PowerProtect Data Manager 19.9 Administration and User Guide

FLR Agent installation on Linux virtual machines

The FLR Agent installation on Linux virtual machines requires that you use the root account, or that you are a user in the operating system's local sudousers list. If credentials for any other user are provided for the target virtual machine, the FLR Agent installation fails, even if this user has privileges similar to a root user.

To allow a non-root user or group to perform the FLR Agent installation:

1. Provide sudo access to the following files at a minimum:
   • rpm command (SLES, RHEL, CentOS) and dpkg command (Debian/Ubuntu)
   • /opt/emc/vproxyra/bin/postinstall.sh
   • /opt/emc/vproxyra/bin/preremove.sh

   Note the following additional requirements:

   • The sudo user or group must be configured for no password prompt.
   • The sudo user or group must be provided with the no requiretty option.
   • To browse files for a file level restore when you have user elevation enabled, you must have the appropriate authority in the guest virtual machine operating system. For example, you must be permitted to run vflrbrowse using sudo without prompting for a password.
   • To perform a file-level restore when you have user elevation enabled, you must have the appropriate authority. For example, you must be permitted to run vflrcopy using sudo without prompting for a password.
2. On the Linux system, create the file /etc/sudoers.d/linuxuser, where linuxuser is the Linux login user, and then add the following contents to this file.

   On CentOS, Red Hat, SuSE, OpenSuSE, and Oracle Linux platforms:

   username ALL=NOPASSWD: /usr/bin/sudo, /usr/bin/rpm, /opt/emc/vproxyra/bin/postinstall.sh, /opt/emc/vproxyra/bin/preremove.sh, /opt/emc/vproxyra/bin/vflrbrowse, /opt/emc/vproxyra/bin/vflrcopy

   Defaults:username !requiretty

   On Ubuntu platforms:

   username ALL=NOPASSWD: /usr/bin/sudo, /usr/bin/dpkg, /opt/emc/vproxyra/bin/postinstall.sh, /opt/emc/vproxyra/bin/preremove.sh, /opt/emc/vproxyra/bin/vflrbrowse, /opt/emc/vproxyra/bin/vflrcopy

   Defaults:username !requiretty

Once you complete the FLR Agent installation on the target virtual machine using the root user account or a sudouser with the minimum file access requirements, you can perform file level restore operations as a non-root user on supported Linux platforms. To determine which Linux platforms are supported, review the compatibility information at https://elabnavigator.emc.com/eln/modernHomeDataProtection.

FLR Agent installation on Windows virtual machines

FLR Agent installation on Windows virtual machines requires that you use administrative privileges. If the provided credentials for the target virtual machine do not have administrative privileges, the FLR Agent installation fails.

On Windows, to perform a file-level restore using a non-administrator user, ensure that the FLR Agent is already installed on the target machine using administrative privileges. Otherwise, ensure that an administrative user is specified, and click OK.

Installation of the FLR Agent on User Account Control (UAC) enabled Windows virtual machine requires you to either provide the credentials of the administrator user, or to disable UAC during the FLR Agent installation and then re-enable upon completion.

On Windows versions 7, 8, and 10, the administrator account is disabled by default. To enable the account, complete the following steps:

1. To activate the account, open a command prompt in administrative mode, and then type net user administrator /active: yes.
2. To set a password for the administrator account, go to Control Panel > User Accounts and select the Advanced tab. Initially, the account password is blank.
3. In the User Accounts pane, right-click the user and select Properties, and then clear the Account is disabled option.

To disable UAC during the FLR Agent installation and then re-enable on completion of the installation, complete the following steps:

1. Initiate a file-level restore to launch the FLR Agent installation window. The FLR Agent installation is automatically started during a mount operation if it is not already installed on the destination virtual machine.
2. In the FLR Agent installation window, select the Keep VM Direct FLR on target virtual machine option.
3. Open regedit and change the EnableLUA registry key value at HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System to 0x00000000. By default, this is set to 1.
4. Proceed with the FLR Agent installation.
5. Open regedit and reset the EnableLUA registry key to the previous value to re-enable UAC.