Adding an S3 Compatible cloud tier
To add a cloud storage group, complete the following steps:
- In the navigation menu, click Cloud Tier.
- In the Cloud pane, click Configure to add a cloud tier.
- In the Cloud Provider drop-down, select S3 Compatible.
- Provide a container name. This is the existing name of your container in your cloud platform.
- Enter your Connection String using one of the two methods below:
- Default - this option will compile your connection string into the correct format using the inputs below.
- Access key - The access key is typically 20 upper-case English characters
- Secret key - The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
- Region - The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
- Endpoint - If you are using VPC endpoints, enter the correct endpoint information.
- Custom - this option allows you to enter your connection string with additional parameters.
- Your connection string uses the following syntax:
"accesskey=<ABDCEWERS>;secretkey=< >; loglevel=warn; region=<aws-region>;"
Please note the following:
- The access key is typically 20 upper-case English characters
- The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
- The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
An example of a connection string with this syntax follows. Logically, each connection string is unique.
accesskey=AKIARERFUCFODHFJUCWK;secretkey=p+8/T+o5WeZkX11QbuPazHX1IdWbwgFplxuVlO8J;loglevel=warn;region=eu-central-1;
- To apply encryption, select Encryption and enter the following:
- Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.
|
NOTE: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable. |
- Confirm Passphrase — re-enter the passphrase used above.
- Click Configure. A Cloud Storage Group will be created.
- To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a Cloud Tiering policy.
Adding a cloud tier through the command line
To add a cloud tier, complete the following steps.
-
- Access the QoreStor CLI. Refer to Using the QoreStor command line for more information.
- Add a new cloud tier using the command
cloud_tier --add --cloud_container <name> --cloud_provider <AWS-S3|AZURE|Wasabi-S3|S3-Compatible>
|
NOTE: You will be prompted to enter your Azure connection string or AWS access string after executing the command. |
Refer to the QoreStor Command LIne Reference Guide for more information on the cloud_tier command and available options.
Modifying a storage group
To modify a storage group via the user interface, complete the following steps
- In the navigation menu, click Local Storage to expand the menu, then click Storage Groups.
- Find the desired storage group from the displayed list. Click the (ellipsis icon) in the upper-right corner of the storage group's information pane.
- Click Edit.
- For Storage Optimization, select a Compression Type from the drop-down list as needed:
- Fast— Results in shorter backup time, but with less space savings.
- Best — Provides the highest space savings, but with a longer backup time.
- You can modify the following Encryption settings:
|
NOTE: Due to export regulations, the encryption at rest feature is not available in certain markets, and, therefore, may not be available in your locale. |
- Passphrase—Enter the passphrase to be used to encrypt content encryption keys. (The passphrase string can take up to 255 characters. And, alphanumeric and special characters can be entered as part of the passphrase string.)
- Confirm Passphrase—Re-enter the encryption passphrase.
- Encryption—Next to Encryption, select or clear as needed.
- Encryption Mode—Select the mode of key lifecycle management from one of the following options:
- Static—A global, fixed key is used to encrypt all data.
- Internal—Content encryption keys are generated and rotated on a specified period of days.
- Click Update.
To modify a storage group via the CLI, complete the following steps
- (missing or bad snippet)
- Modify your storage group using the commands below. Refer to the QoreStor Command Line Reference Guide for more information.
storage_group --show [--name <name>] [--verbose]
storage_group --update --name <name> [--compression_mode <fast|best>]
storage_group --encryption --name <name> [--set <ON | OFF>] [--mode <static|internal> <--interval <7 days to 70 years>]
storage_group --setpassphrase --name <name>
Deleting a storage group
Before you can delete a storage group, you must first delete the containers in the storage group. See Deleting a container for more information.
Deleting a storage group from the GUI
To delete a storage group, complete the following steps.
- In the navigation menu, click Local Storage to expand the menu, then click Storage Groups.
- Find the desired storage group from the displayed list. Click the (ellipsis icon) in the upper-right corner of the storage group's information pane.
- Click Delete.
|
NOTE: You cannot delete the DefaultGroup storage group. |
- When prompted to confirm, click Delete.
Deleting a storage group from the CLI
(missing or bad snippet)
- Delete your storage group using the command below. Refer to the QoreStor Command Line Reference Guide for more information.
storage_group --delete --name <name>