Enterprise Vault™ Setting up File System Archiving (FSA)

To prepare a Unity device for FSA using Dell EMC Unity Unisphere VSA

1. Log on to Dell EMC Unity Unisphere VSA.
2. Add a Unity account for Enterprise Vault to use for authentication on the Unity device.

   • Click Update System Settings.

   • On the left-hand pane, click Users and Groups.

   • Select User Management. Click the '+' icon to add a new user.

   • In the Create User or Group dialog box, select Local User, and click Next.

   • Enter the details of the new Unity account, and click Next.

   • Select Storage Administrator and click Next.

   • Click Finish, and then click Close.

   • Click Close to close the Settings dialog box.

3. Enable Distributed Hierarchical Storage Management (DHSM) for the NAS server that will be used as the FSA target.

   • On the left-hand pane, click Storage > File, and then click the NAS Servers tab.

   • Select the NAS server and edit the properties.

   • In the properties window, click the Protection and Events tab.

   • In the left-hand pane, click DHSM.

   • Select the Enable DHSM check box.

   • Enter the details of the Unity Storage Administrator account created in the earlier step.

   • Clear the Enforce HTTP Secure checkbox. HTTPS is not supported.

   • Click Apply to complete this step.

   • Click Close to close the properties dialog box.

4. Edit the properties of all the file systems that corresponding to the NAS server that you want to archive from.

   • Select a File system and edit the properties.

   • Click the Advanced tab.

   • Select the Sync Writes Enabled, Oplocks Enabled, Notify On Write Enabled ,and Notify On Access Enabled check boxes.

   • Click Apply to save the settings.

   • Click Close to close the properties dialog box.

5. In the left-hand pane, click System > Service, and click the Service Tasks tab. Make sure that SSH is enabled.
6. Connect to EMC Unity using SSH (use Management IP and username should be service account name)
7. Configure a DHSM connection to use for recall requests.

   • Run the following command:

     uemcli -u Local/admin -p Unity_Admin_Account_Password /net/nas/dhsmconn create -fs fs_id -secondaryUrl http://EV_Server_FQDN/EnterpriseVault -mode enabled -readPolicy full -secondaryUsername User@Domain -secondaryPassword Password

     For example,

     uemcli -u Local/admin -p p4ssw0rd /net/nas/dhsmconn create -fs fs_1 -secondaryUrl http://evserver.example.local/EnterpriseVault -mode enabled -readPolicy full -secondaryUsername vsa@example.local -secondaryPassword p@ssw0rd

     Where:

     p4ssw0rd is the password of the Unity administrator account.

     fs_1 is the ID of file system attached to the NAS server. To get the ID of the file system use the following as the URL in a web browser: https:// Unity_IP_Or_FQDN/api/types/filesystem/instances?fields=id,name. The output will contain the list of file systems along with their name and IDs. Look for the ID for your file system.

     http://evserver.example.local/EnterpriseVault is the URL of Enterprise Vault Web Access application.

     vsa@example.local is the Vault Service account that will have access to all the archives from which files are restored.

     p@ssw0rdd is the password to the Vault Service account.

   • On the remote certificate prompt, choose Accept and store.

8. Verify that the settings are correctly applied using the following command:

   uemcli -u Local/admin -p Unity_Admin_Password /net/nas/dhsmconn -fs fs_id show

   For example:

   uemcli -u Local/admin -p Admin123# /net/nas/dhsmconn -fs fs_1 show

   The following is an example output:

   Storage system address: 127.0.0.1
   Storage system port: 443
   HTTPS connection
   1: ID = DHSMConnection_1
   File system = fs_1
   Secondary url = http://evserver.example.local/EnterpriseVault
   Secondary port = 80
   Secondary username = vsa@example.local
   Local port =

9. Add the Vault Service account as a member of the Administrators group of the Dell EMC UnityVSA server:

   • In Windows, start Computer Management.

   • In the Computer Management console, select Action > Connect to another computer. Enter the name of the NAS server.

   • Add the Vault Service account to the Administrators group.

To prepare a Unity device for FSA using SSH

1. Connect to EMC Unity using SSH.
2. Add a Unity account for Enterprise Vault to use for authentication on the Unity device, using this command:

   uemcli -u Local/admin -p Unity_Admin_Password /user/account create -name Account_Name -type local -passwdSecure -role storageadmin

   Example:

   uemcli -u Local/admin -p p4ssw0rd /user/account create -name unityaccount -type local -passwdSecure -role storageadmin

   Where:

   p4ssw0rd is the password of the Administrator account on Unity.

   unityaccount is the name of the local Storage Administrator account.

   local is the type of the user account. The new Unity account must be a local user.

