ETERNUS CS800 S6 (V3.2)

Transcription

1 English ETERNUS CS800 S6 (V3.2) OST Guide Edition December 2015

2 Comments Suggestions Corrections The User Documentation Department would like to know your opinion on this manual. Your feedback helps us to optimize our documentation to suit your individual needs. Feel free to send us your comments by to: Certified documentation according to DIN EN ISO 9001:2008 To ensure a consistently high quality standard and user-friendliness, this documentation was created to meet the regulations of a quality management system which complies with the requirements of the standard DIN EN ISO 9001:2008. cognitas. Gesellschaft für Technik-Dokumentation mbh Copyright and Trademarks Copyright Fujitsu Technology Solutions GmbH 2015 All rights reserved. Delivery subject to availability; right of technical modifications reserved. This document includes trademarks and copyrights of Quantum Corporation. All rights reserved. Microsoft, Microsoft Windows, and Windows Server are U.S. registered trademarks of Microsoft Corporation. Linux is a registered trademark of Linus Torvalds. Fujitsu and the Fujitsu Logo are trademarks of Fujitsu Limited. All hardware and software names used are trademarks of their respective manufacturers. This manual is printed on paper treated with chlorine-free bleach.

3 Contents Preface NetBackup and Backup Exec OST Guide Introduction Installing the OST Plug-in Configuring the ETERNUS CS800 S Configuring OST Authentication Configuring Storage Servers Configuring Logical Storage Units Target IP Mapping Configuring Symantec NetBackup (Media Server) Registering the Storage Server with NetBackup and Discovering Logical Storage Units. 28 Using the Storage Server Configuration Wizard Configuring Disk Pools and Storage Units in NetBackup Configuring Symantec Backup Exec (Media Server) Backup Exec Configuration Configuring Backup Exec and Logical Storage Units Sharing Deduplication Devices Creating a Backup Job with Direct Access Configuring a Remote Agent with Direct Access Initiating an OST Backup Performing Synthetic Full Backups (NetBackup Only) Performing OST Optimized Duplication Initiating an OST Optimized Duplication Replication Channel for OST (NetBackup Only) Setting Up Automatic Image Replication Configuring OST Path to Tape (NetBackup only) Verifying Prerequisites Configuring Physical Tape Libraries Configuring NetBackup OST for Path to Tape Running a Duplication to Tape Configuring ETERNUS CS800 S6 Accent U41853-J-Z

4 Contents Enabling or Disabling Accent on the ETERNUS CS800 S x Software or Earlier Software or Later Enabling or Disabling Accent on the Media Server Maximum Number of Jobs When Using ETERNUS CS800 S6 Accent Enabling Verbose Logging OST Plug-in Log Transmission Control Protocol (TCP) OST Plug-in Configurable Options U41853-J-Z

5 Preface ETERNUS CS800 S6 OST Guide provides information about configurations for usage of OST Optimized Replication with NetBackup or Backup Exec. Additionally OST Path to Tape configurations related to NetBackup are described. Audience This guide is written for ETERNUS CS800 S6 operators and system administrators. Document Organization The following formats indicate important information: I Note emphasizes important information related to the main topic. V Caution indicates potential hazards to equipment or data. W Warning indicates potential hazards to personal safety. Related Documents The following documents are also available for ETERNUS CS800 S6 systems: Document No. Document Title Document Description A26361-F1452-Z N19 Safety Notes and Regulations Lists Fujitsu s general safety and regulatory information. U41840-J-Z ETERNUS CS800 S6 User s Guide Provides information about the ETERNUS CS800 S6 system, installation and operation. U41853-J-Z

6 Preface Document No. Document Title Document Description U41841-J-Z U41848-J-Z ETERNUS CS800 S6 Command Line Interface (CLI) Guide ETERNUS CS800 S6 Advanced Reporting ETERNUS CS800 S6 Online Help Provides information about the command line interface. Provides information about performance data logging and visual reporting features. Provides task-oriented information about a running system. Support and Help Where to Find Information Resource Address Product information and documentation ETERNUS CS800 manuals Release notes Downloads and Software patches Select Storage ETERNUS CS. Technical Support The Support section of the Fujitsu web site provides links with contact information and information about available support programs: If you have an active support agreement, you may contact your service provider. If you do not have an active support agreement, contact your Fujitsu sales representative to purchase a service contract or updates. 6 U41853-J-Z

7 Preface Customer Service Resource Address Education and training Fujitsu Mies-van-der-Rohe-Str. 8, Munich, Germany Support phone / fax / Your Comments Your suggestions will help us continue to improve the accuracy, organization, and overall quality of the user publications. Please send your opinion of this document to: manuals@ts.fujtsu.com If you have issues, comments, or questions about specific information or procedures, please include the title and, if available, the part number, the page numbers, and any other details that will help us locate the subject you are addressing. Fujitsu Home Page Visit the home page of Fujitsu at: Fujitsu Compliance Link See the compliance link of Fujitsu at: To get information about the storage component, select "Storage Products > ETERNUS JX > ETERNUS JX40 S2". "Storage Products > ETERNUS DX > ETERNUS DX100 S3". To get information of the server component, select: "Industry Standard Servers > Rack server > PRIMERGY RX2540 M1". Worldwide End-User Product Warranty For information the Fujitsu Worldwide end-user standard limited product warranty look at: U41853-J-Z

8 Preface 8 U41853-J-Z

9 NetBackup and Backup Exec OST Guide Introduction I This guide is for ETERNUS CS800 S6 3.2 Software. Symantec OST (Open Storage) allows NetBackup and Backup Exec to seamlessly integrate with an ETERNUS CS800 S6 disk backup system. Once installed and configured, NetBackup or Backup Exec can manage the backups through the ETERNUS CS800 S6 and take advantage of the system s capabilities such as data deduplication and replication. Installing and configuring the ETERNUS CS800 S6 and OST for operation consists of the following major steps. See the following sections for detailed instructions for completing each step: 1. Installing the OST Plug-in 2. Configuring the ETERNUS CS800 S6 3. Configuring Symantec NetBackup (Media Server) 4. Configuring Symantec Backup Exec (Media Server) 5. Initiating an OST Backup 6. Performing OST Optimized Duplication 7. Configuring OST Path to Tape (NetBackup only) 8. Configuring ETERNUS CS800 S6 Accent V CAUTION! You must upgrade to Backup Exec 2010 R3 or later before configuring Backup Exec. R3 is a maintenance release that provides OST fixes that are required by ETERNUS CS800 S6 software version 2.x. Installing the OST Plug-in Before you can configure the ETERNUS CS800 S6 with OST, download the OST Plug-in and install it on a media server. The following versions of Symantec NetBackup are supported: For Replication (Optimized Duplication) - NetBackup 7.1.x or later. U41853-J-Z

10 Installing the OST Plug-in NetBackup and Backup Exec OST Guide For OST Path To Tape (Direct To Tape) - NetBackup 7.1.x or later. For OST AIR (Automatic Image Replication) - NetBackup 7.1.x or later For OST Optimized Synthetics - NetBackup 7.1.x or later. The following version of Symantec Backup Exec are supported: Backup Exec 2012 The OST Client Plug-in is provided as follows: On a data medium shipped together with the ETERNUS CS800 S6 system. A README file is included which contains detailed instructions about the installation. At the Fujitsu support pages under: To download the OST Plug-in from the support pages: 1. On the system remote management console, navigate to the Configuration > OST > OST Client Plug-In page. 2. Click Client Plug-In Download. 3. Select Drivers & Downloads. In the next window fill in the following values in the section Product selection (manually search). 1. Storage 2. ETERNUS CS/CentricStor 3. ETERNUS CS800 <version> You will get a list of supported operating systems. Select the desired one. Under Software you will find the available OST Plug-ins. Make sure to download the correct OST Plug-in for the operating system installed on the NetBackup media server. In the OST Plug-in zip-file you will find a README file, which contains the installation procedure for the OST Plug-in. This procedure is different for each media server operating system platform. Follow the instructions to install the OST Plug-in on the media server. When you are finished, continue to the next section. I When multiple hosts are using a single system, you can distribute the load by dividing the hosts into groups. For more information, see the section Performance Tuning in the README file. I The OST Plug-in for Windows is installed in the NetBackup or Backup Exec installation directory. 10 U41853-J-Z

11 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 I RAWS is an agent used to backup Windows clients (which Backup Exec calls remote agents). In Backup Exec, a remote agent (client) has the ability to perform a client side deduplication which is called Direct Access. This requires the OST plug-in to be installed on the remote agent and the plug-in.dll to exist in the \Backup Exec\RAWS directory. Configuring the ETERNUS CS800 S6 You must configure storage servers and logical storage units on the ETERNUS CS800 S6 remote management console before you configure NetBackup or Backup Exec. See the following sections to configure the ETERNUS CS800 S6 for OST. Configuring the ETERNUS CS800 S6 consists of the following major steps. See the following subsections for detailed instructions for completing each step: Configuring OST Authentication Configuring Storage Servers Configuring Logical Storage Units Target IP Mapping I You can also use the OST Wizard to configure the ETERNUS CS800 S6 for OST. Configuring OST Authentication To authenticate the OST storage servers on a media server, you must create OST user credentials. V If you have upgraded to 2.x Software from a version released prior to 2.0, you must add new OST credentials to the ETERNUS CS800 to continue using OST. Shut down the NetBackup or Backup Exec services. Then perform the procedure below, making sure to use the same username and password that were used to register the existing OST devices. Finally, start the NetBackup or Backup Exec services. To create OST user credentials: 1. Log on to the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > OST > Manage Users page (see Figure 1). U41853-J-Z

