SnapCenter Software 5 Manuals ( CA08871-403 )

SnapCenter Software 5.0 docs

Concepts

SnapCenter overview

Security features

SnapCenter role-based access control (RBAC)

RBAC permissions and roles

Pre-defined SnapCenter roles and permissions

Disaster Recovery

Resources, resource groups, and policies

Prescripts and postscripts

SnapCenter Automation using REST APIs

SnapCenter Server installation

Installation workflow

Prepare for installing the SnapCenter Server

Domain and workgroup requirements

Space and sizing requirements

SAN host requirements

Supported storage systems and applications

Supported browsers

Connection and port requirements

SnapCenter licenses

Authentication methods for your credentials

Storage Virtual Machine connections and credentials

Multi-factor authentication (MFA)

Manage Multi-factor authentication (MFA)

Manage multi-factor authentication (MFA) using Rest API, PowerShell, and SCCLI

Configure MFA in SnapCenter Server using PowerShell, SCCLI, and REST API

Install the SnapCenter Server

Log in to SnapCenter

Configure CA Certificate

Generate CA Certificate CSR file

Import CA Certificates

Get the CA certificate thumbprint

Configure CA certificate with Windows host plug-in services

Configure CA certificate with SnapCenter site

Enable CA Certificates for SnapCenter Server

Configure Active Directory, LDAP, and LDAPS

Register untrusted Active Directory domains

Configure CA client certificate for LDAPS

Configure High Availability

Configure SnapCenter Servers for High Availability using F5

Configure Microsoft Network Load Balancer manually

Switch from NLB to F5 for high availability

High availability for the SnapCenter MySQL repository

Export SnapCenter certificates

Configure role-based access control (RBAC)

Add a user or group and assign role and assets

Add an ONTAP RBAC role using security login commands

Create SVM roles with minimum privileges

Create ONTAP cluster roles with minimum privileges

Configure IIS Application Pools to enable Active Directory read permissions

Configure audit log settings

Add storage systems

Add SnapCenter Standard controller-based licenses

Add SnapCenter Standard capacity-based licenses

Provision your storage system

Provision storage on Windows hosts

Configure LUN storage

Create and manage igroups

Create and manage disks

Create and manage SMB shares

Reclaim space on the storage system

Provision storage using PowerShell cmdlets

Provision storage in VMware environments

Configure secured MySQL connections with SnapCenter Server

Features enabled on your Windows host during installation

Protect Microsoft SQL Server databases

SnapCenter Plug-in for Microsoft SQL Server

SnapCenter Plug-in for Microsoft SQL Server overview

What you can do with the SnapCenter Plug-in for Microsoft SQL Server

SnapCenter Plug-in for Microsoft SQL Server features

Support for Asymmetric LUN Mapping in Windows clusters

Storage types supported by SnapCenter Plug-ins for Microsoft Windows and for Microsoft SQL Server

Storage layout recommendations for SnapCenter Plug-in for Microsoft SQL Server

Minimum ONTAP privileges required for SQL plug-in

Prepare storage systems for SnapMirror and SnapVault replication

Backup strategy for SQL Server resources

Define a backup strategy for SQL Server resources

Type of backups supported

Backup schedules for database plug-ins

Number of backup jobs needed for databases

Backup naming conventions

Backup retention options

How long to retain transaction log backups on the source storage system

Multiple databases on the same volume

Backup copy verification using the primary or secondary storage volume

When to schedule verification jobs

Restoration strategy for SQL Server

Define a restoration strategy for SQL Server

Sources and destinations for a restore operation

SQL Server recovery models supported by SnapCenter

Types of restore operations

Define a cloning strategy for SQL Server

Quick start to install SnapCenter Plug-in for Microsoft SQL Server

Prepare for Snapcenter Server and Plug-in installation

Install SnapCenter Server for Microsoft SQL Server

Install SnapCenter Plug-in for Microsoft SQL Server

Prepare to install the SnapCenter Plug-in for Microsoft SQL Server

Installation workflow for SnapCenter Plug-in for Microsoft SQL Server

Prerequisites to add hosts and install SnapCenter Plug-in for Microsoft SQL Server