   -passwdSecure Prompts you to specify the password and confirm the password when the command runs.

   storageadmin is the role for the new account. The new Unity account must be assigned to the Storage Administrator role.

   The following is an example output:

   Storage system address: 127.0.0.1
   Storage system port: 443
   HTTPS connection
   [Secure] For local users, type the user password.
   Password:
   Confirm password:
   ID = user_unityaccount
   Operation completed successfully.

3. Enable Distributed Hierarchical Storage Management (DHSM) for a NAS server.

   • Get the ID of the file system by using the following as the URL in a web browser:

     https://Unity_IP_Or_FQDN/api/types/filesystem/instances?fields=id,name.

     The output will contain the list of file systems along with their name and IDs. Look for the ID for your file system.

   • Enable DHSM on the NAS server, using following command:

     uemcli -u Local/admin -p Unity_Admin_Password /net/nas/dhsm -server <NAS_id> set -state Enabled -username Storage_Admin_User -passwdSecure -enableHTTPS no

     For example:

     uemcli -u Local/admin -p p4ssw0rd /net/nas/dhsm -server nas_1 set -state Enabled -username unityaccount -passwdSecure -enableHTTPS no

     Where:

     p4ssw0rd is the password of the Administrator account on Unity.

     nas_1 is the ID of the associated NAS server.

     unityaccount is the name of the local Storage Administrator account.

     -passwdSecure Prompts you to specify the password and confirm the password when the command runs.

     The following is an example output:

     Storage system address: 127.0.0.1
     Storage system port: 443
     HTTPS connection
     [Secure] The advanced storage access password.
     Password:
     Confirm password:
     Operation completed successfully.

   • Verify that DHSM is configured correctly, by using the following command:

     uemcli -u Local/admin -p Unity_Admin_Password /net/nas/dhsm -server <NAS_id> show

     For example:

     uemcli -u Local/admin -p Admin123# /net/nas/dhsm -server nas_1 show

     The following is an example output:

     Storage system address: 127.0.0.1
     Storage system port: 443
     HTTPS connection
     1: NAS server = nas_1
     State = Enabled

4. Configure a DHSM connection to use for recall requests.

   • Run the following command:

     uemcli -u Local/admin -p Unity_Admin_Account_Password /net/nas/dhsmconn create -fs fs_id -secondaryUrl http://EV_Server_FQDN/EnterpriseVault -mode enabled -readPolicy full -secondaryUsername User@Domain -secondaryPassword Password

     For example,

     uemcli -u Local/admin -p p4ssw0rd /net/nas/dhsmconn create -fs fs_1 -secondaryUrl http://evserver.example.local/EnterpriseVault -mode enabled -readPolicy full -secondaryUsername vsa@example.local -secondaryPassword p@ssw0rd

     Where:

     p4ssw0rd is the password of the Unity administrator account.

     fs_1 is the ID of file system attached to the NAS server. To get the ID of the file system use the following as the URL in a web browser: https:// Unity_IP_Or_FQDN/api/types/filesystem/instances?fields=id,name. The output will contain the list of file systems along with their name and IDs. Look for the ID for your file system.

     http://evserver.example.local/EnterpriseVault is the URL of Enterprise Vault Web Access application.

     vsa@example.local is the Vault Service account that will have access to all the archives from which files are restored.

     p@ssw0rdd is the password to the Vault Service account.

   • On the remote certificate prompt, choose Accept and store.

5. Verify that the settings are correctly applied using the following command:

   uemcli -u Local/admin -p Unity_Admin_Password /net/nas/dhsmconn -fs fs_id show

   For example:

   uemcli -u Local/admin -p Admin123# /net/nas/dhsmconn -fs fs_1 show

   The following is an example output:

   Storage system address: 127.0.0.1
   Storage system port: 443
   HTTPS connection
   1: ID = DHSMConnection_1
   File system = fs_1
   Secondary url = http://evserver.example.local/EnterpriseVault
   Secondary port = 80
   Secondary username = vsa@example.local
   Local port =

6. Edit the properties of all the file systems that corresponding to the NAS server that you want to archive from, using the following command:

   uemcli -u Local/admin -p Unity_Admin_Password /stor/prov/fs -name File_System_Name set -cifsOpLocks yes -cifsNotifyOnWrite yes -cifsNotifyOnAccess yes -cifsSyncWrites yes

   For example:

   uemcli -u Local/admin -p Admin123# /stor/prov/fs -name TESTFS set -cifsOpLocks yes -cifsNotifyOnWrite yes -cifsNotifyOnAccess yes -cifsSyncWrites yes

   The following is an example output:

   Storage system address: 127.0.0.1
   Storage system port: 443
   HTTPS connection
   ID = res_1
   Operation completed successfully.