12 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide Figure 1: Manage Users Page 3. Click Add. 4. Specify the Username and New Password that will be used to authenticate the storage servers on the media server. I For username, alphanumeric characters are allowed, as well as underscores ( _ ) and hyphens ( - ). For password, alphanumeric characters are allowed, as well as the following special: ` # $ % ^ & * ( ) - _ = + [ { ] } \ ; : ', <. > /? 5. Click Apply. V In NetBackup or Backup Exec, add credentials for the storage server, making sure to use the same OST username and password you entered on the ETERNUS CS800 S6. For more information, see "Registering the Storage Server with NetBackup and Discovering Logical Storage Units" on page 28 or "Configuring Backup Exec and Logical Storage Units" on page 51). 12 U41853-J-Z

13 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 Configuring Storage Servers To configure storage servers: 1. Log on to the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > OST > Storage Servers page (see Figure 2). Figure 2: Storage Servers Page Use the Storage Server page to perform the following tasks. See the following subsections for detailed instructions for completing each task: "Adding a Storage Server" "Editing a Storage Server" "Deleting a Storage Server" I It is recommended to create a different storage server for each NetBackup or Backup Exec domain (master server plus associated media servers). This segregates data so a NetBackup or Backup Exec administrator cannot accidentally modify or remove backup images belonging to another domain. U41853-J-Z

14 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide Adding a Storage Server To add a storage server: I You can create up to 100 storage servers. 1. On the Storage Servers page, click Add. The Add Storage Server page displays (see Figure 3). Figure 3: Add Storage Server Page 14 U41853-J-Z

15 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 2. Under Add Storage Server, enter information about the storage server: Name - Enter the name of the storage server. V CAUTION! Do not use an underscore ( _ ) in the name of the storage server. I Storage server names must be unique and not used again on other ETERNUS CS800 S6 systems. Also, storage server names are case sensitive on all platforms including Windows. Description - (Optional) Enter a brief description of the storage server. Max Connections - Enter the maximum number of connections allowed to the storage server (3 to 65536). The maximum connections indicate the number of NetBackup or Backup Exec jobs that can connect to the storage server. I It is recommended to set this value to 300 so that media servers never run out of storage server connections. Enable Concurrent Optimized Duplication - Select the check box to enable optimized duplication during OST ingest. Concurrent Optimized Duplication is disabled by default. If enabled, as data is written to the storage server, it is simultaneously replicated to the target ETERNUS CS800 S6. When optimized duplication or Automatic Image Replication subsequently occurs, the operation is more efficient because a portion of the required data has already been replicated to the target storage server. I To use Concurrent Optimized Duplication, you must configure the source ETERNUS CS800 S6 and target ETERNUS CS800 S6 for replication (see "Replication Channel for OST (NetBackup Only)" on page 63). I When Concurrent Optimized Duplication is enabled, all data on the storage server is duplicated, not just the specified images. 3. Select the check box for each optimized duplication target you want to duplicate the storage server to. When the storage server is duplicated, its data will be sent to all selected targets. 4. Under Logical Storage Unit, enter information about the LSU to add to the new storage server: Available Capacity - (Recommended for best performance) Select this option to add an LSU that uses the available capacity on the system. You cannot add an available capacity LSU to a storage server that already contains an LSU. Also, if you add an available capacity LSU to a storage server, you cannot add additional LSUs to that same storage server. U41853-J-Z

16 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide I After you add an LSU that uses the Available Capacity option, you cannot change the LSU to use the Specific Capacity option. Instead, you must delete the LSU, then add a new LSU and choose the Specific Capacity option (see "Deleting an LSU" on page 23). Specific Capacity - Select this option to specify the physical capacity of the LSU, and then enter the following information. LSU Name - Enter the name of the LSU. Physical Capacity - Enter the physical capacity of the LSU (1 to GB). I It is recommended to set LSUs to maximum size ( GB, because spanning them on a backup is not possible). 5. (Optional) In the Description box, enter a brief description of the LSU. 6. (Optional) Select the Enable Automatic Image Replication check box to automatically replicate (duplicate) data on the LSU to a remote LSU on another ETERNUS CS800 S6. Automatic Image Replication (AIR) is disabled by default. If enabled, data on an LSU is automatically replicated to a remote LSU that resides on an ETERNUS CS800 S6 in a different NetBackup domain. The timing of the duplication, as well as the backup images that are duplicated, are determined by the storage lifecycle policies (SLPs) configured in NetBackup. OST AIR requires NetBackup 7.1.x or higher. For more information, see "Setting Up Automatic Image Replication" on page 65. I To use Automatic Image Replication, you must configure the source ETERNUS CS800 S6 and target ETERNUS CS800 S6 for replication (see "Replication Channel for OST (NetBackup Only)" on page 63). I You must configure at least one remote user before you can enable Automatic Image Replication (see "Create a Remote User for OST AIR" on page 67). 7. If Automatic Image Replication is enabled, select the replication target you want to replicate images to. (You can select only a single target.) When images are replicated, data will be sent to the selected target. 8. If Automatic Image Replication is enabled, specify the following information: Remote Storage Server Name - The name of the remote storage server (on the target ETERNUS CS800 S6) to replicate data to. The source ETERNUS CS800 S6 and target ETERNUS CS800 S6 must reside in different NetBackup domains. I To configure the target ETERNUS CS800 S6, see "Replication Channel for OST (NetBackup Only)" on page U41853-J-Z

17 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 Remote LSU Name - The name of the LSU in the remote storage server that will receive the replicated data. Remote User - The OST user credentials to use for authentication on the remote (target) ETERNUS CS800 S6. The selected remote user must match a local user on the Configuration > OST > Manage Users page on the target ETERNUS CS800 S6 (see "Configuring OST Authentication" on page 11). 9. Click Apply. Editing a Storage Server To edit a storage server: 1. On the Storage Servers page, select the storage server and click Edit. 2. Enter information about the storage server: I If you are editing a storage server, the Name option cannot be changed. Description - (Optional) Enter a brief description of the storage server. Max Connections - Enter the maximum number of connections allowed to the storage server (3 to 65536). The maximum connections indicate the number of NetBackup or Backup Exec jobs that can connect to the storage server. The maximum number of connections cannot be changed if the storage server has more than zero currently active connections. The number of active connections is displayed on the OST page (see Figure 2). I It is recommended that this value is set to 300 so that media servers never run out of storage server connections. Enable Concurrent Optimized Duplication - Select the check box to enable optimized duplication during OST ingest. Concurrent Optimized Duplication is disabled by default. If enabled, as data is written to the storage server, it is simultaneously replicated to the target ETERNUS CS800 S6. When optimized duplication or Automatic Image Replication subsequently occurs, the operation is more efficient because a portion of the required data has already been replicated to the target storage server. I To configure the target ETERNUS CS800 S6, see "Replication Channel for OST (NetBackup Only)" on page 63. I When Concurrent Optimized Duplication is enabled, all data on the storage server is duplicated, not just the specified images. U41853-J-Z

18 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide 3. Select the check box for each optimized duplication target you want to duplicate the storage server to. When the storage server is duplicated, its data will be sent to all selected targets. 4. Click Apply. Deleting a Storage Server To delete a storage server: 1. On the Storage Servers page, select the storage server and click Delete. You cannot delete a storage server if it has more than zero currently active connections. The number of active connections is displayed on the OST page (see Figure 2). Also, you cannot delete a storage server if it contains LSUs. Before deleting the storage server, you must first delete any LSUs it contains (see "Deleting an LSU" on page 23). I You can select multiple storage servers to delete at once. 2. Click Yes. I (NetBackup only) In order to remove the storage server from the ETERNUS CS800 S6 remote management console, you must remove the storage unit and disk pool from NetBackup. After successfully deleting the storage units, disk pools and the corresponding storage server the connection between NetBackup and the storage server remains open for a grace period of about ten minutes. After the grace period, the active connection count drops to zero. Configuring Logical Storage Units To configure logical storage units: 1. Log on to the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > OST > LSU page (see Figure 4). 18 U41853-J-Z

19 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 Figure 4: LSU Page Use the LSU page to perform the following tasks. See the following subsections for detailed instructions for completing each task: "Adding an LSU" "Editing an LSU" "Deleting an LSU" Adding an LSU To add an LSU to a storage server: 1. On the LSU page, click Add. The Add Logical Storage Unit page displays (see Figure 5). U41853-J-Z