Host requirements to install SnapCenter Plug-ins Package for Windows

Set up credentials for the SnapCenter Plug-ins Package for Windows

Configure credentials for an individual SQL Server resource

Configure gMSA on Windows Server 2012 or later

Install SnapCenter Plug-in for Microsoft SQL Server

Add hosts and install the SnapCenter Plug-ins Package for Windows

Install SnapCenter Plug-in for Microsoft SQL Server on multiple remote hosts by using cmdlets

Install the SnapCenter Plug-in for Microsoft SQL Server silently from the command line

Monitor the status of installing Plug-in for SQL Server

Configure CA Certificate

Generate CA Certificate CSR file

Import CA certificate

Get the CA certificate thumbprint

Configure CA certificate with Windows host plug-in services

Enable CA Certificates for plug-ins

Configure Disaster recovery

Disaster recovery of SnapCenter Plug-in for SQL Server

Storage disaster recovery for SnapCenter Plug-in for SQL Server

Failback from SnapCenter Plug-in for SQL Server secondary storage to primary storage

Install SnapCenter Plug-in for VMware vSphere

Prepare for data protection

Prerequisites for using SnapCenter Plug-in for Microsoft SQL Server

How resources, resource groups, and policies are used for protecting SQL Server

Back up SQL Server database, or instance, or availability group

Backup workflow

Determine whether resources are available for backup

Migrate resources to ETERNUS AX/HX Series system

Create backup policies for SQL Server databases

Create resource groups and attach policies for SQL Server

Requirements for backing up SQL resources

Back up SQL resources

Back up SQL Server resource groups

Monitor backup operations

Monitor backup operations in the SnapCenter Jobs page

Monitor operations in the Activity pane

Create a storage system connection and a credential using PowerShell cmdlets

Back up resources using PowerShell cmdlets

Cancel the SnapCenter Plug-in for Microsoft SQL Server backup operations

View SQL Server backups and clones in the Topology page

Remove backups using PowerShell cmdlets

Clean up the secondary backup count using PowerShell cmdlets

Restore SQL Server resources

Restore workflow

Requirements for restoring a database

Restore SQL Server database backups

Restore an SQL Server database from secondary storage

Reseed Availability Group databases

Restore and recover resources using PowerShell cmdlets

Monitor restore operations

Cancel restore operations

Clone SQL Server database resources

Clone from a SQL Server database backup

Clone backups using PowerShell cmdlets

Perform Clone Lifecycle

Monitor clone operations in SnapCenter

Cancel clone operations

Protect SAP HANA databases

SnapCenter Plug-in for SAP HANA Databases

SnapCenter Plug-in for SAP HANA Database overview

What you can do using the SnapCenter Plug-in for SAP HANA Database

SnapCenter Plug-in for SAP HANA Database features

Storage types supported by SnapCenter Plug-in for SAP HANA Database

Minimum ONTAP privileges required

Prepare storage systems for SnapMirror and SnapVault replication

Backup strategy for SAP HANA databases

Define a backup strategy for SAP HANA databases

Automatic discovery of resources on Linux host

Type of backups supported

How SnapCenter Plug-in for SAP HANA Database uses consistency group Snapshot copies

How SnapCenter manages housekeeping of log and data backups

Considerations for determining backup schedules for SAP HANA database

Number of backup jobs needed for SAP HANA databases

Backup naming conventions

Restore and recovery strategy for SAP HANA databases

Define a restore and recovery strategy for SAP HANA resources

Types of restore strategies supported for manually added SAP HANA resources

Types of restore strategies supported for automatically discovered SAP HANA databases

Types of restore operations for auto discovered SAP HANA databases

Types of recovery operations supported for SAP HANA databases

Prepare to install the SnapCenter Plug-in for SAP HANA Database

Installation workflow of SnapCenter Plug-in for SAP HANA Database

Prerequisites for adding hosts and installing SnapCenter Plug-in for SAP HANA Database

