the tape device should appear in the Storage tab within Backup Exec. Note: If the tape device does not appear, it may be because Windows does not have a tape device driver available for the type of tape device that you have. As a result, you may have to manually install the tape device driver by using the driver software that is provided with your tape device. For more information, see the Symantec Backup Exec 15 Administrator's Guide. See Types of external storage devices to use with the Backup Exec appliance on page 64.

68 Chapter 7 Managing the Backup Exec appliance remotely using PowerShell This chapter includes the following topics: Using the Windows PowerShell command line interface with the Backup Exec appliance Enabling a remote PowerShell connection between the appliance and a remote computer PowerShell commands Using the Windows PowerShell command line interface with the Backup Exec appliance Besides the Backup Exec appliance web UI, you can also use the Windows PowerShell command-line interface (CLI) to access and manage the appliance. By using PowerShell commands (cmdlets), you can also use PowerShell to adjust appliance configuration settings. You should use PowerShell if you have difficulty connecting to the appliance using the web UI. Run PowerShell from a networked Windows computer or from a laptop that is directly connected to the appliance. As in the web UI, you must use the user name and password that you set during the initial configuration to access the appliance.

69 Managing the Backup Exec appliance remotely using PowerShell Enabling a remote PowerShell connection between the appliance and a remote computer 69 Accessing the appliance using PowerShell requires Windows PowerShell version 2.0 or higher on the remote computer, or on a laptop that you use to connect directly to the appliance. See Using the Windows PowerShell command line interface with the Backup Exec appliance on page 68. See PowerShell commands on page 70. Enabling a remote PowerShell connection between the appliance and a remote computer Before you can use PowerShell to manage the appliance or adjust configuration settings, you must first enable a PowerShell remote connection between the appliance and your remote computer. Warning: You can run a maximum of five concurrent remote PowerShell sessions. If you close the five sessions by clicking the X button on each session window, you must wait a minimum of 10 minutes before you can begin another remote session. To avoid this issue, Symantec recommends that you use the following command to close each PowerShell session: Exit-PSSession Note: Symantec recommends that you disconnect the active PowerShell session after each use to prevent any unauthorized access to the PowerShell session. To enable a remote PowerShell connection between the appliance and a remote computer 1 Run the following command on your client computer: set-item wsman:\localhost\client\trustedhosts -value "*" Running this command allows sending of PSData to a remote server from a local client computer. 2 On your Windows computer; go to Start > Programs > Accessories > Windows PowerShell > Windows PowerShell. 3 At the PS> prompt, type: Enable-PSRemoting 4 Press Enter.

70 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 70 5 When you are prompted to continue, press Enter. 6 At the PS> prompt, type: set-item wsman:\localhost\client\trustedhosts -value "*" 7 Press Enter. 8 When you are prompted to continue, press Enter. 9 Type: Enter-PSSession -ComputerName <FQHN of the appliance> -ConfigurationName appliance -Credential administrator 10 Press Enter. 11 To close the PowerShell session, use the following command: Exit-PSSession See PowerShell commands on page 70. PowerShell commands Windows PowerShell commands (cmdlets) are used to run the commands that you can use to manage the appliance. PowerShell commands, in the form of Backup Exec Management Command Line Interface (BEMCLI) cmdlets, are also available for Symantec Backup Exec. For information on how to use the BEMCLI and the commands, view the help file named BEMCLI, located in the default installation location: C:\Program Files\Symantec\Backup Exec See Enabling a remote PowerShell connection between the appliance and a remote computer on page 69.

