Recovery Manager for AD Disaster Recovery Edition 10.2.1 - User Guide

Editing Cloud Storage

To edit the properties of a registered Cloud Storage.

1. In the Recovery Manager for Active Directory console, expand the Storage node.
2. Select the Cloud Storage node in the console tree.
3. In the Cloud Storage pane, right-click the cloud storage that you want to edit, and select Properties.
4. In the Properites dialog box edit the Display Name, Azure Storage Account Connection String and Container fields.
5. Select the checkbox for one or more computer collections in the Backups from selected collections will be copied to the cloud storage list. All available computer collections will be displayed. Backups from selected computer collections will be copied to the Cloud Storage.

6. Click OK

Removing Cloud Storage

To remove a Cloud Storage from Recovery Manager for Active Directory console

1. In the Recovery Manager for Active Directory console, expand the Storage node.
2. Select the Cloud Storage node in the console tree.
3. In the Cloud Storage pane, select the registered Cloud storage account to be removed, right-click and select Remove.
4. Select Yes to the confirmation message.

Cloud Storage Backup

After a backup creation session completes for a computer collection and the backup is saved to configured primary storage locations (Tier 1), an upload session will be started to copy the backup to all cloud storage locations. Recovery Manager for Active Directory supports multiple Cloud Storage locations per computer collection.

The backup upload session is created and managed with the Quest Recovery Manager Cloud Storage service on the Recovery Manager console machine. Each backup upload session is displayed in the Backup Upload Sessions pane. For each session, you can view the backup file path, upload location, creation timestamp, finished timestamp, and the status of the upload.

To view a backup upload sessions for a cloud storage account

1. In the Recovery Manager for Active Directory console, expand the Storage node.
2. Select the Cloud Storage node in the console tree.
3. Select the registered cloud storage in the Cloud Storage pane. The backup upload sessions for the selected cloud storage will be displayed in the bottom pane Backup Upload Session. The backup path, upload to path, created timestamp, finished timestamp and current status will be displayed.
4. To filter the upload sessions for the cloud storage, you can select the toggle buttons at the top right corner of the pane.

• Select Total (7 days) to view all upload sessions in the last 7 days.
• Select Queued to view all upload sessions that are waiting in the queue to be processed.
• Select In Progress to view upload sessions that are in progress and backup files are being uploaded.
• Select Completed to view successfull and completed upload sessions.
• Select Failed to view failed upload sessions. Any failed upload sessions can be retried.

To cancel a backup upload session

1. In the Recovery Manager for Active Directory console, expand the Storage node.
2. Select the Cloud Storage node in the console tree.
3. Select the registered cloud storage in the Cloud Storage pane.
4. In the Backup Upload Session pane, select the session with the status of In Progress or Queued, right click and select Cancel.
5. Select Yes on the confirmation dialog.

To retry a backup upload session

1. In the Recovery Manager for Active Directory console, expand the Storage node.
2. Select the Cloud Storage node in the console tree.
3. Select the registered cloud storage in the Cloud Storage pane.
4. In the Backup Upload Session pane, select the failed session, right click and select Retry.

To remove a backup upload session

1. In the Recovery Manager for Active Directory console, expand the Storage node.
2. Select the Cloud Storage node in the console tree.
3. Select the registered cloud storage in the Cloud Storage pane.
4. In the Backup Upload Session pane, select the session, right click and select Remove.
5. Select Yes on the confirmation dialog.

Secure Storage servers

Recovery Manager for Active Directory provides the ability to set up a dedicated secure backup storage server. If you use a Secure Storage server in your environment it helps prevent unauthorized modification or malware attacks on backup data, supporting your key data security and compliance initiatives. For more information on how a Secure Storage server is secured, see Hardening Secure Storage servers below.

Requirements

• Operating system: Microsoft Windows 2016 or higher
• A stand-alone server to be used as your Secure Storage server. This server should be a workgroup server and not joined to an Active Directory domain.
• An account that will be used to deploy the Storage Agent on the Secure Storage server. This account must also be a local Administrator on the Secure Storage server.
• Physical access to the Secure Storage server. Once the server is hardened access with regular methods will be disabled.
• Sufficient storage space on the Secure Storage server for all backup files. For one backup file, the space required is at least the size of the backed-up Active
  Directory database file (Ntds.dit) and the SYSVOL folder plus 40MB for the transaction log files. The space check performed also includes an extra 1 GB to ensure enough space is available.

Best Practices

• We highly recommend using a new, dedicated, clean physical server as your Secure Storage server to help ensure access methods are kept to a minimum.

• Secure additional methods of accessing the Secure Storage server such as console or serial access.

• Recommend the Secure Storage have additional volumes available in addition to the system drive. It is not advised to store backups on the system drive.

User Scenario

Backup data for all domain controllers can be accumulated on primary storage, and at the same time, you can make a copy of your backup data on a Secure Storage server. The Secure Storage agent will pull the backup securely to the Secure Storage server while the firewall on the Secure Storage server remains in place. If disaster strikes, you could lose your backups on primary storage and even your installation of Recovery Manager for Active Directory but your Secure Storage server will remain in place.