Host requirements to install SnapCenter Plug-ins Package for Windows

Host requirements for installing the SnapCenter Plug-ins Package for Linux

Set up credentials for the SnapCenter Plug-in for SAP HANA Database

Configure gMSA on Windows Server 2012 or later

Install the SnapCenter Plug-in for SAP HANA Databases

Add hosts and install plug-in packages on remote hosts

Install SnapCenter Plug-in Packages for Linux or Windows on multiple remote hosts by using cmdlets

Install the SnapCenter Plug-in for SAP HANA Database on Linux hosts by using the command-line interface

Monitor SnapCenter plug-in package installation status

Configure CA Certificate

Generate CA Certificate CSR file

Import CA certificates

Get the CA certificate thumbprint

Configure CA certificate with Windows host plug-in services

Configure the CA Certificate for the SnapCenter SAP HANA Plug-ins service on Linux host

Configure the CA Certificate for the SnapCenter SAP HANA Plug-ins service on Windows host

Enable CA Certificates for plug-ins

Install SnapCenter Plug-in for VMware vSphere

Prepare for data protection

Prerequisites for using the SnapCenter Plug-in for SAP HANA Database

How resources, resource groups, and policies are used for protecting SAP HANA databases

Back up SAP HANA resources

Back up workflow

Configure HDB User Store Key and HDBSQL OS User for the SAP HANA database

Discover resources and prepare multitenant database containers for data protection

Discover the databases automatically

Prepare multitenant database containers for data protection

Add resources manually to the plug-in host

Create backup policies for SAP HANA databases

Create resource groups and attach policies

Back up SAP HANA databases

Back up resource groups

Create a storage system connection and a credential using PowerShell cmdlets for SAP HANA database

Back up databases using PowerShell cmdlets

Monitor backup operations

Monitor backup operations in the SnapCenter Jobs page

Monitor operations in the Activity pane

Cancel the backup operations

View SAP HANA database backups and clones in the Topology page

Restore SAP HANA Databases

Restore workflow

Restore and recover a manually added resource backup

Restore and recover an auto discovered database backup

Restore SAP HANA database using PowerShell cmdlets

Restore resources using PowerShell cmdlets

Monitor restore operations

Clone SAP HANA resource backups

Clone a SAP HANA database backup

Clone SAP HANA database backups using PowerShell cmdlets

Monitor clone operations in SnapCenter

Delete or split SAP HANA database clones after upgrading SnapCenter

Protect Oracle databases

Overview of SnapCenter Plug-in for Oracle Database

What can you do with the Plug-in for Oracle Database

Features of Plug-in for Oracle

Storage types supported by Plug-in for Oracle Database

Prepare storage systems for SnapMirror and SnapVault replication for Plug-in for Oracle