20 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide Figure 5: Add Logical Storage Unit Page 2. Enter information about the LSU. Storage Server - Select the storage server that will contain the new LSU. Available Capacity - (Recommended for best performance) Select this option to add an LSU that uses the available capacity on the system. You cannot add an available capacity LSU to a storage server that already contains an LSU. Also, if you add an available capacity LSU to a storage server, you cannot add additional LSUs to that same storage server. I After you add an LSU that uses the Available Capacity option, you cannot change the LSU to use the Specific Capacity option. Instead, you must delete the LSU, then add a new LSU and choose the Specific Capacity option (see "Deleting an LSU" on page 23). Specific Capacity - Select this option to specify the physical capacity of the LSU, and then enter the following information. LSU Name - Enter the name of the LSU. Physical Capacity - Enter the physical capacity of the LSU (1 to GB). I It is recommended to set LSUs to maximum size ( GB): 20 U41853-J-Z

21 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 3. (Optional) In the Description box, enter a brief description of the LSU. 4. (Optional) Select the Enable Automatic Image Replication check box to automatically replicate (duplicate) data on the LSU to a remote LSU on another ETERNUS CS800 S6. Automatic Image Replication (AIR) is disabled by default. If enabled, data on an LSU is automatically replicated to a remote LSU that resides on an ETERNUS CS800 S6 in a different NetBackup domain. The timing of the duplication, as well as the backup images that are duplicated, are determined by the storage lifecycle policies (SLPs) configured in NetBackup. OST AIR requires NetBackup 7.1.x or higher. For more information, see "Setting Up Automatic Image Replication" on page 65. I You must configure at least one remote user before you can enable Automatic Image Replication (see "Create a Remote User for OST AIR" on page 67). 5. If Automatic Image Replication is enabled, select the replication target you want to replicate images to. (You can select only a single target.) When images are replicated, data will be sent to the selected target. 6. If Automatic Image Replication is enabled, specify the following information: Remote Storage Server Name - The name of the remote storage server (on the target ETERNUS CS800 S6) to replicate data to. The source ETERNUS CS800 S6 and target ETERNUS CS800 S6 must reside in different NetBackup domains. I To configure the target ETERNUS CS800 S6, see "Replication Channel for OST (NetBackup Only)" on page 63. Remote LSU Name - The name of the LSU in the remote storage server that will receive the replicated data. Remote User - The OST user credentials to use for authentication on the remote (target) ETERNUS CS800 S6. The selected remote user must match a local user on the Configuration > OST > Manage Users page on the target ETERNUS CS800 S6 (see "Configuring OST Authentication" on page 11). 7. Click Apply. U41853-J-Z

22 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide Editing an LSU To edit an LSU: 1. On the LSU page, select the LSU and click Edit. 2. Enter information about the LSU: I If you are editing an LSU, the Name option cannot be changed. Physical Capacity - (Specific capacity LSUs only) Enter the physical capacity of the LSU (1 to GB). The physical capacity cannot be changed if the LSU has more than zero currently active connections. The number of active connections is displayed on the LSU page (see Figure 4). Description - (Optional) Enter a brief description of the LSU. 3. (Optional) Select the Enable Automatic Image Replication check box to automatically replicate (duplicate) data on the LSU to a remote LSU on another ETERNUS CS800 S6. Automatic Image Replication (AIR) is disabled by default. If enabled, data on an LSU is automatically replicated to a remote LSU that resides on an ETERNUS CS800 S6 in a different NetBackup domain. The timing of the duplication, as well as the backup images that are duplicated, are determined by the storage lifecycle policies (SLPs) configured in NetBackup. OST AIR requires NetBackup 7.1.x or higher. For more information, see "Setting Up Automatic Image Replication" on page 65. I You must configure at least one remote user before you can enable Automatic Image Replication (see "Create a Remote User for OST AIR" on page 67). 4. If Automatic Image Replication is enabled, select the replication target you want to replicate images to. (You can select only a single target.) When images are replicated, data will be sent to the selected target 5. If Automatic Image Replication is enabled, specify the following information: Remote Storage Server Name - The name of the remote storage server (on the target ETERNUS CS800 S6) to replicate data to. The source ETERNUS CS800 S6 and target ETERNUS CS800 S6 must reside in different NetBackup domains. I To configure the target ETERNUS CS800 S6, see "Replication Channel for OST (NetBackup Only)" on page 63. Remote LSU Name - The name of the LSU in the remote storage server that will receive the replicated data. 22 U41853-J-Z

23 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 Remote User - The OST user credentials to use for authentication on the remote (target) ETERNUS CS800 S6. The selected remote user must match a local user on the Configuration > OST > Manage Users page on the target ETERNUS CS800 S6 (see "Configuring OST Authentication" on page 11). 6. Click Apply. Deleting an LSU I If you deleted the LSU from Symantec NetBackup or Symantec Backup Exec, you must wait several minutes before deleting the LSU from the ETERNUS CS800 S6. To delete an LSU: 1. On the LSU page, select the LSU. You cannot delete an LSU if it has more than zero currently active connections. The number of active connections is displayed on the LSU page (see Figure 4). I You can select multiple LSUs to delete at once. 2. (Optional) Select the Force Delete LSU check box to delete LSUs that are not empty. Normally, you cannot delete an LSU if it contains existing backup images. If for some reason you cannot remove files from the LSU, selecting the Force Delete LSU check box allows you to delete the LSU even though it is not empty. 3. Click Delete. U41853-J-Z

24 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide Target IP Mapping The Target IP Mapping page allows you to associate a data IP address with a replication IP address on a target ETERNUS CS800 S6. This can be necessary if the target ETERNUS CS800 S6 is configured with different network interfaces (and therefore different IP addresses) for data and replication traffic. Generally, OST traffic is routed to the data network segment. However, the OST Automatic Image Replication (AIR) and Concurrent Optimized Duplication features use the replication network segment to transmit data to the target system. (Optimized duplication can optionally use the replication channel.) When a data IP address is mapped to a replication IP address, OST traffic that is sent to one of the IP addresses is routed to the other IP address as necessary. I You must add target IP mapping information if you are performing optimized duplication on a segmented network and replication is not configured between the source ETERNUS CS800 S6 and target ETERNUS CS800 S6. I Fujitsu Technology Solutions does not recommend mapping multiple data IP addresses to a single replication IP address. If you have mapped multiple data IP addresses and the routing is not working, try removing the additional data IP addresses, and map only a single data IP address. To access the Target IP Mapping page, on the OST page, click the Target IP Mapping tab (see Figure 6). 24 U41853-J-Z

25 NetBackup and Backup Exec OST Guide Configuring the ETERNUS CS800 S6 Figure 6: Target IP Mapping Page Use the Target IP Mapping page to perform the following tasks: View information about mapped data and replication IP addresses (see "Target IP Mapping List" on page 26). Map a target data IP address to a replication IP address (see "Mapping a Target IP Address" on page 26). Edit the mapping for a target data IP address (see "Editing a Mapped IP Address" on page 26). Delete the mapping for a target data IP address (see "Deleting a Mapped IP Address" on page 27). U41853-J-Z

26 Configuring the ETERNUS CS800 S6 NetBackup and Backup Exec OST Guide Target IP Mapping List The Target IP Mapping list displays the following information for all mapped IP addresses: Target Data IP - The mapped target data IP address. Target Replication IP - The replication IP address to which the data IP address is mapped. Items in the list are grouped by target replication IP address. Mapping a Target IP Address Add mapping for a target data IP address to route all network traffic sent to the address to the specified replication IP address instead. To map a target IP address: 1. Click Add. The Add Target Data IP Mapping window displays (see Figure 7). Figure 7: Add Target Data IP Mapping 2. Enter information about the mapping: Target Data IP - The target data IP address to map. Target Replication IP - The replication IP address to map the data IP address to. 3. Click Apply. Editing a Mapped IP Address Edit a mapped IP address to route traffic sent to the target data IP address to a different replication IP address. To edit a mapped IP address: 1. Select the mapped IP address and click Edit. The Edit Target Data IP Mapping window displays (see Figure 8). 26 U41853-J-Z

27 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 8: Edit Target Data IP Mapping 2. In the Target Replication IP box, enter the replication IP address to map the data IP address to. I If you are editing a mapped IP address, you cannot change the target data IP address. 3. Click Apply. Deleting a Mapped IP Address Delete a mapped IP address if traffic sent to the target data IP address no longer needs to be routed to a replication IP address To delete a mapped IP address, select the IP address and click Delete. I You can select multiple mapped IP addresses to delete at once. Configuring Symantec NetBackup (Media Server) See the NetBackup System Administrator s Guide for information about NetBackup installation and basic configuration. Also, see the NetBackup Shared Storage Guide before proceeding further. V CAUTION! You MUST have all NetBackup 7.1.x updates applied (including the Java client and any for OST path-to-tape) before continuing with configuration. To configure Symantec NetBackup for OST, see the following sections: "Registering the Storage Server with NetBackup and Discovering Logical Storage Units" "Configuring Disk Pools and Storage Units in NetBackup" U41853-J-Z