71 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 71 Table 7-1 cmdlet Get-Help PowerShell cmdlets Function Accesses the PowerShell Help system. You can get more information for each command by using the following command and by changing the cmdlet name. Use the following command line format: Get-Help <cmdlet name><-switch> Example: PS:>Get-Help Create NICTeam -Full Available switches: -examples -detailed -full Add-DNSServers Add-DNSSuffix Add-Route Adds DNS server IP addresses to a specified network interface. Adds DNS suffix parameters on Ethernet ports eth1, eth2, and eth3 of the appliance. Lets you add network interface, destination IP address, destination netmask, and gateway values for each Ethernet port. Ethernet ports eth0, eth1, eth2, and eth3 can be connected to multiple network segments. Add-User Add-WINServers Create NICTeam Exit-PSSession Adds a new user account to the appliance. Adds WINS Server IP addresses on Ethernet ports eth1, eth2, and eth3 of the appliance. Enables you to logically connect the two or more network interface card (NIC) ports of the Backup Exec appliance together to form one NIC port. Connecting multiple NIC ports together into one logical port is called NIC teaming. Closes the current PowerShell session.

72 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 72 Table 7-1 cmdlet PowerShell cmdlets (continued) Function Get-ApplianceLocale Displays the current locale of the appliance, along with the locale code. Note: This setting is independent of the Backup Exec language you selected to use for the Backup Exec Administration Console. For example, you can select English for the Backup Exec Administration Console, and then select France for the appliance location. Get-AppRegionalSettings Displays the regional settings that are set for the appliance. For example, this cmdlet returns the location of the appliance and the format used to present the date and time in the Backup Exec Administration Console. Note: This setting is independent of the Backup Exec language you selected to use for the Backup Exec Administration Console. For example, you can select English for the Backup Exec Administration Console, and then select France for the appliance location. Get-BELanguage Get-Command Displays the language that appears within the Backup Exec Administration Console. Finds details about commands that are available for the appliance in a PowerShell session. Use this command with the following parameter to get the exact commands that are available. Example: Get-Command Module SMBApplianceShell Get-Routes Get-HostName Get-LiveUpdateMode Finds the network interface, destination IP address, destination netmask, and gateway values for Ethernet ports eth0, eth1, eth2, and eth3. These configurations are present in the routing table of the appliance. Use this information to decide whether to add or remove routes. Finds the Hostname of the appliance. Shows the update mode of the Symantec LiveUpdate module.

73 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 73 Table 7-1 cmdlet PowerShell cmdlets (continued) Function Get-NetworkSettings Get-Users Get-WindowsUpdateMode Join-Domain Finds configuration information of Ethernet ports eth0, eth1, eth2, and eth3. Gets (lists) user accounts that are present on the appliance. Shows the update mode of the Windows Update Module. Windows Update Mode can be either Online or Offline. Adds the appliance to a specified domain. Note: The active remote PowerShell session may inadvertently be lost while you use this cmdlet to add the appliance to a domain. If this condition occurs, re-establish the remote PowerShell session. Leave-Domain Removes a specified domain from the appliance. Note: The active remote PowerShell session may inadvertently be lost while you use this cmdlet to remove the appliance from a domain. If this condition occurs, re-establish the remote PowerShell session. Prepare-ForDR Prepares the appliance for disaster recovery scenarios. When you insert your existing (non-faulty) disk drives into a new appliance you must connect to the appliance using PowerShell before you perform the initial configuration. See Recovering the Backup Exec appliance with a replacement appliance after a disaster occurs on page 92. Remove-DNSServers Remove-DNSSuffix Removes DNS server IP addresses from a specified network interface. Removes DNS suffix from the appliance for Ethernet port eth1. Use a comma separated list for multiple entries or the ALL value to remove all the suffixes.