Minimum ONTAP privileges required for Plug-in for Oracle

Install SnapCenter Plug-in for Oracle Database

Installation workflow of SnapCenter Plug-in for Oracle Database

Prerequisites for adding hosts and installing Plug-ins Package for Linux or AIX

Add hosts and install Plug-ins Package for Linux or AIX

Alternate ways to install Plug-ins Package for Linux or AIX

Configure the SnapCenter Plug-in Loader service

Configure CA certificate with SnapCenter Plug-in Loader service on Linux host

Enable CA Certificates for plug-ins

Import data from SnapManager for Oracle and SnapManager for SAP to SnapCenter

Install SnapCenter Plug-in for VMware vSphere

Prepare for protecting Oracle databases

Back up Oracle databases

Backup overview

Backup configuration information

Supported backup configurations

How SnapCenter discovers Oracle databases

Preferred nodes to use

Catalog backups

Predefined environment variables

Backup retention

Backup schedules

Naming conventions

Review backup requirements

Discover Oracle database

Create backup policies

Create resource groups

Back up Oracle resources

Back up resource groups

Monitor backup progress

Other back up operations

Back up using UNIX commands

Cancel backup operations

Mount and unmount database backups

Restore and recover Oracle databases

Restore workflow

Define a restore and recovery strategy for Oracle databases

Predefined environment variables for restore specific prescript and postscript

Requirements for restoring an Oracle database

Restore and recover Oracle database

Restore and recover tablespaces using point-in-time recovery

Restore and recover pluggable database using point-in-time recovery

Restore and recover Oracle databases using UNIX commands

Monitor Oracle database restore operations

Cancel Oracle database restore operations

Clone Oracle database

Define a clone strategy for Oracle databases

Predefined environment variables for clone specific prescript and postscript

Requirements for cloning an Oracle database

Clone an Oracle database

Clone a pluggable database

Clone Oracle database backups using UNIX commands

Split an Oracle Database Clone

Split clone of a pluggable database

Monitor Oracle database clone operations

Refresh a clone

Delete clone of a pluggable database

Manage application volumes

Add application volumes

Backup application volumes

Back up application volume

Back up the application volumes resource group

Clone application volume backup

Protect Windows file systems

SnapCenter Plug-in for Microsoft Windows concepts

SnapCenter Plug-in for Microsoft Windows overview

What you can do with the SnapCenter Plug-in for Microsoft Windows

SnapCenter Plug-in for Windows features

How SnapCenter backs up Windows file systems

Storage types supported by SnapCenter Plug-ins for Microsoft Windows

Minimum ONTAP privileges required for Windows plug-in

Prepare storage systems for SnapMirror and SnapVault replication

Define a backup strategy for Windows file systems

Sources and destinations of clones for Windows file systems

Install SnapCenter Plug-in for Microsoft Windows

Installation workflow of SnapCenter Plug-in for Microsoft Windows

Installation requirements for SnapCenter Plug-in for Microsoft Windows

Add hosts and install SnapCenter Plug-in for Microsoft Windows

Install SnapCenter Plug-in for Microsoft Windows on multiple remote hosts using PowerShell cmdlets

Install the SnapCenter Plug-in for Microsoft Windows silently from the command line

Monitor SnapCenter plug-in package installation status

Configure CA certificate

Generate CA Certificate CSR file

Import CA certificates

Get the CA certificate thumbprint

Configure CA certificate with Windows host plug-in services

Enable CA Certificates for plug-ins

Install SnapCenter Plug-in for VMware vSphere

Back up Windows file systems

Backup workflow

Determine resource availability for Windows file systems

Create backup policies for Windows file systems

Create resource groups for Windows file systems

Back up a single resource on demand for Windows file systems

Back up resource groups for Windows file systems

Create a storage system connection and a credential using PowerShell cmdlets

Back up resources using PowerShell cmdlets

Monitor backup operations

Cancel the backup operations

View related backups and clones in the Topology page

Remove backups using PowerShell cmdlets

Clean up the secondary backup count using PowerShell cmdlets

Restore Windows file systems

Restore Windows file system backups

Restore and recover resources using PowerShell cmdlets

Monitor restore operations

Cancel restore operations

Clone Windows file systems

Clone from a Windows file system backup

Clone backups using PowerShell cmdlets

Monitor clone operations

Cancel clone operations

Protect Microsoft Exchange Server databases

SnapCenter Plug-in for Microsoft Exchange Server concepts

What you can do with SnapCenter Plug-in for Microsoft Exchange Server

Storage types supported by SnapCenter Plug-in for Microsoft Windows and for Microsoft Exchange Server

Minimum ONTAP privileges required

Prepare storage systems for SnapMirror and SnapVault replication

Define a backup strategy for Exchange Server resources

Define a restore strategy for Exchange databases

Install SnapCenter Plug-in for Microsoft Exchange Server

Installation workflow of SnapCenter Plug-in for Microsoft Exchange Server

Prerequisites to add hosts and install SnapCenter Plug-in for Microsoft Exchange Server

Set up credentials for SnapCenter Plug-in for Windows

Configure gMSA on Windows Server 2012 or later

Add hosts and install Plug-in for Exchange

Install Plug-in for Exchange from the SnapCenter Server host using PowerShell cmdlets