28 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Registering the Storage Server with NetBackup and Discovering Logical Storage Units After the OST Plug-in is installed and configured on the NetBackup media server, you must register the storage servers with NetBackup by defining them on the media server. You must complete this process on every media server that will access the storage servers on the ETERNUS CS800 S6. You can configure multiple media servers to use the same storage servers as long as the OST Plug-in is installed on each media server. To register a storage server, first define it using the nbdevconfig command, and then provide credentials using the tpconfig command. I You can perform this process using the Storage Server Configuration Wizard instead of the CLI commands (see "Using the Storage Server Configuration Wizard" on page 32). Perform the procedure for the operating system on the media server: "Registering the Storage Server on Windows Platforms" on page 28 "Registering the Storage Server on Unix/Linux Platforms" on page 30 I The storage server argument passed to the nbdevconfig command should be in the form of <name_ip>, where the name is the name of storage server to be registered and IP is the IP address of the ETERNUS CS800 S6. If the ETERNUS CS800 S6 is configured with multiple network interfaces (see the User s Guide for ETERNUS CS800 S6 system) the IP will be the network interface used for data. This is also applicable when registering storage servers on a Windows platform. I If the IP address of the ETERNUS CS800 S6 or media server changes at any time after registering the storage servers (for example, due to switch changes), you must delete the existing storage servers and disk pools on the media server, and then register the storage servers again using the procedures below. You must take these actions on all media servers that access the storage servers. Registering the Storage Server on Windows Platforms I The procedures in this section assume NetBackup is installed in the default location. If you installed Netbackup in a different drive or location, modify the commands with the correct path. I For complete usage information about these commands, refer to NetBackup Commands for Windows. To register the storage server on a Windows NetBackup media server platform, perform the following steps: 28 U41853-J-Z

29 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) 1. Add the storage server to NetBackup: <install path>\netbackup\bin\admincmd\nbdevconfig -creatests -storage_server <storage_server_name_ip> -stype FTS -media_server <media_servername> -st 9 Example: Add a storage server by name nbustorageserver at IP address and a media server by name nbumedia. C:\Program Files\Veritas\NetBackup\bin\admincmd\nbdevconfig -creatests -storage_server nbustorageserver_ stype FTS -media_server nbumedia -st 9 I When specifying the -storage_server variable (passed to the nbdevconfig command), you must include both the name of the storage server (defined in the ETERNUS CS800 S6 storage server configuration) and the IP address of the ETERNUS CS800 S6 separated by an underscore. For example: nbustorageserver_ or nbustorageserver_hostname. I If the ETERNUS CS800 S6 is configured with multiple network interfaces (see the User s Guide for your ETERNUS CS800 S6 system), the IP address of the interface enabled for data should be used to register the storage server I A message from the prompt indicates that the storage server was added successfully. Otherwise, an error message is displayed. 2. Specify the credentials of the storage server: <install path>\volmgr\bin\tpconfig -add -storage_server <storageserver_ip> -stype FTS -sts_user_id <username> -password <password> Example: Add credentials for storage server nbustorageserver. C:\Program Files\Veritas\Volmgr\bin\tpconfig -add -storage_server nbustorageserver_ stype FTS -sts_user_id ostuser -password password V CAUTION! The username and password must be the same as the OST user credentials created on the ETERNUS CS800 S6 remote management console (see "Configuring OST Authentication" on page 11). I When specifying the -storage_server variable, you must include both the name of the storage server (defined in the storage server configuration) and the IP address of the ETERNUS CS800 S6 separated by an underscore. For example: nbustorageserver_ or nbustorageserver_hostname. U41853-J-Z

30 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide I No message displays if the credentials are added successfully. However, an error message displays if the credentials are incorrect. Verifying the LSU Discovery After you have registered the storage server, verify the discovery of LSUs by performing the following step: 1. From the command line on the master server, type: <install path>\netbackup\bin\admincmd\nbdevconfig previewdv -stype FTS -storage_servers <storageserver_ip> Example: Verify LSU discovery for storage server nbustorageserver. C:\Program Files\Veritas\NetBackup\bin\admincmd\nbdevconfig -previewdv -stype FTS -storage_servers nbustorageserver_ I When specifying the -storage_server variable, you must include both the name of the storage server (defined in the ETERNUS CS800 S6 storage server configuration) and the IP address of the ETERNUS CS800 S6 separated by an underscore. Storage server names are case sensitive on all platforms including Windows. For example: nbustorageserver_ or nbustorageserver_hostname. This will show if the storage server has been discovered by NetBackup and if the password is correct. Registering the Storage Server on Unix/Linux Platforms I For complete usage information about these commands, refer to NetBackup Commands for UNIX and Linux. To register the storage server on Linux. Solaris, AIX or HP-UX NetBackup media server platforms: 1. Add the storage server to NetBackup by executing the following command on the NetBackup media server as root: /usr/openv/netbackup/bin/admincmd/nbdevconfig -creatests -storage_server <storageserver_ip> -stype FTS -media_server <media_servername> -st 9 Example: adding a storage server by name nbustorageserver and a media server by name nbumedia. /usr/openv/netbackup/bin/admincmd/nbdevconfig -creatests -storage_server nbustorageserver_ stype FTS -media_server nbumedia -st 9 30 U41853-J-Z

31 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) I When specifying the -storage_server variable (passed to the nbdevconfig command), you must include both the name of the storage server (defined in the storage server configuration) and the IP address of the ETERNUS CS800 S6 separated by an underscore. For example: nbustorageserver_ I If the ETERNUS CS800 S6 is configured with multiple network interfaces (see the User s Guide for your ETERNUS CS800 S6 system), the IP address of the interface enabled for data should be used to register the storage server. I A message from the prompt indicates that the storage server was added successfully. Otherwise, an error message is displayed. 2. Specify the credentials of the storage server: /usr/openv/volmgr/bin/tpconfig -add -storage_server <storageserver_ip> -stype FTS -sts_user_id <username> -password <password> Example: Adding credentials for storage server nbustorageserver. /usr/openv/volmgr/bin/tpconfig -add -storage_server nbustorageserver_ stype FTS -sts_user_id ostuser -password password V CAUTION! The username and password must be the same as the OST user credentials created on the ETERNUS CS800 S6 remote management console (see "Configuring OST Authentication" on page 11). I When specifying the -storage_server variable, you must include both the name of the storage server and the IP address of the ETERNUS CS800 S6 separated by an underscore. For example:nbustorageserver_ or nbustorageserver_hostname. I No message displays if the credentials are added successfully. But an error message displays if the credentials are incorrect. Verifying the LSU Discovery After you have registered the storage server, verify the discovery of LSUs by performing the following steps: 1. From the command line on the master server, type: /usr/openv/netbackup/bin/admincmd/nbdevconfig previewdv stype FTS storage_servers <storageserver_ip> Example: Verify LSU discovery for storage server nbustorageserver. /usr/openv/netbackup/bin/admincmd/nbdevconfig previewdv stype FTS storage_servers nbustorageserver_ U41853-J-Z

32 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide I When specifying the -storage_server variable, you must include both the name of the storage server (defined in the ETERNUS CS800 S6 storage server configuration) and the IP address of the ETERNUS CS800 S6 separated by an underscore. For example: nbustorageserver_ or nbustorageserver_hostname. This will show if the LSU has been discovered by NetBackup and if the password is correct. Using the Storage Server Configuration Wizard For NetBackup 7.1.x, you can use the Storage Server Configuration Wizard to register storage servers. I The appearance of screens may vary depending on the version of NetBackup used. (NetBackup 7.0 is shown.); relevant exceptions for newer versions are shown. To register storage servers: 1. Start NetBackup: In Windows, double-click the NetBackup Administration Console icon. In Linux, Solaris, AIX and HP-UX run the following command: /usr/openv/netbackup/bin/jnbsa & The NetBackup Administration Console displays (see Figure 9). 32 U41853-J-Z

33 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 9: NetBackup Administration Console 2. In the Details pane (on the right), click Configure Disk Storage Servers. The Storage Server Configuration Wizard displays (see Figure 10). U41853-J-Z

34 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Figure 10: Storage Server Configuration Wizard 3. Click Next. The Add Storage Server Type window displays (see Figure 11). 34 U41853-J-Z

35 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 11: Add Storage Server Type 4. Select OpenStorage in the list, and then click Next. The Add Storage Server Details window displays (see Figure 12). U41853-J-Z

36 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Figure 12: Add Storage Server Details 5. Enter the following information about the storage server: Storage server type - Enter FTS. Storage server name - The name of the storage server in the format <storageserver_ip>. 36 U41853-J-Z

37 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) I When specifying the Storage server name, you must include both the name and IP address of the storage server separated by an underscore. Storage server names are case sensitive on all platforms including Windows. For example: nbustorageserver_ I If the ETERNUS CS800 S6 is configured with multiple network interfaces (see the User s Guide for your ETERNUS CS800 S6 system), the data IP address of the interface enabled for data should be used to register the storage server Select media server - Select the media server that will access the storage server. The OST Plug-in must be installed on the media server. Enter credentials - Enter the username and password for the storage server. V CAUTION! The username and password must be the same as the OST user credentials created on the ETERNUS CS800 S6 remote management console (see "Configuring OST Authentication" on page 11). I If an error occurs when authenticating in Windows, try using the tpconfig command to validate the OST target (see "Registering the Storage Server on Windows Platforms" on page Click Next. The Storage Server Creation Status window displays (see Figure 13). U41853-J-Z