74 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 74 Table 7-1 cmdlet Remove-NICTeam PowerShell cmdlets (continued) Function Removes an existing NIC team on the appliance. You can specify a team name to remove. Parameters: [-TeamName] <NIC team to remove> [-WarningAction <ActionPreference>] [-WarningVariable <String>] [-WhatIf] [-Confirm] [CommonParameters] Example: C:\PS>Remove-NICTeam -TeamName team0 Remove-Route Remove-User Remove-WINServers Reset-FactorySettings Reset-Network Reset-Password Restart-Appliance Lets you remove routes from the network routing table in the appliance. Applies to Ethernet ports eth0, eth1, eth2, and eth3. Removes user accounts from the appliance. Removes WINS Server entries on Ethernet ports eth1, eth2, and eth3 of the appliance. Resets the appliance to factory settings. Resets the network setting information of Ethernet ports eth0, eth1, eth2, and eth3. Resets the password of the administrator s account on the appliance. Restarts the appliance. It may take 10 to 12 minutes for the appliance to restart completely. It is recommended to log in to the appliance web UI only after the message saying that "Appliance services are starting..." disappears. Restart-ApplianceServices Restarts the services that are required for appliance software components.

75 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 75 Table 7-1 cmdlet PowerShell cmdlets (continued) Function Set-ApplianceLocale Parameter: [-LocaleCode] Sets the location of the physical appliance using a country code that is based on the language you select for use with the Backup Exec Administration Console. For example, to set the appliance locale for Brazil and with Brazilian Portuguese as the selected language for the Backup Exec Administration Console, use the following syntax: Set-ApplianceLocale - pt-br Use the following link to see a list of country codes. Use the list to find a country code that matches the language that you use for the Backup Exec Administration Console. Note: PowerShell prompts you for a locale code if you do not specify a locale code to use with the cmdlet. Note: This setting is independent of the Backup Exec language you selected to use for the Backup Exec Administration Console. For example, you can select English for the Backup Exec Administration Console, and then select France for the appliance location.

76 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 76 Table 7-1 cmdlet PowerShell cmdlets (continued) Function Set-AppRegionalSettings Parameters: [-LocaleCode] [- ShortDateFormat] [- ShortTimeFormat] Lets you set the locale code for the physical location of the appliance. This cmdlet also lets you set the date format and the time format that Backup Exec uses to display the date and time within its administration console. PowerShell prompts you for a parameter if you do not specify at least one parameter to use with the cmdlet. Note: This setting is independent of the Backup Exec language you selected to use for the Backup Exec Administration Console. For example, you can select English for the Backup Exec Administration Console, and then select France for the appliance location.

77 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 77 Table 7-1 cmdlet Set-BELanguage PowerShell cmdlets (continued) Function Lets you change appliance settings such as: The location of the physical appliance. The formats that you use whenever Backup Exec displays the date and time. The formats are based on the language you select for use with the Backup Exec Administration Console. The language that you want to use with the Backup Exec Administration Console. The command does not change the language of the appliance web UI. Language choices include: English French German Italian Spanish Brazilian Portuguese Simplified Chinese Traditional Chinese Korean Japanese Russian Set-DHCP Set-LiveUpdateOfflineMode Set-LiveUpdateOnlineMode Set-StaticIP Set-WindowsUpdateOfflineMode Sets the DHCP protocol on the appliance. Sets the Symantec LiveUpdate Server update mode to Offline. Sets the Symantec LiveUpdate Server update mode to Online. Sets a static IP address for a specified network interface on the appliance. The available interfaces are Ethernet ports eth1, eth2, and eth3. Sets Windows Update mode to Offline. The Windows Services Update Server (WSUS) format is as follows

78 Managing the Backup Exec appliance remotely using PowerShell PowerShell commands 78 Table 7-1 cmdlet PowerShell cmdlets (continued) Function Set-WindowsUpdateOnlineMode Shutdown-Appliance Sets WindowsUpdate mode to Online. Lets you decide whether or not you want to shut down the appliance. The default response is No. You can choose Yes to shut down the appliance. If you shut down the appliance, you must physically access the appliance to turn it on again.