Install the SnapCenter Plug-in for Exchange silently from the command line

Monitor SnapCenter plug-in package installation status

Configure CA Certificate

Generate CA Certificate CSR file

Import CA certificates

Get the CA certificate thumbprint

Configure CA certificate with Windows host plug-in services

Enable CA Certificates for plug-ins

Configure SnapManager 7.x for Exchange and SnapCenter to coexist

Install SnapCenter Plug-in for VMware vSphere

Prepare for data protection

Back up Exchange resources

Backup workflow

Exchange database and backup verification

Determine whether Exchange resources are available for backup

Create backup policies for Exchange Server databases

Create resource groups and attach policies for Exchange Servers

Back up Exchange databases

Back up Exchange resources groups

Create a storage system connection and a credential using PowerShell cmdlets for Exchange Server

Back up Exchange resources using PowerShell cmdlets

Monitor backup operations

Cancel backup operations for Exchange database

Remove Exchange backups using PowerShell cmdlets

View Exchange backups in the Topology page

Restore Exchange resources

Restore workflow

Requirements for restoring an Exchange database

Restore Exchange databases

Granular recovery of mails and mailbox

Restore an Exchange Server database from secondary storage

Restore Exchange resources using PowerShell cmdlets

Reseed a passive Exchange node replica

Reseed a replica using PowerShell cmdlets for Exchange database

Monitor restore operations

Cancel restore operations

Protect Custom applications

SnapCenter Custom Plug-ins

SnapCenter Custom Plug-ins overview

What you can do with the SnapCenter Custom Plug-ins

SnapCenter Custom Plug-ins features

Storage types supported by SnapCenter Custom Plug-ins

Minimum ONTAP privileges required for custom plug-in

Prepare storage systems for SnapMirror and SnapVault replication

Define a backup strategy

Backup strategy for custom plug-ins

Backup schedules of custom plug-in resources

Number of backup jobs needed

Types of restore strategies supported for manually added custom plug-in resources

Develop a plug-in for your application

PERL-based development

Custom plug-in in SnapCenter

Prepare to install SnapCenter Custom Plug-ins

Installation workflow of SnapCenter Custom Plug-ins

Prerequisites for adding hosts and installing SnapCenter Custom Plug-ins

Host requirements to install SnapCenter Plug-ins Package for Windows

Host requirements for installing the SnapCenter Plug-ins Package for Linux

Set up credentials for SnapCenter Custom Plug-ins

Configure gMSA on Windows Server 2012 or later

Install the SnapCenter Custom Plug-ins

Add hosts and install plug-in packages on remote hosts

Install SnapCenter Plug-in Packages for Linux or Windows on multiple remote hosts by using cmdlets

Install the SnapCenter Custom Plug-ins on Linux hosts by using the command-line interface

Monitor SnapCenter plug-in package installation status

Configure CA Certificate

Generate CA Certificate CSR file

Import CA certificates

Get the CA certificate thumbprint

Configure CA certificate with Windows host plug-in services

Configure the CA Certificate for the SnapCenter Custom Plug-ins service on Linux host

Configure the CA Certificate for the SnapCenter Custom Plug-ins service on Windows host

Enable CA Certificates for plug-ins

Prepare for data protection

Prerequisites for using the SnapCenter Custom Plug-ins

How resources, resource groups, and policies are used for protecting custom plug-in resources