38 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Figure 13: Storage Server Creation Status 7. Wait for the wizard to complete the tasks, and then click Next. 8. Click Finish. The storage server is created on the media server. Configuring Disk Pools and Storage Units in NetBackup After the Storage Server has been registered to NetBackup, disk pools and storage units have to be configured in NetBackup. Proceed as follows: 1. Start NetBackup: In Windows, double-click the NetBackup Administration Console icon. 38 U41853-J-Z

39 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) In Linux, Solaris, AIX and HP-UX run the following command: /usr/openv/netbackup/bin/jnbsa & The NetBackup Administration Console displays (see Figure 14). Figure 14: NetBackup Administration Console U41853-J-Z

40 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide 2. In the Details pane (on the right), click Configure Disk Pool. The DIsk Pool Configuration Wizard displays (see Figure 15). Figure 15: Disk Pool Configuration Wizard 3. Click Next. The Disk Pool Type window displays (see Figure 16). 40 U41853-J-Z

41 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 16: Disk Pool Type 4. Select OpenStorage (FTS) for the disk pool type, and then click Next. The Select Storage Server window displays (see Figure 17). U41853-J-Z

42 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Figure 17: Select Storage Server 5. Select the storage server that you created on the media server, and then click Next. The Select Volumes window displays (see Figure 18). 42 U41853-J-Z

43 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 18: Select Volumes I Newer versions display the Select Disk Pool Properties and Volumes window (see Figure 20). If AIR is configured on the ETERNUS CS800 S6 for your LSU, the Replication choices will be populated when you select the Volume. U41853-J-Z

44 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Figure 19: Disk Pool Properties window 6. Select an available LSU, and then click Next. The Disk Pool Properties (named Additional Disk Pool Information in newer versions) window displays (see Figure 20). 44 U41853-J-Z

45 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 20: Disk Pool Properties 7. Enter a Disk Pool name, and check the other information to make sure it is correct. Then click twice Next. U41853-J-Z

46 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide I Newer versions display the Summary window (see Figure 21). If you see this window, check the information to make sure it is correct, and then click Next. Figure 21: Summary window 46 U41853-J-Z

47 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) I Newer versions display the Disk Pool Creation window (see Figure 22). If you see this window, click Next. Figure 22: Disk Pool Creation window The Storage Unit Creation window displays (see Figure 23). U41853-J-Z

48 Configuring Symantec NetBackup (Media Server) NetBackup and Backup Exec OST Guide Figure 23: Storage Unit Creation 8. Select the Create a Storage Unit that uses check box, and then click Next. The Storage Unit Creation Details window displays (see Figure 24). 48 U41853-J-Z

49 NetBackup and Backup Exec OST Guide Configuring Symantec NetBackup (Media Server) Figure 24: Storage Unit Creation Details 9. Accept the default settings, or modify the following information about the storage unit: Storage unit name - Enter the name of the storage unit. Media Server - Select an option to use any available media server to transport data, or select the specific media server(s) to use. Maximum concurrent jobs - Enter the maximum number of backup jobs that can run concurrently to the storage unit. Maximum fragment size - Enter the maximum size of backup archives that can be written to the storage unit. 10. Click Next. 11. Click Finish. U41853-J-Z

50 Configuring Symantec Backup Exec (Media Server) NetBackup and Backup Exec OST Guide The Disk Pool is now configured and ready for use. You can view or change current configuration settings in Device Management or Storage Unit Management. Configuring Symantec Backup Exec (Media Server) Please consult the Symantec Backup Exec Administrator's Guide for instructions on Backup Exec installation and basic configuration. I Installation and licensing of the deduplication option in Backup Exec is required for OST support. V CAUTION! You must upgrade to Backup Exec 2010 R3 or later before configuring Backup Exec. R3 is a maintenance release that provides OST fixes that are required by ETERNUS CS800 S6 software version 2.x. To configure Symantec Backup Exec for OST, see the following sections: "Backup Exec Configuration" "Configuring Backup Exec and Logical Storage Units" Backup Exec Configuration In addition to the basic configuration of Backup Exec media server, the following Backup Exec services have to be logged in with administrative credentials: Backup Exec Device & Media Service To log in with administrative credentials: 1. Open the Services window. 2. Right-click on the service and click Properties. 3. In the Properties window of the service, click the Log on tab. 4. Select This Account Option and enter the administrative login name and password. 5. Click OK and restart the service to login with the new credentials. 50 U41853-J-Z

51 NetBackup and Backup Exec OST Guide Configuring Symantec Backup Exec (Media Server) Configuring Backup Exec and Logical Storage Units To configure Backup Exec and the logical storage units: I It is recommended that you disable the Windows firewall on the Backup Exec server. 1. From the main Backup Exec menu, choose Configure Devices. The Configure Devices window displays (see Figure 25). Figure 25: Configure Devices Window 2. From the Configure Devices window, select OpenStorage. The Add OpenStorage Device window displays (see Figure 26). U41853-J-Z

52 Configuring Symantec Backup Exec (Media Server) NetBackup and Backup Exec OST Guide Figure 26: OpenStorage Window 3. Enter the following information in the Add Open Storage Device window: a) Enter the Server name. The Server name must use the following format: <OST storage server name>_<eternus CS800 S6 data IP>. The OST storage server name must match the OST storage server name configured earlier in the ETERNUS CS800 S6 remote management pages. For example: server1_ b) Specify the Logon account. The Logon account username and password must be the same as the OST user credentials created on the ETERNUS CS800 S6 remote management console (see "Configuring OST Authentication" on page 11). c) The Server type indicates the type of OpenStorage device. Select FTS for the Server type. I Do not select PureDisk for the Server type. d) Enter the Logical storage unit (LSU) name. The name should match the LSU name configured earlier on the ETERNUS CS800 S6 remote management pages (see "Configuring Logical Storage Units" on page 18). e) Select the number of allowed Concurrent Operations here. I Fujitsu Technology Solutions recommends setting this value to no more than 64 jobs. Keep in mind that restore jobs and optimized duplication jobs will cause additional system load. 4. Sharing can be enabled when you add an OpenStorage device. Direct access for Remote Agents is enabled by default. 52 U41853-J-Z

53 NetBackup and Backup Exec OST Guide Configuring Symantec Backup Exec (Media Server) 5. Click Restart Now when prompted to restart services. Backup Exec will not discover the device until the Backup Exec services are restarted. The storage unit and LSU should show as ready after it is discovered by Backup Exec (see Figure 27). Figure 27: Backup Exec Window 6. Create a small backup job using the Backup Wizard to verify connectivity (see Figure 28). U41853-J-Z

54 Configuring Symantec Backup Exec (Media Server) NetBackup and Backup Exec OST Guide Figure 28: Backup Wizard - Backup Selections 7. Select the new OpenStorage device as target (see Figure 29). 54 U41853-J-Z

55 NetBackup and Backup Exec OST Guide Configuring Symantec Backup Exec (Media Server) Figure 29: Backup Wizard - Backup Device and Media 8. Choose the Job Monitor to view the progress (see Figure 30). U41853-J-Z

56 Configuring Symantec Backup Exec (Media Server) NetBackup and Backup Exec OST Guide Figure 30: Job Monitor Sharing Deduplication Devices To share a deduplication device between multiple media servers 1. On the navigation bar, click Devices. 2. In the Devices view, right-click the deduplication storage folder, the OpenStorage device, or the Remote Agent with Direct Access that you want media servers to access. 3. Select Manage sharing. 4. Select the deduplication device that you want to share. 5. Under Media Servers, select the media servers that you want to use with the deduplication device. 6. Click OK. 7. Restart the Backup Exec services on the media servers that you selected in step U41853-J-Z

57 NetBackup and Backup Exec OST Guide Configuring Symantec Backup Exec (Media Server) Creating a Backup Job with Direct Access When you create a backup job with direct access, keep in mind the following items: The backup job can include resources from only one remote computer. The Remote Agent for Windows Systems must be installed and running on the remote computer. The remote computer must be configured as a Remote Agent with Direct Access. The remote computer must be pingable. The remote computer cannot be a Backup Exec media server. A OpenStorage device must be selected in the Device and Media view for the backup job. The option Allow this job to have direct access to the device must be selected in the Device and Media view for the backup job. This option is selected by default when you select a OpenStorage device as the destination for a backup job. Configuring a Remote Agent with Direct Access To configure a Remote Agent with Direct Access 1. On the navigation bar, click Devices. 2. In the task pane, under Device Tasks, click the Configure devices assistant. 3. Click Remote Agent with Direct Access. 4. If the Remote Agent with Direct Access Configuration dialog box appears, click Add a remote agent with direct access. This step does not apply if this is the first Remote Agent with Direct Access. The Remote Agent with Direct Access Configuration dialog box appears only if a Remote Agent with Direct Access already exists. 5. Complete the options to set up the remote agent. 6. On the Sharing tab, select each media server to which you want the remote agent to have direct access. 7. Click OK. 8. Restart the Backup Exec services on the media servers that you selected in step 6. U41853-J-Z