79 Chapter 8 Removing and replacing Backup Exec appliance replaceable components This chapter includes the following topics: Customer-replaceable components in the Backup Exec appliance How Symantec detects Backup Exec appliance issues Replacing a single Backup Exec appliance disk drive Removing a Backup Exec appliance disk drive carriage Replacing a Backup Exec appliance disk drive module Removing a Backup Exec appliance power supply module Replacing a Backup Exec appliance power supply module Replacing Backup Exec appliance hardware Customer-replaceable components in the Backup Exec appliance Customer-replaceable components include the following: Four externally accessible SAS hard disk drives Two redundant power supplies

80 Removing and replacing Backup Exec appliance replaceable components How Symantec detects Backup Exec appliance issues 80 Warning: Electrostatic discharge can damage the electrical components. Touch a grounded metal object before removing new disk drives from their anti-static bags, and wear a wrist strap to prevent static discharge. Note: Replacing internal appliance components other than the components listed above voids your Symantec Backup Exec appliance warranty. See How Symantec detects Backup Exec appliance issues on page 80. How Symantec detects Backup Exec appliance issues The Symantec AutoSupport organization uses the Symantec Call Home feature to minimize Backup Exec appliance downtime by simplifying both your technical support experience and the repair process whenever appliance repairs become necessary. The Symantec Call Home feature is enabled by default on the Backup Exec appliance. Call Home uses Internet connectivity to establish a communications link between the appliance and the Symantec Technical Support Call Home Server. To ensure proactive support for you, periodic heartbeats are sent to Symantec's Call Home Server, where they are analyzed. When a hardware issue is detected, Call Home sends an alert to Symantec AutoSupport. After receiving the alert, Symantec AutoSupport automatically opens an appliance support case that is based on the serial number of the appliance and the error that is detected. After the appliance support case is reviewed, AutoSupport opens a repair request. If support personnel determine that the issue is caused by a faulty customer-replaceable component, they contact you by using the contact information you provide on the AutoSupport page of the web UI to arrange shipment of the replacement component. If Symantec support personnel determine that the appliance requires replacement, they also arrange shipment for a replacement appliance to be delivered to you. Appliance data is obtained and sent to the Call Home server at predetermined intervals. Predetermined time intervals include the following: Hardware status monitoring - occurs every 15 minutes. Normal hardware operations data functioning within specified threshold ranges - uploaded every 30 minutes. Abnormal hardware operation data - uploaded every 15 minutes. When you enable the Call Home feature, you can enable or disable the ability to upload the contact information. For example, you can enter the following information:

81 Removing and replacing Backup Exec appliance replaceable components How Symantec detects Backup Exec appliance issues 81 The address of the location of the appliance. The name, phone number, and address of the person who is the first point of contact and is responsible for the appliance. About the Symantec Operations Readiness Tools (SORT) The Symantec Operations Readiness Tools (SORT) are a set of Symantec tools that support the Backup Exec appliance. The Backup Exec appliance checks for errors every 15 minutes. Hardware errors that are detected are immediately logged. With Call Home enabled, the appliance hardware logs are uploaded to the Sort Server, which acts as a storage repository for the logs. The AutoSupport organization then retrieves the logs from the SORT Server so it can troubleshoot the appliance hardware issue. With Call Home enabled, the following occurs: Appliance hardware logs are uploaded to the SORT servers whenever a hardware event is detected. By default, appliance hardware logs are uploaded to SORT servers once every 30 days, even if no hardware errors are detected during the 30-day window. Adjusting a firewall for use with the Call Home feature If you implement a firewall in your environment, you must open firewall port 443 (outbound) for Call Home and AutoSupport to work as intended. Opening port 443 enables the appliance to send periodic hardware status updates and AutoSupport customer registration data to the Call Home server. To communicate with the Call Home server, the appliance uses port 443 to access the following Symantec web sites: Alternatively, the Backup Exec appliance supports the configuration of a proxy server that you can use to establish a connection to the Symantec Call Home server. The appliance supports the following popular proxy servers: Squid Apache Microsoft Forefront Threat Management Gateway (TMG) See Configuring a proxy server for the Backup Exec appliance on page 53. See Removing a Backup Exec appliance disk drive carriage on page 82.

