QoreStor 6.1.0 - User Guide

Adding a Cloud storage group

You can add a cloud tier to QoreStor through either the QoreStor GUI or the command line interface. For more information on Cloud Storage Groups and cloud replication, refer to the topics below:

• Cloud Tiering
• Adding a Cloud Tiering policy
• Editing a cloud tiering policy

Adding a cloud tier through the GUI

The procedures for adding a cloud tier differ slightly based on the cloud storage provider. Review the procedure for your cloud storage provider:

• Adding a Microsoft Azure cloud tier
• Adding an Amazon S3 cloud tier
• Adding a Wasabi S3 cloud tier
• Adding an S3 Compatible cloud tier

Adding a Microsoft Azure cloud tier

To add a Microsoft Azure cloud storage group, complete the following steps:

1. In the navigation menu, click Cloud Tier.
2. In the Cloud Provider drop-down, select Azure Blob.
3. Provide a container name. This is the name of your existing Azure container.
4. Enter your Cloud Connection String.

   NOTE: The Connection String can be found in your Azure portal under Storage Accounts >Access keys > Connection string.

5. To apply encryption, in the Cloud Tier Encryption section enter the following:
   • Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.

     IMPORTANT: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable. If this passphrase is lost or forgotten, data in the cloud will be unrecoverable.

   • Confirm Passphrase — re-enter the passphrase used above.
6. Click Configure. A Cloud Storage Group will be created.
7. To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a Cloud Tiering policy.

Adding an Amazon S3 cloud tier

To add a cloud storage group, complete the following steps:

1. In the navigation menu, click Cloud Tier.
2. In the Cloud pane, click Configure to add a cloud tier.
3. In the Cloud Provider drop-down, select AWS S3.
4. Provide the name for your S3 bucket.
5. Enter your Connection String using one of the two methods below:
   • Default - this option will compile your connection string into the correct format using the inputs below.
     • Access key - The access key is typically 20 upper-case English characters
     • Secret key - The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
     • Region - The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
   • Custom - this option allows you to enter your connection string with additional parameters.
     • Your connection string uses the following syntax:

       "accesskey=<ABDCEWERS>;secretkey=< >; loglevel=warn; region=<aws-region>;"

       Please note the following:

       1. The access key is typically 20 upper-case English characters
       2. The secret key is generated automatically by AWS. It is typically 40 characters, including mixed upper and lower-case and special symbols.
       3. The region specifies the Amazon-specific region in which you want to deploy your backup solution. Your region name can be obtained from https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region

       An example of a connection string with this syntax follows. Logically, each connection string is unique.

       accesskey=AKIARERFUCFODHFJUCWK;secretkey=p+8/T+o5WeZkX11QbuPazHX1IdWbwgFplxuVlO8J;loglevel=warn;region=eu-central-1;

6. To apply encryption, in the Cloud TierEncryption section enter the following:
   • Passphrase — the passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length. It is mandatory to define a passphrase to enable encryption.

     IMPORTANT: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable. If this passphrase is lost or forgotten, data in the cloud will be unrecoverable.

   • Confirm Passphrase — re-enter the passphrase used above.

7. Click Configure. A Cloud Storage Group will be created.
8. To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a Cloud Tiering policy.