Unexpected Base Images Created in Rapid Recovery 6 (4035252)

Unexpected base images may be created occasionally within Rapid Recovery 6. These base images may appear after an operation completes or a job finishes.

The most likely root cause is due to hardware problems.Below is a list of potential causes for the improper shutdown.

• RAID controller.
• RAID controller cache battery.
• Hard disk installation/removal.
• Faulty power supply.
• AC adapter.
• CPU overheating.

An unexpected base image may be taken if:

1. Dirty shutdown of the agent.  If the protected machine has a dirty shutdown, Rapid Recovery will automatically take a new base to ensure that the recovery point chain is not corrupted by any potential errors that the machine could have due to the dirty shutdown
2. The driver log file has been deleted (AALog_*.log). The file is located at [drive letter]:\System Volume Information folder.
3. The driver failover file (AAFailover.md) has been deleted. The file is located at [drive letter]:\System Volume Information folder.
   • WARNING: Quest strongly discourages users from manipulating driver files without the help of a trained engineer.
4. Driver logging was disabled due to some troubleshooting steps. This might occur if the assuremc. exe utility was used in the environment during possible troubleshooting steps.
5. The Rapid Recovery filter driver (AAFsFlt) was unloaded.  By unloading the filter driver Rapid Recovery is unable to track changes on the volume and must start over with a new changelog and base image.
6. Amount of changes in the log file is too large and the system runs out of memory while building a map of the changed data. This can happen to large file-servers with significant amounts of data.
7. The source volume currently under protection has been extended or shrunk and the process was interrupted by a reboot or some other factor.
8. A new encryption key was set for the agent.  After the key has been added, a new base image will be taken.
9. The encryption key has been removed for the agent. After removing the key, a new base image will be taken.
10. The encryption key for the agent has been changed.
11. There is not enough space on the agent’s volume to write driver log files.
12. Improper permissions – the user protecting the agent does not have administrative privileges on the System Volume Information folder.
13. Check-disk – if check disk is performed on the system volume or on the non system volume, an incremental snapshot should be taken.  If corruption was found and repaired by check disk then a base may be taken.
14. User Access – Access to the System Volume Information folder and MSInfo is blocked by a third party product.
15. Third Party Product Interference – the volume is protected by another software product or the driver log file has been blocked by antivirus software.
16. Formatting Error – the volume is marked or formatted as “dirty” after undergoing an improper shutdown.
17. Environmental issues – different environmental issues may interfere with the software’s normal functionality.
18. Another VSS-based backup solution is running on the agent machine
19. Previous incremental recovery point is orphaned. Rapid Recovery will automatically create a new base image to ensure the future recovery points can be restored.

Note: Once a base image is triggered on a volume, there is no way to stop the base image and force an incremental snapshot.  The base image must be completed and then new incremental snapshots can be taken after the base is complete.