58 Initiating an OST Backup NetBackup and Backup Exec OST Guide General Options for a Remote Agent with Direct Access The following options are available for remote agents with direct access. Description Item Indicates the name of the computer that you want to add as a Remote Agent with Direct Access. I The naming format that you use to enter the computer name must also be used to select the remote computer for backup. For example, if you use the IP address here, you must also use the IP address for the backup selection. Otherwise, sourceside deduplication does not occur. Server Indicates the port to use for communications between the media server and the remote computer. Port Displays a description that you choose. Enable ICMP ping operations for BackupExec to detect the server Lets the media server use ICMP ping to locate the remote computer. Logon account Indicates the logon account that is required to access the remote computer. Initiating an OST Backup See the NetBackup System Administrator s Guide or the Backup Exec User s Guide for information on creating a backup policy to backup data to an OST disk pool Once the backup policies are configured, optimized duplication begins after the backup completes. 58 U41853-J-Z

59 NetBackup and Backup Exec OST Guide Initiating an OST Backup Performing Synthetic Full Backups (NetBackup Only) A synthetic backup is a backup in which content from a series of backups, starting with a full backup and followed by incremental backups, is combined into a new backup-typically a full backup. For a synthetic backup to be successful, all the backups from the series must be intact and internally consistent. Intact means that each backup created still exists and no backup in the series has been expired. Internally consistent means that the individual backup catalogs are all consistent. The catalogs can become inconsistent for a variety of reasons, for example, by running two backups for a client and policy concurrently. (A scenario when this example can occur is if a manual incremental backup is performed while a scheduled incremental backup job is in progress.) During a synthetic backup, the backup application first queries and analyzes the backups for the given policy and client and then attempts to use their catalog data to combine the content into a new logical backup. If a backup is missing, or if file metadata is inconsistent, the synthetic backup will fail with an error 671. Inconsistent incremental metadata due to, prior to NetBackup 7.1, use of dynamic selections and multistreaming. Primary causes of error 671 include the following: Expiration of a backup in the full/incremental series. Inconsistent incremental metadata due to concurrent backups in the series. Inconsistent incremental metadata due to utilization of Windows Archive Bit and cumulative incremental backups. To configure NetBackup to store optimized synthetic full backups verify the OptimizedImage flag is set for the storage server and the disk pool. To confirm the OptimizedImage flag is set use /usr/openv/netbackup/bin/admincmd/nbdevquery -liststs -U for the storage server and /usr/openv/netbackup/bin/admincmd/nbdevquery -listdp -U for the disk pool. To add the OptimizedImage flag to a existing server use /usr/openv/netbackup/bin/admincmd/nbdevconfig -changests -stype FTS -storage_server <storage-server-name> -setattribute OptimizedImage and to the disk pool use /usr/openv/netbackup/bin/admincmd/nbdevconfig -changedp -stype FTS -dp <disk-poolname> -setattribute OptimizedImage. To configure NetBackup optimized synthetic full backups also see Symantec Technical Solution note TECH U41853-J-Z

60 Performing OST Optimized Duplication NetBackup and Backup Exec OST Guide Performing OST Optimized Duplication The ETERNUS CS800 S6 has the capability to copy data on one system to another system (that is, the capability to perform replication). NetBackup or Backup Exec uses this capability to initiate an optimized duplication of backup images between these appliances. The duplication operation of NetBackup or Backup Exec triggers the duplication function in the OST disk appliance if both the source and destination volumes for the copy are OST LSUs. OST optimized duplication reduces the workload on the NetBackup or Backup Exec media server because the replication is performed by the ETERNUS CS800 S6. Duplication is done in the background, and it is faster because it uses data deduplication capabilities to reduce the copy bandwidth. Duplication is still initiated, managed, and controlled by the NetBackup or Backup Exec media server while the actual data movement process is offloaded to gain the maximum benefits from the Fujitsu appliance s replication capabilities. The ETERNUS CS800 S6 can replicate (duplicate) OST data to another ETERNUS CS800 S6 using the following methods: Optimized Duplication - With optimized duplication, backup images on a storage server can be replicated to another storage server on an ETERNUS CS800 S6 that resides in the same NetBackup or Backup Exec domain. The duplication occurs when it is initiated in NetBackup (see "Initiating an OST Optimized Duplication" on page 61). Automatic Image Replication (AIR) - If you are using Symantec NetBackup 7.1 or higher, you can configure an LSU for Automatic Image Replication (see "Setting Up Automatic Image Replication" on page 65). If enabled, data on an LSU is automatically replicated to a remote LSU that resides on an ETERNUS CS800 S6 in a different NetBackup domain. The timing of the duplication, as well as the backup images that are duplicated, are determined by the storage lifecycle policies (SLPs) configured in NetBackup. Concurrent Optimized Duplication - For both optimized duplication and Automatic Image Replication, you can optionally enable Concurrent Optimized Duplication (see "Configuring Storage Servers" on page 13). If enabled, as data is written to the storage server, it is simultaneously replicated to the target ETERNUS CS800 S6. When optimized duplication or Automatic Image Replication subsequently occurs, the operation is more efficient because a portion of the required data has already been replicated to the target storage server. It is important to remember that, with Automatic Image Replication, the local and remote LSUs reside in different NetBackup domains. This differs from optimized duplication, which occurs between two LSUs residing within the same NetBackup domain. I For information about configuring NetBackup for optimized duplication or Automatic Image Replication (also referred to as duplicating images to a remote master server domain), see the Symantec NetBackup Administrator's Guide. 60 U41853-J-Z

61 NetBackup and Backup Exec OST Guide Performing OST Optimized Duplication Initiating an OST Optimized Duplication I To increase the performance, Fujitsu Technology Solutions recommends configuring the ETERNUS CS800 S6 to use the replication channel when performing optimized duplication (NetBackup only) (see "Replication Channel for OST (NetBackup Only)" on page 63). I For Backup Exec, no more than two concurrent optimized duplication streams per source ETERNUS CS800 S6 to a target ETERNUS CS800 S6 are supported. Additional concurrent streams are not optimized. To initiate an optimized duplication, refer to the following sections: "Initiating Optimized Duplication in NetBackup" "Initiating Optimized Duplication in Backup Exec" Initiating Optimized Duplication in NetBackup To initiate an optimized duplication with the Administration Console: In the NetBackup Administration Console, expand the NetBackup Management Catalog. Set up the search criteria for the image you want to duplicate. Click Search Now. Right-click the images you want to duplicate and select Duplicate from the shortcut menu. I You must designate an OST storage unit as the destination for the duplication. Use the Storage Unit field in the Setup Duplication Variables dialog box. I If the optimized duplication fails, for NetBackup 7.x the administrator can control this failover using a configurable option. See the Symantec Technote at: for more information on this option. For more information, see the section Duplicating Backup Images in the NetBackup System Administrator's Guide. U41853-J-Z

62 Performing OST Optimized Duplication NetBackup and Backup Exec OST Guide Initiating Optimized Duplication in Backup Exec To initiate an optimized duplication with the Administration Console: 1. In the Backup Exec console, navigate to the Job Setup tab. 2. In the Backup Tasks section of the Job Setup tab, click New job to duplicate backup sets. The New Duplicate Set Job window displays (see Figure 31). Figure 31: New Duplicate Backup Set Job Window 3. There are two duplication options: Duplicate Existing Backup Sets Duplicate Backup Sets Following a Job Select the default option Duplicate Existing Backup Sets. 4. In the Selections section, select a previously successful backup job. 5. In the Device and Media section, select a destination OST device in the Device drop down menu. This device must reside on the optimized duplication target. 62 U41853-J-Z

63 NetBackup and Backup Exec OST Guide Performing OST Optimized Duplication 6. In the General section, select a source OST device in the Preferred Source Device drop down menu. This device must reside on the optimized duplication source. 7. In the Schedule section, select a Date and Time to schedule the job. 8. When all options are selected, click Run Now to start the job. For more information, see Duplicating Backup Images in the Backup Exec Administrator's Guide. Replication Channel for OST (NetBackup Only) Replication Channel for OST leverages the replication capabilities of the ETERNUS CS800 S6 (normally used to replicate NAS shares and VTL partitions) to perform optimized duplication using NetBackup. This significantly increase optimized duplication performance. In addition, more than two optimized duplication streams per source ETERNUS CS800 S6 are supported. Replication Channel for OST is automatically used when the IP address of the target NetBackup storage server matches the IP address of the configured target ETERNUS CS800 S6. You can configure up to two replication targets. In segmented network configurations, when Replication Channel for OST is enabled, optimized duplication uses the replication interface instead of the data interface. Also, the IP address of the target NetBackup storage server (which acts as a data channel IP of the target) can be mapped to the replication IP (see "Target IP Mapping" on page 24). I Replication Channel for OST is compatible with NetBackup only. Using the replication channel to perform optimized duplication with Backup Exec is not supported. To use Replication Channel for OST when performing optimized duplication: 1. Log on to the ETERNUS CS800 S6 remote management console. 2. On the target ETERNUS CS800 S6, perform the following steps: a) Navigate to the Configuration > Replication page (see Figure 32). U41853-J-Z

