You should perform the following procedures to establish an account in BlueXP. For the service account, you need to create the role as "Account Admin". (Other service account roles do not have the required privileges needed to establish a connection from ONTAP System Manager.)

Create an account in BlueXP

Create a connector in BlueXP

Microsoft Azure
Amazon Web Services (AWS)

Google Cloud Platform (GCP)

Beginning with ONTAP 9.10.1, you can select StorageGrid as a cloud backup provider, but only if BlueXP is deployed on premises. The BlueXP connector must be installed on premises and available through the BlueXP software-as-a-service (SaaS) application.

Subscribe to Cloud Backup Service in BlueXP (requires the appropriate license).
Generate an access key and a secret key using BlueXP.

Register the cluster with BlueXP

You can register the cluster with BlueXP by using either BlueXP or ONTAP System Manager.

Steps

In ONTAP System Manager, go to Protection Overview.
Under Cloud Backup Service, provide the following details:
- Client ID
- Client secret key
Select Register and Continue.

Enable Cloud Backup

After the cluster is registered with BlueXP, you need to enable the Cloud Backup and initiate the first backup to the cloud.

Steps

In ONTAP System Manager, click Protection > Overview, then scroll to the Cloud Backup Service section.
Enter the Client ID and Client Secret.

Beginning with ONTAP 9.10.1, you can learn about the cost of using the cloud by clicking Learn more about the cost of using the cloud.
Click Connect and Enable Cloud Backup Service.

On the Enable Cloud Backup Service page, provide the following details, depending on the provider you selected.

For this cloud provider…	Enter the following data…
Azure	Azure Subscription ID Region Resource group name (existing or new)
AWS	AWS Account ID Access key Secret key Region
Google Cloud Project (GCP)	Google Cloud Project name Google Cloud Access key Google Cloud Secret key Region

For this cloud provider…

Enter the following data…

Azure

Azure Subscription ID
Region
Resource group name (existing or new)

AWS

AWS Account ID
Access key
Secret key
Region

Google Cloud Project (GCP)

Google Cloud Project name
Google Cloud Access key
Google Cloud Secret key
Region

Select a Protection policy:
- Existing policy: Choose an existing policy.
- New Policy: Specify a name and set up a transfer schedule.
  
  Beginning with ONTAP 9.10.1, you can specify whether you want to enable archiving with Azure or AWS.
  
  If you enable archiving for a volume with Azure or AWS, you cannot disable the archiving.
  
  If you enable archiving for Azure or AWS, specify the following:
  - The number of days after which the volume is archived.
  - The number of backups to retain in the archive. Specify “0” (zero) to archive up to the latest backup.
  - For AWS, select the archive storage class.
Select the volumes you want to back up.
Select Save.

Edit the protection policy used for Cloud Backup

You can change which protection policy is used with Cloud Backup.

Steps

In ONTAP System Manager, click Protection > Overview, then scroll to the Cloud Backup Service section.
Click , then Edit.
Select a Protection policy:
- Existing policy: Choose an existing policy.
- New Policy: Specify a name and set up a transfer schedule.
  
  Beginning with ONTAP 9.10.1, you can specify whether you want to enable archiving with Azure or AWS.
  
  If you enable archiving for a volume with Azure or AWS, you cannot disable the archiving.
  
  If you enable archiving for Azure or AWS, specify the following:
  - The number of days after which the volume is archived.
  - The number of backups to retain in the archive. Specify “0” (zero) to archive up to the latest backup.
  - For AWS, select the archive storage class.
Select Save.

Protect new volumes or LUNs on the cloud

When you create a new volume or LUN, you can establish a SnapMirror protection relationship that enables backing up to the cloud for the volume or LUN.

Before you begin

You should have a SnapMirror license.
Intercluster LIFs should be configured.
NTP should be configured.
Cluster must be running ONTAP 9.9.1.

About this task

You cannot protect new volumes or LUNs on the cloud for the following cluster configurations:

The cluster cannot be in a MetroCluster environment.
SVM-DR is not supported.
FlexGroups cannot be backed up using Cloud Backup.

Steps

When provisioning a volume or LUN, on the Protection page in ONTAP System Manager, select the checkbox labeled Enable SnapMirror (Local or Remote).
Select the Cloud Backup policy type.
If the Cloud Backup is not enabled, select Enable Cloud Backup Service.

Protect existing volumes or LUNs on the cloud

You can establish a SnapMirror protection relationship for existing volumes and LUNs.

Steps

Select an existing volume or LUN, and click Protect.
On the Protect Volumes page, specify Backup using Cloud Backup Service for the protection policy.
Click Protect.
On the Protection page, select the checkbox labeled Enable SnapMirror (Local or Remote).
Select Enable Cloud Backup Service.

Restore data from backup files

You can perform backup management operations, such as restoring data, updating relationships, and deleting relationships, only when using the BlueXP interface.