82 Removing and replacing Backup Exec appliance replaceable components Replacing a single Backup Exec appliance disk drive 82 See Replacing a Backup Exec appliance disk drive module on page 83. See Removing a Backup Exec appliance power supply module on page 84. See Replacing a Backup Exec appliance power supply module on page 85. See Replacing a single Backup Exec appliance disk drive on page 82. Replacing a single Backup Exec appliance disk drive If only one of the four disk drives is damaged or faulty, and you have enabled AutoSupport, Symantec AutoSupport contacts you to arrange shipment of a new drive to the physical location of your appliance. If you have not enabled AutoSupport, contact Symantec Technical Support to obtain a replacement for that drive. After you receive the new drive, use the following steps to replace the faulty disk drive. To replace a single Backup Exec appliance disk drive 1 Turn off the appliance, if you have not already done so. 2 Insert the new disk drive into the appliance. 3 Turn on power to the appliance. The appliance RAID controller automatically rebuilds the virtual disk. No further disaster recovery action is required. Removing a Backup Exec appliance disk drive carriage The four disk drive carriages in the front of the appliance are labeled 0, 1, 2, 3 from left to right. If you replace more than one disk carriage at a time, you should label replacement disk carriages so that you know which disk will be placed into each disk slot. You should also label the disk carriages that you remove from the appliance so that you know which slot they occupied. You can hot-swap only one disk drive. If you have two drives that are not working properly, you must shut down the appliance first, and then remove any drives. See Customer-replaceable components in the Backup Exec appliance on page 79. To remove a Backup Exec appliance disk drive carriage 1 Press the release button that is located on the left side of the disk drive slot. 2 Swing the handle open to disengage the hard disk drive.

83 Removing and replacing Backup Exec appliance replaceable components Replacing a Backup Exec appliance disk drive module 83 3 Slightly disengage the disk drive carriage from the drive slot and wait one or two minutes for the disk platters to stop spinning. 4 When the disk drive platters have stopped spinning, pull the disk drive completely out of the disk drive slot. Figure 8-1 Removing a disk drive carriage See Replacing a Backup Exec appliance power supply module on page 85. Replacing a Backup Exec appliance disk drive module Note: Make sure that the replacement hard drive has the same physical appearance and the same connectors as the hard drive that was previously removed. To replace a disk drive module 1 With the drive tray lock fully open, orient the replacement disk drive module with the label on top and the visible components on the bottom. 2 Push the disk drive module into the drive bay until it stops. 3 Press the lock until it snaps shut to close the drive in the bay. The drive rebuild may start automatically, depending on your RAID configuration. 4 Obtain return instructions from Technical Support to replace a defective drive. See Removing a Backup Exec appliance disk drive carriage on page 82.

84 Removing and replacing Backup Exec appliance replaceable components Removing a Backup Exec appliance power supply module 84 Removing a Backup Exec appliance power supply module The appliance contains two hot-swappable power supply modules. Fans inside the modules maintain cooling through the chassis. You must make sure that both modules are connected to separate AC power sources (such as a wall outlet) and are operating properly. If one power supply fails, the other redundant power supply takes over the full power load and the system runs without interruption. If both power supply modules fail, or if one fails while you are replacing the other power supply module, you must turn off the system immediately to prevent overheating. Before removing any replaceable component, be aware that electrostatic discharge (ESD) can damage electronic components. In addition, it is important to handle disk drives correctly to prevent damage. Use the following guidelines to prevent component damage: Allow the power supply to cool before servicing. Personal injury can occur from handling a hot power supply. Wear an electrostatic discharge (ESD) wrist strap to prevent static discharge before touching the blade, or any of the electrical components on the power supply. If possible, work in an ESD-safe environment. Touch a grounded metal object before you remove the new power supply from the antistatic bag. To remove a power supply module on a Backup Exec appliance 1 Press and hold the green safety lock down. 2 Pull the power supply module out of the appliance chassis. Figure 8-2 Removing a power supply module