Back up custom plug-in resources

Back up workflow

Add resources to SnapCenter Custom Plug-ins

Create policies for custom plug-in resources

Create resource groups and attach policies

Back up individual custom plug-in resources

Back up resource groups of custom plug-in resources

Create a storage system connection and a credential using PowerShell cmdlets

Back up resources using PowerShell cmdlets

Monitor backup operations

Cancel the backup operations

View custom plug-in resource related backups and clones in the Topology page

Restore custom plug-in resources

Restore workflow

Restore a resource backup

Restore resources using PowerShell cmdlets

Monitor restore operations

Clone custom plug-in resource backups

Clone from a backup

Clone backups using PowerShell cmdlets

Monitor clone operations in SnapCenter

Protect Unix file systems

Overview of SnapCenter Plug-in for Unix file systems

Install SnapCenter Plug-in for Unix file systems

Prerequisites for adding hosts and installing Plug-ins Package for Linux

Add hosts and install Plug-ins Package for Linux

Configure the SnapCenter Plug-in Loader service

Configure CA certificate with SnapCenter Plug-in Loader service on Linux host

Enable CA Certificates for plug-ins

Install SnapCenter Plug-in for VMware vSphere

Prepare for protecting Unix file systems

Back up Unix file systems

Discover UNIX file systems

Create backup policies

Create resource groups

Back up UNIX file systems

Back up resource groups

Monitor backup progress

Restore and recover Unix file systems

Restore and recover Unix file systems

Monitor Unix file systems restore operations

Clone Unix file systems

Clone Unix file systems

Monitor Unix file systems clone operations

Manage SnapCenter Server and plug-ins

View dashboard

Overview of dashboard

How to view information on the dashboard

Request status reports of the jobs from the dashboard

Request reports of the protection status from the dashboard

Operations supported from the Resources page

Manage policies

Manage resource groups

Monitor jobs, schedules, events, and logs

Overview of SnapCenter reporting capabilities

Manage the SnapCenter Server repository

Manage resources of untrusted domains

Manage the storage system

Manage EMS data collection

Upgrade SnapCenter Server and plug-ins

Configure SnapCenter to check for available updates

Upgrade Workflow

Upgrade the SnapCenter Server

Upgrade your plug-in packages

Tech refresh

Tech refresh of SnapCenter Server host

Tech refresh of SnapCenter plug-in hosts

Tech refresh of storage system

Uninstall SnapCenter Server and plug-ins

Uninstall SnapCenter plug-in packages

Prerequisites for removing a host

Uninstall plug-ins using the SnapCenter GUI

Uninstall Windows plug-ins using the PowerShell cmdlet

Uninstall plug-ins locally on a host

Uninstall plug-ins package for Linux or AIX using CLI

Uninstall the SnapCenter Server

Automate using REST APIs

Overview of REST APIs

How to access SnapCenter REST API natively

REST web services foundation

Basic operational characteristics

Input variables controlling an API request

Interpretation of an API response

REST APIs supported for SnapCenter Server and plug-ins

How to access REST APIs using the Swagger API web page

Get started with the REST API

to Japanese version

Configure gMSA on Windows Server 2012 or later

Windows Server 2012 or later enables you to create a group Managed Service Account (gMSA) that provides automated service account password management from a managed domain account.

Before you begin

You should have a Windows Server 2012 or later domain controller.
You should have a Windows Server 2012 or later host, which is a member of the domain.

Steps

Create a KDS root key to generate unique passwords for each object in your gMSA.
For each domain, run the following command from the Windows domain controller: Add-KDSRootKey -EffectiveImmediately
Create and configure your gMSA:
1. Create a user group account in the following format:
  domainName\accountName$
2. Add computer objects to the group.
3. Use the user group you just created to create the gMSA.
  
  For example,
  New-ADServiceAccount -name <ServiceAccountName> -DNSHostName <fqdn> -PrincipalsAllowedToRetrieveManagedPassword <group> -ServicePrincipalNames <SPN1,SPN2,…>
4. Run Get-ADServiceAccount command to verify the service account.

Configure the gMSA on your hosts:

Enable the Active Directory module for Windows PowerShell on the host where you want to use the gMSA account.

To do this, run the following command from PowerShell:

PS C:\> Get-WindowsFeature AD-Domain-Services

Display Name                           Name                Install State
------------                           ----                -------------
[ ] Active Directory Domain Services   AD-Domain-Services  Available


PS C:\> Install-WindowsFeature AD-DOMAIN-SERVICES

Success Restart Needed Exit Code      Feature Result
------- -------------- ---------      --------------
True    No             Success        {Active Directory Domain Services, Active ...
WARNING: Windows automatic updating is not enabled. To ensure that your newly-installed role or feature is
automatically updated, turn on Windows Update.

Restart your host.
Install the gMSA on your host by running the following command from the PowerShell command prompt: Install-AdServiceAccount <gMSA>
Verify your gMSA account by running the following command: Test-AdServiceAccount <gMSA>

Assign the administrative privileges to the configured gMSA on the host.
Add the Windows host by specifying the configured gMSA account in the SnapCenter Server.

SnapCenter Server will install the selected plug-ins on the host and the specified gMSA will be used as the service log on account during the plug-in installation.