Veritas Enterprise Vault™ Setting up File System Archiving (FSA)

To prepare a Celerra/VNX device for FSA

1. Log on to the Celerra/VNX Control Station.
2. Ensure that the Celerra/VNX device is configured to support alternate data streams (ADS), which Enterprise Vault uses to indicate archive points.

   The Celerra/VNX shadow stream parameter controls support for ADS:

   • If the shadow stream parameter is set to 1, ADS support is enabled. 1 is the default value.

   • If the shadow stream parameter is set to 0, ADS is disabled.

   To determine the current value of the shadow stream parameter, enter the following command on the Celerra/VNX Network Server:

   server_param server_x -facility shadow -info stream

   Where server_x is the name of the Data Mover.

   The command returns information about the parameter, including its current value.

   If the current value is not 1, enter the following command on the Celerra/VNX Network Server:

   server_param server_x -facility shadow -modify stream -value 1

   Where server_x is the name of the Data Mover.

3. Add a Celerra/VNX account for Enterprise Vault to use for authentication on the Celerra/VNX device, by entering the following command:

   /nas/sbin/server_user server_x -add -md5 -passwd DataMover_user_name

   Where:

   server_x is the name of the Data Mover.

   DataMover_user_name is the name of the account. This user is a Data Mover user, not a domain user.

   Note the following:

   • Specify the full path for the command, /nas/sbin/server_user.

   • You require root privileges to execute this command.

   • If the system prompts you for a User ID and a Group ID, a suitable number in both cases is 1000, unless you use this value elsewhere.

   • If the system prompts you for a home directory, press Enter to continue, without specifying a directory.

   • When the system prompts you for a password, enter a suitable password for the user account.

4. Enable the file system for Celerra/VNX FileMover using this command syntax:

   fs_dhsm -modify fs_name -state enabled

   Where:

   fs_name is the name of the file system on the Celerra/VNX.

   Note:

   If you do not want to use placeholder shortcuts with the Celerra/VNX, you can omit steps 5 to 8.

5. Configure the HTTP server on the Data Mover to accept Celerra/VNX FileMover API connections, by using the following command:

   server_http server_x -append dhsm -users DataMover_user_name -hosts ip_address_policy_engine

   Where:

   server_x is the name of the Data Mover.

   DataMover_user_name is the name of the Data Mover account that you want Enterprise Vault to use for authentication.

   ip_address_policy_engine is the IP address of the computer that runs the Enterprise Vault FSA task that will process the Celerra/VNX device.

   The command also tests the connectivity between the Celerra/VNX device and the Enterprise Vault server over HTTP.

   If you intend to configure FSA Reporting for the Celerra/VNX device, the Data Mover must also accept connections from the computer that acts as the FSA Reporting proxy server.

   See "Preparing a Celerra/VNX device to work with an FSA Reporting proxy server" in the Reporting guide.

6. Run the following command to make sure that the connection is active:

   server_http server_x -service DHSM -start

   Where server_x is the name of the Data Mover.

7. Configure an HTTP or HTTPS connection to use for recall requests, using this command syntax:

   fs_dhsm -connection fs_name -create -type http|https [-read_policy_override setting] -secondary ev_url -user user -password user_password -cgi n [-httpport|httpsport port_number]

   Where:

   fs_name is the name of the Celerra/VNX file system.

   -type specifies the connection type (http or https).

   -read_policy_override is an optional parameter to set the pass-through behavior for placeholder shortcuts.

   See Configuring Celerra/VNX pass-through behavior for placeholder shortcuts.

   ev_url is the URL of the Enterprise Vault Web Access application. The Celerra/VNX is case-sensitive, so this URL must use the correct case. You cannot include a port number in the URL.

   See The format of the Web Access application URL in the Celerra/VNX fs_dhsm command.

   user is the Vault Service account that will have access to all the archives from which files are restored.

   user_password is the password to the Vault Service account.

   -httpport or -httpsport specifies the HTTP or HTTPS port number. This parameter is required if the Web Access application uses a port other than the default port (port 80 for HTTP, or port 443 for HTTPS).

8. If you require the Celerra/VNX Data Mover HTTP server to use the Secure Sockets Layer (SSL), configure SSL.

   See Configuring the Data Mover HTTP server to use SSL.

   Note:

   You must use SSL if you enable the following Windows security setting, either in the Windows Local Security Policy or as part of Group Policy:

   System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing

9. Add the Vault Service account as a member of the Administrators group of the Celerra/VNX CIFS server:

   • In Windows, start Computer Management.

   • In the Computer Management console, select Action > Connect to another computer. Enter the name of the CIFS server.

   • Add the Vault Service account to the Administrators group.