64 Performing OST Optimized Duplication NetBackup and Backup Exec OST Guide Figure 32: Replication Receive Page b) Under Source systems, click Add. c) In the Source Hostname or IP box, enter the host name or IP address of the system that will send the replicated data. d) Click Apply. 3. On the source ETERNUS CS800 S6, perform the following steps: a) Navigate to the Configuration > Replication page (see Figure 32). b) Under Target systems, click Add. c) In the Target Hostname or IP box, enter the hostname or IP address of the system that will receive the replicated data. d) In the Encryption drop-down box, select the type of encryption to use when sending replication data to the target system (None, 128-bit, or 256-bit). Using 256-bit encryption (default) provides a stronger level of security but may have an impact on system performance in some situations. For best performance, if your data network is already secured, you should select None for encryption. V CAUTION! For encryption, select None or 128-bit if you are sending data to a ETERNUS CS800 S6 running a system software version prior to ETERNUS CS800 S6 2.1 Software. e) In the Source IP box, enter the IP address that is used to uniquely identify the source ETERNUS CS800 S6 to the target. This may be different than the actual network IP address of the source ETERNUS CS800 S6. If the target system is at ETERNUS CS800 S6 2.1 Software or higher, the Source IP field is not required. If the target system is at ETERNUS CS800 S x Software or below, then you must enter the IP address by which the target system recognizes the source system. The default value is U41853-J-Z

65 NetBackup and Backup Exec OST Guide Setting Up Automatic Image Replication I The Source IP field does not accept fully qualified domain names. You must enter a valid IP address. Make sure this IP address is configured in the allowable sources list on the target ETERNUS CS800. f) Click Apply. 4. Perform optimized duplication as normal. Setting Up Automatic Image Replication OST AIR requires NetBackup 7.1.x or higher. Setting up Automatic Image Replication (AIR) requires that you first configure the target (remote) ETERNUS CS800 S6 and then the source ETERNUS CS800 S6 (see Figure 33). In addition, you must create storage lifecycle policies (SLPs) in NetBackup that define when the automatic replication occurs and which backup images are duplicated. To automatically replicate (duplicate) all data on an LSU to a remote LSU that resides on an ETERNUS CS800 S6 in a different NetBackup domain: 1. On the target system, add the source system to the list of allowed replication sources (see "Replication Channel for OST (NetBackup Only)" on page 63). 2. On the target system, create a local OST user (see "Configuring OST Authentication" on page 11). V CAUTION! On the target system, make sure to create a local user on the Configuration > OST > Manage Users page. 3. On the target system, create a storage server and LSU to receive the replicated OST data (see "Configuring Storage Servers" on page 13). I Fujitsu Technology Solutions recommends selecting the Available Capacity option when creating an LSU for use with Automatic Image Replication. 4. On the source system, configure replication to the target system (see "Replication Channel for OST (NetBackup Only)" on page 63). 5. On the source system, create a remote OST user with the same user name and password that you used in step 2 above (see "Create a Remote User for OST AIR" on page 67). V CAUTION! On the source system, make sure to create a remote user on the Configuration > OST > Manage Users page. U41853-J-Z

66 Setting Up Automatic Image Replication NetBackup and Backup Exec OST Guide 6. On the source system, create a storage server and LSU, and enable the LSU for Automatic Image Replication (see "Configuring Storage Servers" on page 13). For Remote Storage Server and Remote LSU, make sure to specify the storage server and LSU created in step 3 above. Also, for Remote User, make sure to select the remote user created in step 5 above. 7. Register and configure the storage servers in NetBackup (see "Registering the Storage Server with NetBackup and Discovering Logical Storage Units" on page 28). Also, create disk pools in NetBackup and make sure the Replication property on the disk pool is updated (see "Configuring Disk Pools and Storage Units in NetBackup" on page 38). If the disk pool is the source, the Replication property of the disk pool should be source. If the disk pool is the target on the remote NetBackup media server, then the Replication property should be target. I A disk pool can be a target and also a source to another remote NetBackup media server. Make sure that the Replication property on the disk pool is updated before creating the storage lifecyle policies (SLPs). 8. Configure storage lifecycle policies in NetBackup to control when automatic replication of the LSU occurs (see the Symantec NetBackup Administrator's Guide). Figure 33: Setting Up OST Automatic Image Replication 66 U41853-J-Z

67 NetBackup and Backup Exec OST Guide Setting Up Automatic Image Replication 1. Configure target ETERNUS CS800 S6: Add allowed replication source. Create local OST user. Create storage server and LSU. 2. Configure source ETERNUS CS800 S6: Specify replication target. Create remote OST user. Create storage server and LSU with AIR enabled. 3. Create storage lifecycle policies (SLPs) on the NetBackup server in each domain to control when duplication occurs and images are imported. Create a Remote User for OST AIR Add a remote user to create OST user credentials for use with OST AIR. When you enable Automatic Image Replication for an LSU, you specify a remote user. The remote user credentials on the source ETERNUS CS800 S6 must match the local user credentials on the target (remote) ETERNUS CS800 S6. To add a remote user: 1. Log on to the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > OST > Manage Remote Users page (see Figure 34). U41853-J-Z

68 Setting Up Automatic Image Replication NetBackup and Backup Exec OST Guide Figure 34: Manage Users Page 1. Click Add. 1. Enter information about the remote user: User name - Enter the name of the remote user. New Password - Enter the password for the remote user. Confirm New Password - Enter the password again to confirm it. Description - (Optional) Enter a brief description of the remote user. 2. Click Apply. 68 U41853-J-Z

69 NetBackup and Backup Exec OST Guide Configuring OST Path to Tape (NetBackup only) Configuring OST Path to Tape (NetBackup only) The OST path to tape (Direct to Tape) option allows you to copy OST LSUs to a physical tape library. I This procedure assumes that you have physically connected the ETERNUS CS800 S6 and the target library using Fibre Channel either directly or through a Fibre Channel SAN. If you are connecting the devices using a SAN, you must perform the appropriate Fibre Channel switch zoning. You must also appropriately map the library device LUNs on the library side to correctly present them to the ETERNUS CS800 S6. Configuring OST path to tape consists of the following major steps. See the following subsections for detailed instructions for completing each step: Verifying Prerequisites Configuring Physical Tape Libraries Configuring NetBackup OST for Path to Tape Verifying Prerequisites The following steps must be completed before setting up NetBackup OST path to tape: The NetBackup version running on the media server must be 7.1.x, with all updates applied. The ETERNUS CS800 S6 must be installed and configured. Fibre Channel connectivity must be configured. Aliases for the NDMP host (the ETERNUS CS800 S6) must be created on the EMM server (see "Creating Aliases for the NDMP Host"). Creating Aliases for the NDMP Host For optimal path to tape (direct copy) performance, you should create aliases for the NDMP host (the ETERNUS CS800 S6) on the Enterprise Media Manager (EMM) server. If you create aliases for the ETERNUS CS800 S6, then data is sent directly from the ETERNUS CS800 S6 to tape during path to tape (direct copy) operations. If you do not create these aliases, data will be sent from the ETERNUS CS800 S6 to the media server, then back to the ETERNUS CS800 S6 before it is written to tape, which can cause slower performance. U41853-J-Z

70 Configuring OST Path to Tape (NetBackup only) NetBackup and Backup Exec OST Guide To create aliases for the NDMP host: 1. On the EMM server, retrieve a list of all NDMP hosts (ETERNUS CS800 S6 systems). For Windows, run the following command: C:\Program Files\Veritas\NetBackup\bin\admincmd\nbemmcmd -listhosts -machinetype ndmp For Linux or Solaris, run the following command as root: /usr/openv/netbackup/bin/admincmd/nbemmcmd -listhosts -machinetype ndmp 2. For each host (ETERNUS CS800 S6) returned in Step 1 that will be performing direct copy to tape, retrieve a list of aliases For Windows, run the following command: C:\Program Files\Veritas\NetBackup\bin\admincmd\nbemmcmd -machinealias -getaliases -machinename <ndmphost> -machinetype ndmp For Linux or Solaris, run the following command as root: /usr/openv/netbackup/bin/admincmd/nbemmcmd -machinealias -getaliases -machinename <ndmphost> -machinetype ndmp 3. A host (ETERNUS CS800 S6) should have all available aliases: NetBIOS hostname, DNS hostname, and FQDN (fully qualified domain name). If the host (ETERNUS CS800 S6) does not have one or more of these aliases, you should create them. To create an alias for a host (ETERNUS CS800 S6), use the following commands. For Windows, run the following command: C:\Program Files\Veritas\NetBackup\bin\nbemmcmd.exe -machinealias -machinename <ndmphost> -addalias -alias hostname.domain.gov -machinetype ndmp For Linux or Solaris, run the following command as root: /usr/openv/netbackup/bin/admincmd/nbemmcmd -machinealias -machinename <ndmphost> -addalias -alias hostname.domain.gov -machinetype ndmp I To correct any DNS issues (or simply to be proactive), you can add the entries to the hosts file. 70 U41853-J-Z

