QoreStor 6.0.0 - User Guide

Adding a cloud tier through the GUI

The procedures for adding a cloud tier differ slightly based on the cloud storage provider. Review the procedure for your cloud storage provider:

• Adding a Microsoft Azure cloud tier
• Adding an Amazon S3 cloud tier
• Adding a Wasabi S3 cloud tier
• Adding an S3 Compatible cloud tier

Adding a Microsoft Azure cloud tier

To add a Microsoft Azure cloud storage group, complete the following steps:

1. In the navigation menu, click Cloud Tier.
2. In the Cloud Provider drop-down, select Azure Blob.
3. Provide a container name. This is the name of your existing Azure container.
4. Enter your Cloud Connection String.

   NOTE: The Connection String can be found in your Azure portal under Storage Accounts >Access keys > Connection string.

5. To apply encryption, in the Cloud Tier Encryption section enter the following:
   • Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.

     NOTE: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable.

   • Confirm Passphrase — re-enter the passphrase used above.
6. Click Configure. A Cloud Storage Group will be created.
7. To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a Cloud Tiering policy.

Adding an Amazon S3 cloud tier

To add a cloud storage group, complete the following steps:

1. In the navigation menu, click Cloud Tier.
2. In the Cloud pane, click Configure to add a cloud tier.
3. In the Cloud Provider drop-down, select AWS S3.
4. Provide the name for your S3 bucket.
5. Enter your Connection String using one of the two methods below:
   • Default - this option will compile your connection string into the correct format using the inputs below.
     • Access key - The access key is typically 20 upper-case English characters
     • Secret key - The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
     • Region - The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
   • Custom - this option allows you to enter your connection string with additional parameters.
     • Your connection string uses the following syntax:

       "accesskey=<ABDCEWERS>;secretkey=< >; loglevel=warn; region=<aws-region>;"

       Please note the following:

       1. The access key is typically 20 upper-case English characters
       2. The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
       3. The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region

       An example of a connection string with this syntax follows. Logically, each connection string is unique.

       accesskey=AKIARERFUCFODHFJUCWK;secretkey=p+8/T+o5WeZkX11QbuPazHX1IdWbwgFplxuVlO8J;loglevel=warn;region=eu-central-1;

6. To apply encryption, in the Cloud TierEncryption section enter the following:
   • Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.

     NOTE: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable.

   • Confirm Passphrase — re-enter the passphrase used above.

7. Click Configure. A Cloud Storage Group will be created.
8. To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a Cloud Tiering policy.

Adding a Wasabi S3 cloud tier

To add a cloud storage group, complete the following steps:

1. In the navigation menu, click Cloud Tier.
2. In the Cloud pane, click Configure to add a cloud tier.
3. In the Cloud Provider drop-down, select Wasabi S3.
4. Provide a container name. This is the existing name of your container in your cloud platform.
5. Enter your Connection String using one of the two methods below:
   • Default - this option will compile your connection string into the correct format using the inputs below.
     • Access key - The access key is typically 20 upper-case English characters
     • Secret key - The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
     • Region - The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
     • Endpoint - If you are using VPC endpoints, enter the correct endpoint information.
   • Custom - this option allows you to enter your connection string with additional parameters.
     • Your connection string uses the following syntax:

       "accesskey=<ABDCEWERS>;secretkey=< >; loglevel=warn; region=<aws-region>;"

       Please note the following:

       1. The access key is typically 20 upper-case English characters
       2. The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
       3. The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region

       An example of a connection string with this syntax follows. Logically, each connection string is unique.

       accesskey=AKIARERFUCFODHFJUCWK;secretkey=p+8/T+o5WeZkX11QbuPazHX1IdWbwgFplxuVlO8J;loglevel=warn;region=eu-central-1;

6. To apply encryption, select Encryption and enter the following:
   • Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.

     NOTE: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable.

   • Confirm Passphrase — re-enter the passphrase used above.
7. Click Configure. A Cloud Storage Group will be created.
8. To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a Cloud Tiering policy.