Enterprise Vault™ Setting up File System Archiving (FSA)
- About this guide
- About File System Archiving
- About FSA shortcut files
- Steps to configure File System Archiving
- Adding a Windows file server to File System Archiving
- About archiving from Windows Server 2012 or later file servers
- Permissions and privileges required by the Vault Service account on Windows file servers
- Adding a NetApp filer to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Adding a Celerra/VNX device to File System Archiving
- Adding a Dell EMC Unity device to File System Archiving
- Configuring FSA with clustered file servers
- Troubleshooting the configuration of FSA with clustered file servers
- Installing the FSA Agent
- Defining volume and folder policies
- About selecting the shortcut type for an FSA policy
- About FSA policy archiving rules
- Configuring the deletion of archived files on placeholder deletion
- Configuring target volumes, target folders, and archive points
- About adding target volumes, target folders, and archive points for FSA
- About managing archive points
- Archive point properties
- Effects of modifying, moving, or deleting folders
- About deleting target folders, volumes, and file servers
- Configuring pass-through recall for placeholder shortcuts
- Configuring and managing retention folders
- Configuring and running FSA tasks
- Using Run Now to process FSA targets manually
- Configuring file system filtering
- Managing the file servers
- PowerShell cmdlets for File System Archiving
- Appendix A. Permissions and privileges required for the Vault Service account on Windows file servers
- Permissions required by the Vault Service account for the FSA Agent
Preparing a Celerra/VNX device for FSA
This section describes how to prepare a Celerra/VNX device for File System Archiving.
The procedure includes steps to ensure that the Celerra/VNX device is configured to support alternate data streams (ADS). Enterprise Vault uses ADS to indicate archive points. If you intend to use placeholder shortcuts on the Celerra/VNX, you must also enable the FileMover functionality on the Celerra/VNX and configure an HTTP or HTTPS connection for recall requests.
Another section provides example commands for this procedure.
See Example commands to prepare a Celerra/VNX device for FSA .
If you want to configure the pass-through behavior on placeholder recall, read about the read_policy_override parameter before you proceed.
See Configuring Celerra/VNX pass-through behavior for placeholder shortcuts.
Note:
See this technical note on the Veritas Support website for troubleshooting information on the following procedure:
Note:
A Dell EMC restriction prevents archiving from a Celerra/VNX device if the path to the files exceeds 1024 characters.
To prepare a Celerra/VNX device for FSA
- Log on to the Celerra/VNX Control Station.
- Ensure that the Celerra/VNX device is configured to support alternate data streams (ADS), which Enterprise Vault uses to indicate archive points.
The Celerra/VNX shadow stream parameter controls support for ADS:
If the shadow stream parameter is set to 1, ADS support is enabled. 1 is the default value.
If the shadow stream parameter is set to 0, ADS is disabled.
To determine the current value of the shadow stream parameter, enter the following command on the Celerra/VNX Network Server:
server_param server_x -facility shadow -info stream
Where server_x is the name of the Data Mover.
The command returns information about the parameter, including its current value.
If the current value is not 1, enter the following command on the Celerra/VNX Network Server:
server_param server_x -facility shadow -modify stream -value 1
Where server_x is the name of the Data Mover.
- Add a Celerra/VNX account for Enterprise Vault to use for authentication on the Celerra/VNX device, by entering the following command:
/nas/sbin/server_user server_x -add -md5 -passwd DataMover_user_name
Where:
server_x is the name of the Data Mover.
DataMover_user_name is the name of the account. This user is a Data Mover user, not a domain user.
Note the following:
Specify the full path for the command, /nas/sbin/server_user.
You require root privileges to execute this command.
If the system prompts you for a User ID and a Group ID, a suitable number in both cases is 1000, unless you use this value elsewhere.
If the system prompts you for a home directory, press Enter to continue, without specifying a directory.
When the system prompts you for a password, enter a suitable password for the user account.
- Enable the file system for Celerra/VNX FileMover using this command syntax:
fs_dhsm -modify fs_name -state enabled
Where:
fs_name is the name of the file system on the Celerra/VNX.
- Configure the HTTP server on the Data Mover to accept Celerra/VNX FileMover API connections, by using the following command:
server_http server_x -append dhsm -users DataMover_user_name -hosts ip_address_policy_engine
Where:
server_x is the name of the Data Mover.
DataMover_user_name is the name of the Data Mover account that you want Enterprise Vault to use for authentication.
ip_address_policy_engine is the IP address of the computer that runs the Enterprise Vault FSA task that will process the Celerra/VNX device.
The command also tests the connectivity between the Celerra/VNX device and the Enterprise Vault server over HTTP.
If you intend to configure FSA Reporting for the Celerra/VNX device, the Data Mover must also accept connections from the computer that acts as the FSA Reporting proxy server.
See "Preparing a Celerra/VNX device to work with an FSA Reporting proxy server" in the Reporting guide.
- Run the following command to make sure that the connection is active:
server_http server_x -service DHSM -start
Where server_x is the name of the Data Mover.
- Configure an HTTP or HTTPS connection to use for recall requests, using this command syntax:
fs_dhsm -connection fs_name -create -type http|https [-read_policy_override setting] -secondary ev_url -user user -password user_password -cgi n [-httpport|httpsport port_number]
Where:
fs_name is the name of the Celerra/VNX file system.
-type specifies the connection type (http or https).
-read_policy_override is an optional parameter to set the pass-through behavior for placeholder shortcuts.
See Configuring Celerra/VNX pass-through behavior for placeholder shortcuts.
ev_url is the URL of the Enterprise Vault Web Access application. The Celerra/VNX is case-sensitive, so this URL must use the correct case. You cannot include a port number in the URL.
See The format of the Web Access application URL in the Celerra/VNX fs_dhsm command.
user is the Vault Service account that will have access to all the archives from which files are restored.
user_password is the password to the Vault Service account.
-httpport or -httpsport specifies the HTTP or HTTPS port number. This parameter is required if the Web Access application uses a port other than the default port (port 80 for HTTP, or port 443 for HTTPS).
- If you require the Celerra/VNX Data Mover HTTP server to use the Secure Sockets Layer (SSL), configure SSL.
See Configuring the Data Mover HTTP server to use SSL.
Note:
You must use SSL if you enable the following Windows security setting, either in the Windows Local Security Policy or as part of Group Policy:
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
- Add the Vault Service account as a member of the Administrators group of the Celerra/VNX CIFS server:
In Windows, start Computer Management.
In the Computer Management console, select Action > Connect to another computer. Enter the name of the CIFS server.
Add the Vault Service account to the Administrators group.