71 NetBackup and Backup Exec OST Guide Configuring OST Path to Tape (NetBackup only) Configuring Physical Tape Libraries The Physical Device Discovery page allows you to discover and configure attached physical tape libraries and tape drives. After you discover and configure the libraries and drives, you can use them for path to tape data movement. To discover and configure an attached physical tape library and tape drives: 1. Access the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > PTT > Physical Device Discovery page (see Figure 35). Figure 35: Physical Device Discovery Page 3. Click Scan to detect attached physical libraries. Attached physical libraries display in the list. Select a library in the list to view all of the drives in the library. 4. Make sure the changer and all of its drives are enabled. If necessary, select a changer or drive and click Enable. U41853-J-Z

72 Configuring OST Path to Tape (NetBackup only) NetBackup and Backup Exec OST Guide Configuring NetBackup OST for Path to Tape To configure direct path to tape from backups made to the ETERNUS CS800 S6: 1. Access the ETERNUS CS800 S6 remote management console and perform the following steps: a) Navigate to the Configuration > PTT > Backup Application Specific page (see Figure 36). Figure 36: Backup Application Specific Page b) Click Add. c) Specify the Username and New Password that are used by the NetBackup NDMP credentials in order to establish an NDMP connection. d) Click Apply. 2. In NetBackup, under NDMP Credentials, you must create a new NDMP host using the ETERNUS CS800 S6 hostname as the name and using the username and password entered in the previous step. The hostname should be resolved by the DNS (see Figure 37). 72 U41853-J-Z

73 NetBackup and Backup Exec OST Guide Configuring OST Path to Tape (NetBackup only) Figure 37: Adding a New NDMP Host 3. In NetBackup, when running the Configure Storage Devices wizard, the user must select the host and set the NDMP option. 4. Continue with the remaining configuration steps in the wizard. A storage unit is created pointing to the physical tape library. U41853-J-Z

74 Configuring OST Path to Tape (NetBackup only) NetBackup and Backup Exec OST Guide Running a Duplication to Tape NetBackup uses NDMP direct copy when you duplicate a backup image. Certain conditions apply to the duplication, explained in this section. To run a duplication, you can use any of the following methods: The Duplicate option in the Catalog node of the NetBackup Administration Console. NetBackup (see the NetBackup Administrator s Guide). The bpduplicate command (see the NetBackup Commands Guide). A NetBackup Storage Life-cycle Policy. Requirements For NetBackup to use NDMP direct copy when you duplicate an image: As the destination for the duplication, you must designate an NDMP storage unit in an ETERNUS CS800 S6. An NDMP tape drive must be available to mount the target image. The NDMP tape drive must be a physical tape drive in a tape library. If these two requirements are met, NDMP direct copy is enabled. NetBackup copies the image directly to the designated storage unit without using media server I/O or network bandwidth. Initiate NDMP Direct to Tape with the Administration Console To initiate an NDMP Direct to Tape with the Administration Console: 1. In the NetBackup Administration Console, expand NetBackup Management > Catalog. 2. Set up the search criteria for the image you want to duplicate. Click Search Now. 3. Right-click the images you want to duplicate and select Duplicate from the shortcut menu. I You must designate an NDMP storage unit (physical tape library) as the destination for the duplication. Use the Storage Unit box in the Setup Duplication Variables dialog box. For more information, see the section Duplicating Backup Images in the NetBackup System Administrator s Guide. 74 U41853-J-Z

75 NetBackup and Backup Exec OST Guide Configuring ETERNUS CS800 S6 Accent Configuring ETERNUS CS800 S6 Accent ETERNUS CS800 S6 Accent software accelerates backups and reduces network bandwidth requirements by distributing deduplication between the backup server and the ETERNUS CS800 S6. To use ETERNUS CS800 S6 Accent, all of the following requirements must be met: Firewall port 1062 is open for IP address that is used for data transfer. The media server meets the following requirements: Operating System - One of the following operation systems: Red Hat Enterprise Linux 5 (64-bit) Windows Server 2003 R2 or 2008 R2 (32-bit or 64-bit) or Windows 2012 (64-bit) Windows Small Business Server 2003 R2 or 2008 R2 (32-bit or 64-bit) or Windows 2012 (64-bit) I NetBackup 7.6 or later is required for media servers running Windows CPU - Greater than 2.2 GHz processor with at least 2 cores (4 cores recommended) Memory - 2 GB RAM or greater The OST Plug-in is installed on the media server (see "Installing the OST Plug-in" on page 9). Accent is enabled on the ETERNUS CS800 S6 (see "Enabling or Disabling Accent on the ETERNUS CS800 S6" on page 76). By default, Accent is disabled on the ETERNUS CS800 S6. Accent is enabled on the media server (see "Enabling or Disabling Accent on the Media Server" on page 81). By default, Accent is enabled on RedHat Linux and Window media server when you install the OST Plug-in. When all of these requirements are met, Accent will be used for all OST transport between the media server and the ETERNUS CS800 S6. Otherwise, normal OST transport will be used. For information about the maximum number of connections when Accent is enabled, see "Maximum Number of Jobs When Using ETERNUS CS800 S6 Accent" on page 81. I When Accent is in use, you can monitor Accent performance information in the ETERNUS CS800 S6 remote management console, on the Status > Accent page. For more information, see the User s Guide for your ETERNUS CS800 S6 system. U41853-J-Z

76 Configuring ETERNUS CS800 S6 Accent NetBackup and Backup Exec OST Guide Enabling or Disabling Accent on the ETERNUS CS800 S6 By default, Accent is disabled on the ETERNUS CS800 S6. To use Accent, you must enable it on the ETERNUS CS800 S6. I If Accent is enabled, all media servers that are not using the same ETERNUS CS800 S6 must have the latest OST plug-in installed. 3.0.x Software or Earlier To enable or disable Accent on the ETERNUS CS800 S6: 1. Access the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > OST > Accent page (see Figure 39). Figure 38: Accent Page 3. To enable Accent, select the Enable Inline Dedupe with Accent check box. Or to disable Accent, clear the Enable Inline Dedupe with Accent check box. 4. To enable or disable encryption when sending OST data from the media server to the ETERNUS CS800 S6, select an option in the Encryption drop-down box: None - OST data is not encrypted. Default AES OST data is encrypted using AES 128-bit encryption. 76 U41853-J-Z

77 NetBackup and Backup Exec OST Guide Configuring ETERNUS CS800 S6 Accent Default AES OST data is encrypted using AES 256-bit encryption. TLS with AES OST data is encrypted using AES 256-bit encryption with Transport Layer Security (TSL). I Using 256-bit encryption provides a stronger level of security but may have an impact on system performance in some situations. 5. If you selected the TLS with AES 256 encryption option, you must install the required certificate and key files on the ETERNUS CS800 S6: Certificate File Private Key File Certificate Authority File Rejection List FIle To install a file, click the Browse button to browse the system and locate the file, and then click Open. V CAUTION! Installing certificate files requires a system reboot immediately after the changes are applied. Wait for at least 15 minutes before logging back in. I You can install new certificate and key files at any time, as long as there are no active network connections between the OST media server and the ETERNUS CS800 S6. I To remove all certificate and key files, click Restore Factory Defaults. 6. Click Apply. I The certificate files supplied with the OST Plug-in should be in the /usr/fts/ directory along with the FTSPlugin.conf file. For Windows the certificate files should be in the C:\windows\FTS directory Software or Later To enable or disable Accent on the ETERNUS CS800 S6: 1. Access the ETERNUS CS800 S6 remote management console. 2. Navigate to the Configuration > OST > Accent page (see Figure 39). U41853-J-Z

78 Configuring ETERNUS CS800 S6 Accent NetBackup and Backup Exec OST Guide Figure 39: Accent Page 3. To enable Accent, click the Enable Deduplication with Accent check box. Or to disable Accent, clear the Enable Deduplication with Accent check box. Using 256-bit encryption provides a stronger level of security but may have an impact on system performance in some situations. I You cannot use Accent if you are currently using NetBackup Accelerator or Optimized Synthetic Backups. If you are using Accelerator, please make sure that Accent is not enabled. 4. Click Apply. 5. To enable or disable encryption when sending OST data from the media server to the ETERNUS CS800, select the Change Encryption Type link or go to the Configuration > System > Security > Data Encryption page (see Figure 40). 78 U41853-J-Z

79 NetBackup and Backup Exec OST Guide Configuring ETERNUS CS800 S6 Accent Figure 40: Data Encryption Page 6. Select an option in the Encryption drop-down box. Encryption applies to all OST data traffic. None - OST data is not encrypted. Default AES OST data is encrypted using AES 128-bit encryption. Default AES OST data is encrypted using AES 256-bit encryption. TLS with AES OST data is encrypted using AES 256-bit encryption with Transport Layer Security (TSL). I Using 256-bit encryption provides a stronger level of security but may have an impact on system performance in some situations. I If encryption is enabled, all other OST data will use TLS with AES 256 encryption. 7. If you selected any encryption option, you must install the required certificate and key files on the ETERNUS CS800 S6: Certificate File Private Key File Certificate Authority File Rejection List FIle To install a file, click the Browse button to browse the system and locate the file, and then click Open. U41853-J-Z